Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: O9BP8EOGXcf5YVHPn0uyqMFRe935gq/CqGW+J2FQ4Ig=
Subject key identifier: BD:40:C0:EA:C7:B0:F9:02:57:61:36:FA:ED:71:81:5F:03:51:C5:07
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019DCFE2ECF1BB7B55EFB7C3B3E60400CA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 037B
Signing time: Mon 27 Apr 2026 17:00:48 +0000
Manifest this update: Mon 27 Apr 2026 17:00:48 +0000
Manifest next update: Tue 28 Apr 2026 17:00:48 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: VGkXa754MalrUjso+US0mxMm387YA6TJg0aJA8oR+40=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:ec:f1:bb:7b:55:ef:b7:c3:b3:e6:04:00:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Apr 27 17:00:48 2026 GMT
Not After : Apr 28 17:00:48 2026 GMT
Subject: CN=bd40c0eac7b0f902576136faed71815f0351c507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:bc:28:c8:17:f8:a2:f2:a2:d0:35:35:f8:
7f:a1:90:ea:a1:21:ad:80:76:e9:37:ea:3c:ac:08:
74:a4:66:c1:25:60:2b:01:5d:77:40:48:d4:d2:96:
aa:66:84:54:e8:68:82:d4:87:4b:e3:6f:b1:9c:e2:
ca:f6:ee:e2:b3:2c:7d:6b:0c:a9:b5:f3:46:1d:b0:
4d:47:c4:4d:1e:59:a8:e2:4f:b8:34:03:f1:25:d5:
a7:61:bb:d3:85:c2:38:03:f7:55:1b:6c:e6:66:1c:
31:8d:2e:2e:38:37:14:c8:c2:27:06:0e:6a:4f:87:
db:bc:9b:79:c0:98:c3:32:47:c2:c3:eb:06:57:cf:
f6:9d:52:c8:38:e7:b5:83:af:0c:c3:2e:af:46:d4:
cd:e7:ea:b3:27:b0:ba:88:14:ec:2e:58:02:37:c1:
91:b3:2a:5a:6c:2a:a9:56:ea:da:5d:be:7b:da:5d:
60:f9:a3:54:15:2c:72:08:9d:db:87:69:47:3a:06:
54:65:59:80:bf:2d:e8:01:61:71:66:14:8b:31:21:
dd:e4:09:83:62:99:4d:5c:75:6d:07:a0:ab:f9:dc:
13:f1:21:84:15:58:58:47:28:21:23:cb:41:60:f3:
76:da:05:fc:d2:0c:1a:c5:f0:1b:19:50:4b:e3:80:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:C0:EA:C7:B0:F9:02:57:61:36:FA:ED:71:81:5F:03:51:C5:07
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8c:7c:29:ef:2e:a2:4b:a2:e3:60:b1:48:66:42:02:ae:ae:
f0:ff:eb:01:90:3e:5a:9a:42:0b:55:6e:79:a4:37:cc:d3:7c:
17:04:0d:64:da:37:66:df:16:c5:61:e2:b0:75:a8:2a:35:7a:
88:a2:f2:06:42:19:04:c2:1f:72:ee:07:ef:56:bb:99:8f:69:
9a:ab:df:67:8f:8d:75:bb:7b:ac:df:21:fc:50:58:b7:6f:64:
a0:2e:ba:de:1e:5a:b9:38:a6:c7:7e:45:00:5a:22:44:18:16:
dd:2d:c0:3c:a4:32:fc:67:b1:1c:34:9d:69:c2:61:18:5c:ce:
c2:1f:56:c5:94:18:81:ef:b1:31:a8:82:8f:ec:0b:7e:27:e9:
1d:3d:b9:f8:03:9f:6e:df:17:b0:68:a9:bd:34:6b:b9:77:4a:
2f:bc:fb:ea:8d:14:cc:04:72:40:dd:22:c4:ac:d9:f3:97:66:
8b:2d:9a:ff:6c:e3:c8:9b:ee:f8:70:6a:a4:8f:fa:5a:c4:24:
42:ff:45:f3:bc:6f:1e:58:75:43:07:9b:04:56:2b:c2:05:fb:
d4:4d:0b:11:bd:e9:69:fa:6f:54:1d:31:e7:7c:22:de:f5:83:
ea:c6:30:be:84:4d:b7:21:8e:24:ed:40:5b:08:be:c5:0b:11:
10:ab:81:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P4uzxu3tV77fDs+YEAMonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjYwNDI3MTcwMDQ4WhcNMjYwNDI4MTcwMDQ4WjAzMTEwLwYDVQQD
EyhiZDQwYzBlYWM3YjBmOTAyNTc2MTM2ZmFlZDcxODE1ZjAzNTFjNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cS8KMgX+KLyotA1Nfh/oZDqoSGt
gHbpN+o8rAh0pGbBJWArAV13QEjU0paqZoRU6GiC1IdL42+xnOLK9u7isyx9awyp
tfNGHbBNR8RNHlmo4k+4NAPxJdWnYbvThcI4A/dVG2zmZhwxjS4uODcUyMInBg5q
T4fbvJt5wJjDMkfCw+sGV8/2nVLIOOe1g68Mwy6vRtTN5+qzJ7C6iBTsLlgCN8GR
sypabCqpVuraXb572l1g+aNUFSxyCJ3bh2lHOgZUZVmAvy3oAWFxZhSLMSHd5AmD
YplNXHVtB6Cr+dwT8SGEFVhYRyghI8tBYPN22gX80gwaxfAbGVBL44BpgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1AwOrHsPkCV2E2+u1xgV8DUcUHMB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyIx8Ke8u
okui42CxSGZCAq6u8P/rAZA+WppCC1VueaQ3zNN8FwQNZNo3Zt8WxWHisHWoKjV6
iKLyBkIZBMIfcu4H71a7mY9pmqvfZ4+Ndbt7rN8h/FBYt29koC663h5auTimx35F
AFoiRBgW3S3APKQy/GexHDSdacJhGFzOwh9WxZQYge+xMaiCj+wLfifpHT25+AOf
bt8XsGipvTRruXdKL7z76o0UzARyQN0ixKzZ85dmiy2a/2zjyJvu+HBqpI/6WsQk
Qv9F87xvHlh1QwebBFYrwgX71E0LEb3pafpvVB0x53wi3vWD6sYwvoRNtyGOJO1A
Wwi+xQsREKuB1A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:26 2026 by rpki-client