
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: usb9b4zueW1Bjup4Jk24ZpKWeIofn+U6mN6PzH2CKaw=
Subject key identifier: 9E:D3:F4:19:11:79:E2:57:E3:CB:43:6F:0F:3C:AB:AF:5D:19:66:2E
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 019D34F63D10C942C85F83CF00B3F3C976E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 153B
Signing time: Sat 28 Mar 2026 15:00:45 +0000
Manifest this update: Sat 28 Mar 2026 15:00:45 +0000
Manifest next update: Sun 29 Mar 2026 15:00:45 +0000
Files and hashes: 1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: Ns9d5DgvwGkUMgrUhxDlED1nTviuLfdQieWWqxyPwnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:3d:10:c9:42:c8:5f:83:cf:00:b3:f3:c9:76:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Mar 28 15:00:45 2026 GMT
Not After : Mar 29 15:00:45 2026 GMT
Subject: CN=9ed3f4191179e257e3cb436f0f3cabaf5d19662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:7b:df:f0:75:0f:7a:61:0a:d2:e2:de:33:
8d:22:a7:0b:bc:1e:2f:66:00:3e:b0:11:81:41:40:
f8:eb:ed:00:6e:4a:22:92:a5:a1:ba:35:31:15:9b:
de:61:54:1d:e2:95:fd:6d:2a:11:d6:f0:8d:80:a0:
7e:2a:65:96:79:52:85:cb:66:eb:93:ad:de:d0:c4:
a6:b5:82:51:70:8c:b6:bb:46:a1:da:49:e3:2b:c1:
ee:10:da:67:68:d6:ec:cb:74:b3:09:da:00:c8:82:
cf:ee:09:f4:1c:d1:9f:46:e2:96:00:1e:28:e5:96:
20:67:a6:df:4e:e1:ee:3d:4b:35:98:1d:f2:8c:7b:
64:04:6e:dc:20:c8:9a:95:3c:51:3d:e6:a5:ca:15:
6c:f1:2c:12:ca:5f:90:f1:49:d1:f9:44:8c:8c:9d:
84:89:52:46:49:00:32:be:95:65:b6:2d:63:d3:7c:
dd:da:f9:df:1e:40:b2:f9:aa:2d:81:33:72:18:1d:
14:ec:6d:4b:a9:06:91:59:a9:1f:2d:ba:e4:ff:81:
41:d0:2d:35:f9:c0:ee:a8:6f:57:bb:1b:f8:07:2c:
34:c8:a2:9a:1a:76:2d:fa:bb:6e:03:cb:fc:2d:71:
e8:16:a5:0a:e0:7c:68:e4:f2:6c:3d:2d:45:a7:a5:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:F4:19:11:79:E2:57:E3:CB:43:6F:0F:3C:AB:AF:5D:19:66:2E
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:17:f6:65:29:25:ae:4a:ab:5d:d6:40:31:d5:c8:8c:46:68:
9e:04:a2:00:1e:6a:74:d1:a9:85:36:52:67:20:8c:44:d3:3c:
23:4a:5f:e7:c8:cf:02:13:2e:ef:2d:1f:c7:dc:e6:d6:d8:b4:
fc:1f:15:76:5d:4d:91:ff:72:a5:f8:a7:e9:48:78:49:76:a4:
61:d6:ce:1d:30:f6:ad:9e:2e:cc:08:67:c2:23:9c:01:9d:b8:
f3:81:c0:1b:dd:dd:19:fd:7e:76:8d:73:2e:45:a4:e8:b8:69:
9f:ab:26:92:1a:3d:5a:71:82:e3:a0:0b:60:b7:64:bf:dd:41:
f8:5b:06:28:07:d4:8e:00:b2:5e:35:4b:a4:50:cf:7d:73:75:
92:59:b8:82:e4:34:d0:83:e8:c9:fa:eb:e2:4a:7c:62:e9:4f:
5a:a9:ff:84:83:73:e1:03:60:61:0c:99:cc:66:db:6a:5c:c8:
60:eb:cc:b5:aa:2f:2c:94:7e:cb:e3:2b:7f:08:e5:33:c3:de:
12:46:ce:cd:62:43:a9:43:59:8d:e9:aa:6f:a8:6e:cf:67:07:
5f:dc:47:87:33:05:1e:38:c0:10:3a:f0:74:38:84:b9:68:e9:
5f:f9:c2:d6:e4:f7:cf:42:41:b2:c0:94:67:25:b1:9d:95:bf:
a9:42:19:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ009j0QyULIX4PPALPzyXbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjYwMzI4MTUwMDQ1WhcNMjYwMzI5MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZWQzZjQxOTExNzllMjU3ZTNjYjQzNmYwZjNjYWJhZjVkMTk2NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FV73/B1D3phCtLi3jONIqcLvB4v
ZgA+sBGBQUD46+0AbkoikqWhujUxFZveYVQd4pX9bSoR1vCNgKB+KmWWeVKFy2br
k63e0MSmtYJRcIy2u0ah2knjK8HuENpnaNbsy3SzCdoAyILP7gn0HNGfRuKWAB4o
5ZYgZ6bfTuHuPUs1mB3yjHtkBG7cIMialTxRPealyhVs8SwSyl+Q8UnR+USMjJ2E
iVJGSQAyvpVlti1j03zd2vnfHkCy+aotgTNyGB0U7G1LqQaRWakfLbrk/4FB0C01
+cDuqG9Xuxv4Byw0yKKaGnYt+rtuA8v8LXHoFqUK4Hxo5PJsPS1Fp6XrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7T9BkReeJX48tDbw88q69dGWYuMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBf2ZSkl
rkqrXdZAMdXIjEZongSiAB5qdNGphTZSZyCMRNM8I0pf58jPAhMu7y0fx9zm1ti0
/B8Vdl1Nkf9ypfin6Uh4SXakYdbOHTD2rZ4uzAhnwiOcAZ2484HAG93dGf1+do1z
LkWk6Lhpn6smkho9WnGC46ALYLdkv91B+FsGKAfUjgCyXjVLpFDPfXN1klm4guQ0
0IPoyfrr4kp8YulPWqn/hINz4QNgYQyZzGbbalzIYOvMtaovLJR+y+MrfwjlM8Pe
EkbOzWJDqUNZjemqb6huz2cHX9xHhzMFHjjAEDrwdDiEuWjpX/nC1uT3z0JBssCU
ZyWxnZW/qUIZIw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:07 2026 by rpki-client