Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: qQ8KDkqvKNxVyQNxfreCEAxiKuB35q78uSknkEknE+Y=
Subject key identifier: 26:24:E3:74:2A:E1:A4:50:4D:0C:07:8B:DF:C7:3C:06:CD:85:90:F1
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019D38D32B44DF657616F935C0566CE6F712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1597
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: IwisFMLHRTo40BbudIWRkNSXHIwtTdS1TBEioyrBLZU=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2b:44:df:65:76:16:f9:35:c0:56:6c:e6:f7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=2624e3742ae1a4504d0c078bdfc73c06cd8590f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:f3:55:fd:54:ef:0c:e1:d8:c5:28:82:07:
72:05:2c:60:b6:02:29:3f:db:60:04:a7:d3:02:99:
7c:5e:18:39:c2:d2:1f:8f:78:76:0f:df:75:6a:45:
23:60:5f:04:09:72:0b:44:eb:3a:f0:e1:a9:95:56:
85:fa:8f:88:29:7d:a5:4f:e0:34:20:69:41:1f:88:
15:fa:96:d4:53:66:f6:56:34:c2:5c:c8:f5:c3:b2:
08:c9:37:d8:d2:f1:09:57:10:34:34:d1:c8:17:c6:
c6:f4:1b:94:f3:84:da:81:f8:40:90:3c:22:78:84:
3f:04:c9:86:1e:bc:dd:f8:a2:51:d6:30:9e:20:fd:
7a:fa:14:51:44:34:da:b4:e0:58:03:5d:2d:6c:13:
55:5c:2b:42:76:a0:09:0d:41:e2:9b:1e:88:3a:46:
02:7e:29:0b:4e:a3:da:84:80:8e:b5:2c:09:2c:da:
c0:48:38:e3:3c:6c:e1:33:6d:8d:ae:17:da:fe:b9:
78:bb:a8:26:8c:82:7d:52:4f:f9:96:80:cf:0b:5b:
eb:79:59:4e:00:86:f2:6c:f4:ce:16:6b:d5:51:73:
08:6b:ef:c4:12:a2:02:0a:93:a1:62:db:e8:5e:77:
09:d7:30:09:c7:aa:29:92:fc:c8:97:88:3a:57:74:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:E3:74:2A:E1:A4:50:4D:0C:07:8B:DF:C7:3C:06:CD:85:90:F1
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8c:35:bd:18:73:18:9d:4b:7c:e9:89:fb:36:05:6d:ad:17:
68:ac:4f:f1:d9:a9:05:04:0c:96:ab:80:f7:18:70:94:7c:e2:
38:61:1c:79:9a:17:01:aa:5e:e8:e6:05:7f:d1:63:ee:7d:f1:
f5:5d:09:08:e2:c9:ec:99:71:02:82:a5:63:1c:9c:dd:c8:36:
85:20:5d:74:36:89:43:92:72:fe:94:88:53:4a:67:32:ca:10:
5a:5e:da:73:4f:76:e3:d1:cf:a6:a8:84:99:3e:d0:d6:c0:7b:
6c:99:52:f1:37:5a:55:19:86:9f:92:2c:95:dd:81:ba:07:fb:
fd:02:62:bf:72:2b:e7:5b:f8:19:69:68:1d:3f:55:f4:ea:a5:
c4:ab:6b:ab:fe:48:12:33:05:0a:b6:d0:29:ca:bf:22:f2:ab:
87:1f:bf:ff:1b:d4:74:82:c3:77:a1:de:f9:9d:31:2f:34:43:
a5:0b:d7:8a:fd:ee:55:b7:9d:62:80:e9:b6:9d:38:a1:18:91:
6b:1e:a9:62:6e:cb:37:89:82:0d:a4:a2:0a:02:18:46:8b:5d:
73:0e:41:95:3d:32:43:a9:cb:38:6c:3c:42:f1:3f:0f:19:be:
11:b2:7b:68:c1:3d:9c:d8:b2:f2:79:6d:af:da:b1:1f:48:d9:
a8:28:10:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ytE32V2Fvk1wFZs5vcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl
ZTUyM2YwHhcNMjYwMzI5MDkwMDU2WhcNMjYwMzMwMDkwMDU2WjAzMTEwLwYDVQQD
EygyNjI0ZTM3NDJhZTFhNDUwNGQwYzA3OGJkZmM3M2MwNmNkODU5MGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkDzVf1U7wzh2MUoggdyBSxgtgIp
P9tgBKfTApl8Xhg5wtIfj3h2D991akUjYF8ECXILROs68OGplVaF+o+IKX2lT+A0
IGlBH4gV+pbUU2b2VjTCXMj1w7IIyTfY0vEJVxA0NNHIF8bG9BuU84TagfhAkDwi
eIQ/BMmGHrzd+KJR1jCeIP16+hRRRDTatOBYA10tbBNVXCtCdqAJDUHimx6IOkYC
fikLTqPahICOtSwJLNrASDjjPGzhM22Nrhfa/rl4u6gmjIJ9Uk/5loDPC1vreVlO
AIbybPTOFmvVUXMIa+/EEqICCpOhYtvoXncJ1zAJx6opkvzIl4g6V3TI7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYk43Qq4aRQTQwHi9/HPAbNhZDxMB8GA1UdIwQY
MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct
MGJmNTkwNWIzNWVmLzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm
LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4w1vRhz
GJ1LfOmJ+zYFba0XaKxP8dmpBQQMlquA9xhwlHziOGEceZoXAape6OYFf9Fj7n3x
9V0JCOLJ7JlxAoKlYxyc3cg2hSBddDaJQ5Jy/pSIU0pnMsoQWl7ac09249HPpqiE
mT7Q1sB7bJlS8TdaVRmGn5Isld2Bugf7/QJiv3Ir51v4GWloHT9V9OqlxKtrq/5I
EjMFCrbQKcq/IvKrhx+//xvUdILDd6He+Z0xLzRDpQvXiv3uVbedYoDptp04oRiR
ax6pYm7LN4mCDaSiCgIYRotdcw5BlT0yQ6nLOGw8QvE/Dxm+EbJ7aME9nNiy8nlt
r9qxH0jZqCgQ7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:12 2026 by rpki-client