Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: KIVa721pgm28rDXvw1Oi4vc/x+Qt2AkqoOkz+NFu92U=
Subject key identifier: 07:6B:0F:87:32:D4:FE:49:DD:49:44:0A:9E:2D:68:C3:AA:62:6E:6B
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019CB05B24727E3F02A5DCCF762991D3DDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 0765
Signing time: Mon 02 Mar 2026 21:01:28 +0000
Manifest this update: Mon 02 Mar 2026 21:01:28 +0000
Manifest next update: Tue 03 Mar 2026 21:01:28 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: QjVm2E4D210hx9Eq620B5LtoqevICMrhRYPNWU3hNlQ=)
2: hBOwYB4WPoz5Ydpk13_H2gELiUw.roa (hash: mXK7s89fKob65sg2A4oB0uIh32CHyH4+/5qmpuXXrpA=)
3: hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa (hash: x9s4Ba2Dbe9DV3ZvtPtaZKG9KItOC7ypOsJ8cSF3Nho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5b:24:72:7e:3f:02:a5:dc:cf:76:29:91:d3:dd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Mar 2 21:01:28 2026 GMT
Not After : Mar 3 21:01:28 2026 GMT
Subject: CN=076b0f8732d4fe49dd49440a9e2d68c3aa626e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:d6:96:31:35:cc:4f:88:d4:db:8d:4e:ec:
66:94:14:cd:0e:37:5d:e2:66:e1:ae:7a:48:22:5f:
5c:39:1b:46:ef:29:9b:2d:f1:34:b9:38:46:2e:26:
d6:cd:cf:a0:32:f1:ea:fd:92:d3:30:0f:02:da:20:
93:2c:c7:7b:29:0b:58:27:66:fe:af:b7:88:65:9c:
fc:6f:35:22:8f:fa:88:bc:67:6e:ae:cd:9a:ce:a1:
36:fd:b9:2e:8f:50:12:a9:7b:42:52:ed:f5:6a:91:
69:5b:dc:15:db:64:8a:1a:60:5a:05:97:b4:1c:dc:
8c:21:93:d2:84:85:c9:21:0a:10:6a:54:03:f0:19:
93:8a:62:a4:6c:57:ad:d5:45:4e:f4:da:ec:8a:2e:
36:2d:02:1e:24:05:cc:33:0f:20:e1:23:0b:61:44:
cd:83:c3:fc:1d:5d:fd:ad:6e:61:b7:dc:ca:cf:54:
97:e6:10:6f:a1:0e:76:fa:ba:53:43:1b:92:b7:b6:
08:43:0e:e4:d2:fb:bf:0a:a7:fa:2c:20:72:b6:fc:
d4:9b:fc:91:aa:c7:b7:97:2c:7f:0c:ae:7c:6a:7b:
f2:4c:67:98:b8:36:00:63:76:d0:80:39:3d:b2:2b:
69:14:01:52:df:04:61:b0:d4:ea:ea:4e:af:b6:43:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:0F:87:32:D4:FE:49:DD:49:44:0A:9E:2D:68:C3:AA:62:6E:6B
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:88:f5:e6:f7:55:a1:2a:5a:2c:d3:55:61:71:b8:24:fb:42:
3a:5a:c2:26:5e:a6:40:70:6a:79:23:f1:3b:7b:43:69:0f:b8:
54:7d:55:b7:6e:66:af:6a:74:b4:6c:d4:74:93:c5:8a:1e:b6:
70:8d:84:a6:1e:71:ee:10:de:c0:cd:50:d3:62:08:24:d2:e1:
6e:d9:23:ca:fd:53:c9:7b:f1:50:8d:89:19:11:c4:6c:d9:06:
a5:62:89:2e:93:a6:49:14:d9:f4:f5:09:15:e8:6d:81:59:55:
49:9a:fa:5b:7a:2c:09:99:b6:3a:78:dc:1e:5a:18:a0:f3:97:
9b:24:00:aa:a6:d5:98:bd:16:bd:11:82:a2:e9:18:3d:5f:4b:
78:df:fb:5d:2c:91:66:79:b4:89:e1:01:33:09:a6:df:c4:1d:
0e:37:91:e4:48:be:8c:67:90:ee:84:9f:5f:5b:d7:83:c9:7b:
23:11:50:4d:eb:ef:9e:b3:f0:e9:99:68:ea:dd:c7:63:df:24:
97:29:b2:b2:34:71:38:da:ca:f1:5f:57:2e:6c:d6:4d:74:f9:
3c:71:79:5f:6b:6e:5d:25:b0:66:46:8f:ea:c4:18:94:ce:aa:
7f:c2:1c:54:9d:c4:6a:39:73:f3:c3:47:35:46:6d:ac:99:d8:
16:c8:a6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywWyRyfj8CpdzPdimR092iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjYwMzAyMjEwMTI4WhcNMjYwMzAzMjEwMTI4WjAzMTEwLwYDVQQD
EygwNzZiMGY4NzMyZDRmZTQ5ZGQ0OTQ0MGE5ZTJkNjhjM2FhNjI2ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXWljE1zE+I1NuNTuxmlBTNDjdd
4mbhrnpIIl9cORtG7ymbLfE0uThGLibWzc+gMvHq/ZLTMA8C2iCTLMd7KQtYJ2b+
r7eIZZz8bzUij/qIvGdurs2azqE2/bkuj1ASqXtCUu31apFpW9wV22SKGmBaBZe0
HNyMIZPShIXJIQoQalQD8BmTimKkbFet1UVO9Nrsii42LQIeJAXMMw8g4SMLYUTN
g8P8HV39rW5ht9zKz1SX5hBvoQ52+rpTQxuSt7YIQw7k0vu/Cqf6LCBytvzUm/yR
qse3lyx/DK58anvyTGeYuDYAY3bQgDk9sitpFAFS3wRhsNTq6k6vtkOiTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdrD4cy1P5J3UlECp4taMOqYm5rMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4j15vdV
oSpaLNNVYXG4JPtCOlrCJl6mQHBqeSPxO3tDaQ+4VH1Vt25mr2p0tGzUdJPFih62
cI2Eph5x7hDewM1Q02IIJNLhbtkjyv1TyXvxUI2JGRHEbNkGpWKJLpOmSRTZ9PUJ
FehtgVlVSZr6W3osCZm2OnjcHloYoPOXmyQAqqbVmL0WvRGCoukYPV9LeN/7XSyR
Znm0ieEBMwmm38QdDjeR5Ei+jGeQ7oSfX1vXg8l7IxFQTevvnrPw6Zlo6t3HY98k
lymysjRxONrK8V9XLmzWTXT5PHF5X2tuXSWwZkaP6sQYlM6qf8IcVJ3Eajlz88NH
NUZtrJnYFsimyA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:42:05 2026 by rpki-client