Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: uvT/kotohyzOrxrzjfFVdAtn4F051XffQJjEOp+AGYY=
Subject key identifier: 09:07:0F:D9:77:09:BF:B4:01:7E:76:22:33:1A:FC:95:A5:2F:61:0D
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 019D3752E9A1068DFEFCB5C6310EE081804B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 02:01:13 +0000
Manifest this update: Sun 29 Mar 2026 02:01:13 +0000
Manifest next update: Mon 30 Mar 2026 02:01:13 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: 7iGhU0YWkHlWuWbAXmzIU6bRHFV9RDy9qQvYHdvVluY=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e9:a1:06:8d:fe:fc:b5:c6:31:0e:e0:81:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Mar 29 02:01:13 2026 GMT
Not After : Mar 30 02:01:13 2026 GMT
Subject: CN=09070fd97709bfb4017e7622331afc95a52f610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:77:4c:c7:f8:bd:71:52:2f:e4:fb:a3:e1:
56:68:39:70:d5:1d:7f:78:af:28:49:99:60:1f:89:
9e:f1:00:a3:95:82:0c:17:44:28:7e:a4:16:64:94:
3c:bc:97:0b:4e:b6:1d:f6:f6:b8:05:3b:1f:d7:73:
e2:eb:1f:85:07:fe:b8:e7:c6:2c:dd:c9:2c:8d:77:
4d:ef:bf:44:c3:64:9f:93:2f:b0:e4:d9:67:2e:e4:
a4:5c:01:59:25:db:05:e0:87:5e:bc:23:06:5d:8a:
6f:fe:7e:f8:84:ac:74:55:1c:f5:ee:b1:3d:04:21:
84:6f:39:57:db:78:56:60:bf:cd:85:29:9a:43:ad:
2e:f2:7c:c6:29:8a:98:ac:1b:31:c6:60:b6:78:f1:
80:66:fb:c1:ee:9a:4f:f9:cf:de:dc:8e:6f:f5:81:
a3:56:41:4c:c1:75:ec:e3:b1:42:b4:32:19:14:1e:
3f:5c:49:13:87:6d:a1:ea:23:76:3f:7b:65:b2:a6:
6b:c7:12:ad:e0:6a:16:99:d0:29:fe:b2:f8:f1:0e:
c8:bd:23:60:27:44:04:82:87:ea:16:d3:c1:75:be:
d6:74:6e:35:e1:c1:ab:4d:2a:99:e0:74:c3:87:aa:
c0:52:4f:c1:31:d8:4e:b5:c3:bc:84:1d:5f:33:1b:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:0F:D9:77:09:BF:B4:01:7E:76:22:33:1A:FC:95:A5:2F:61:0D
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:c7:22:20:e4:66:53:ab:43:37:af:32:2a:a9:51:fe:cd:
d2:52:a3:40:9d:b4:91:5f:60:a7:16:3c:2a:4d:79:ba:c0:8f:
88:0a:51:68:8d:89:70:49:40:66:22:76:2b:a2:a7:f5:80:06:
47:e1:9d:4c:97:72:4a:31:8e:b2:0b:76:e2:99:65:fc:4f:cf:
e4:95:d8:ec:31:a0:5d:18:ec:c0:6a:1b:19:b5:e0:49:60:91:
60:5b:82:53:0e:d1:25:e5:98:3a:b2:86:99:a9:50:a9:05:19:
e9:64:4a:86:87:31:b6:f1:c6:f9:4e:7c:c9:ea:72:78:df:01:
a4:3e:eb:fe:6b:56:53:a0:73:cc:64:79:a7:9d:1f:2a:21:57:
76:72:8c:ea:cc:14:f7:f6:5d:bb:3c:86:cf:b0:45:1f:65:9b:
68:d0:d9:02:ef:25:f7:31:01:59:3d:b1:18:51:1b:2a:e0:1e:
32:cc:d2:4d:9e:82:0f:c2:79:eb:f8:de:89:da:f5:26:cc:b8:
0c:6f:8d:03:8b:4d:9e:f3:ba:b9:b8:26:f4:f5:1f:94:0c:f2:
16:5a:75:19:03:b0:9e:ac:01:98:1f:33:30:59:00:69:74:1c:
b9:68:b6:9e:2e:ad:ab:e2:74:bb:47:5f:f4:de:64:53:20:66:
e0:23:82:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UumhBo3+/LXGMQ7ggYBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODFlNTc3N2NjZTk5MGMwYjJiMGY0YzI5Y2M4ZDJjZjlh
ZmU4M2IwHhcNMjYwMzI5MDIwMTEzWhcNMjYwMzMwMDIwMTEzWjAzMTEwLwYDVQQD
EygwOTA3MGZkOTc3MDliZmI0MDE3ZTc2MjIzMzFhZmM5NWE1MmY2MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SV3TMf4vXFSL+T7o+FWaDlw1R1/
eK8oSZlgH4me8QCjlYIMF0QofqQWZJQ8vJcLTrYd9va4BTsf13Pi6x+FB/6458Ys
3cksjXdN779Ew2Sfky+w5NlnLuSkXAFZJdsF4IdevCMGXYpv/n74hKx0VRz17rE9
BCGEbzlX23hWYL/NhSmaQ60u8nzGKYqYrBsxxmC2ePGAZvvB7ppP+c/e3I5v9YGj
VkFMwXXs47FCtDIZFB4/XEkTh22h6iN2P3tlsqZrxxKt4GoWmdAp/rL48Q7IvSNg
J0QEgofqFtPBdb7WdG414cGrTSqZ4HTDh6rAUk/BMdhOtcO8hB1fMxvGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkHD9l3Cb+0AX52IjMa/JWlL2ENMB8GA1UdIwQY
MBaAFNiB5Xd8zpkMCysPTCnMjSz5r+g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDct
ZDgzNWRlMDhiY2Y2LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDctZDgzNWRlMDhiY2Y2
LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2jHIiDk
ZlOrQzevMiqpUf7N0lKjQJ20kV9gpxY8Kk15usCPiApRaI2JcElAZiJ2K6Kn9YAG
R+GdTJdySjGOsgt24pll/E/P5JXY7DGgXRjswGobGbXgSWCRYFuCUw7RJeWYOrKG
malQqQUZ6WRKhocxtvHG+U58yepyeN8BpD7r/mtWU6BzzGR5p50fKiFXdnKM6swU
9/ZduzyGz7BFH2WbaNDZAu8l9zEBWT2xGFEbKuAeMszSTZ6CD8J56/jeidr1Jsy4
DG+NA4tNnvO6ubgm9PUflAzyFlp1GQOwnqwBmB8zMFkAaXQcuWi2ni6tq+J0u0df
9N5kUyBm4COCgQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:38 2026 by rpki-client