Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier: LVKhIK+y2QMvyAU/ixdhDVuVWPT3+TKBEmcfcH3Gnb0=
Subject key identifier: 41:26:0F:60:90:1E:B0:AD:9A:A8:C4:F6:49:8B:87:53:08:E7:13:00
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 019D390A224DC8F4993369C0F0EEC880F020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number: 0A89
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: 4WS4fKXpNyEuxVS40X3lIN34tqc.roa (hash: YL9+Lx3OpU65I5snabdkjLNWRqNS9J0xl+AZwvIsmMk=)
2: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: IihrzKuQ/j7vuDFVghRuts4VV4SEKUpzDKTPl7gaAsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:22:4d:c8:f4:99:33:69:c0:f0:ee:c8:80:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=41260f60901eb0ad9aa8c4f6498b875308e71300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:d3:f7:87:3f:c6:97:93:b3:e1:92:67:78:
2e:a5:3c:9a:97:3d:0f:46:1f:3e:e1:e8:06:03:e3:
18:59:41:7b:4f:0e:88:12:cb:50:6d:20:1d:cd:8f:
2a:89:40:35:eb:e1:dd:12:64:f6:3b:e8:cc:3d:78:
b9:db:a4:3a:63:fa:9a:b7:55:a2:fa:58:9f:99:a5:
aa:4f:22:e9:1c:95:36:83:bb:d2:12:0b:c8:d5:77:
32:e7:1b:c7:02:e4:d8:79:c5:3c:c0:74:a3:eb:ad:
26:d6:fb:e6:f4:8a:e5:b4:19:56:7d:6c:91:5c:e4:
c7:ff:7f:d1:a5:9a:91:69:72:b5:ae:c8:31:67:a6:
26:8f:9a:6a:a6:58:6a:2a:07:a2:39:a5:a8:c0:21:
2f:11:d4:68:37:28:36:d2:0f:ab:58:2a:23:00:a2:
a9:e5:30:23:0a:9e:b2:47:6c:9a:6f:3b:dd:af:45:
11:ec:72:84:43:15:4e:41:ac:e1:51:92:58:97:11:
45:33:9f:28:18:90:60:64:f1:4a:24:4c:93:6b:af:
ff:d9:f9:e4:41:5e:9b:4f:a2:54:4f:59:50:19:a8:
b5:89:3b:63:6a:8e:d7:45:6a:46:ef:93:b5:2c:7c:
36:1a:4e:d8:7c:87:1a:5c:75:fe:79:85:6d:f8:23:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:0F:60:90:1E:B0:AD:9A:A8:C4:F6:49:8B:87:53:08:E7:13:00
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f4:7c:bf:69:4f:e8:bd:4c:de:d5:8a:ba:be:76:26:4a:de:
1a:73:8c:70:3b:0a:25:57:06:93:16:43:8d:19:e3:ae:de:45:
a4:b3:32:db:81:d7:1a:e5:50:55:e4:bc:df:fa:06:91:4e:e6:
4a:25:cc:59:35:08:29:06:4d:d3:74:e8:10:02:30:29:6a:58:
1e:7d:cb:9b:ee:41:fc:41:3e:d3:6f:05:aa:79:fe:cd:ce:9a:
1e:b9:66:9c:02:2c:6e:d9:c4:82:6d:df:70:73:16:d1:19:a2:
6d:c6:8b:85:49:b1:b9:e9:42:4e:fe:27:aa:71:ad:76:13:30:
83:72:40:cb:84:87:e4:e9:95:3f:e1:6c:16:38:a6:2e:df:9b:
dd:96:87:b5:42:cb:45:7d:8c:45:90:35:d7:a7:7b:00:14:47:
1f:2a:86:f6:70:07:f8:ff:19:e3:02:08:c4:f2:34:1b:8c:e4:
05:a2:57:21:a0:b6:65:5a:89:80:5f:91:58:09:c6:1d:a2:62:
7e:fd:4c:56:14:62:52:e0:74:58:10:21:f9:d1:a0:3a:65:51:
a8:60:74:be:e3:91:0c:4a:94:8d:4b:d0:dc:5e:90:39:a6:0b:
f9:09:58:e0:13:1f:77:c5:b9:a0:bc:43:02:14:69:91:3e:fd:
aa:1f:c1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CiJNyPSZM2nA8O7IgPAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjdjNDkwNDQ3ZjUwNDVjMDIzNjdkYjhkMjFiNGUwODc0
OWZhNzYwHhcNMjYwMzI5MTAwMDU4WhcNMjYwMzMwMTAwMDU4WjAzMTEwLwYDVQQD
Eyg0MTI2MGY2MDkwMWViMGFkOWFhOGM0ZjY0OThiODc1MzA4ZTcxMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5fT94c/xpeTs+GSZ3gupTyalz0P
Rh8+4egGA+MYWUF7Tw6IEstQbSAdzY8qiUA16+HdEmT2O+jMPXi526Q6Y/qat1Wi
+lifmaWqTyLpHJU2g7vSEgvI1Xcy5xvHAuTYecU8wHSj660m1vvm9IrltBlWfWyR
XOTH/3/RpZqRaXK1rsgxZ6Ymj5pqplhqKgeiOaWowCEvEdRoNyg20g+rWCojAKKp
5TAjCp6yR2yabzvdr0UR7HKEQxVOQazhUZJYlxFFM58oGJBgZPFKJEyTa6//2fnk
QV6bT6JUT1lQGai1iTtjao7XRWpG75O1LHw2Gk7YfIcaXHX+eYVt+CPPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEmD2CQHrCtmqjE9kmLh1MI5xMAMB8GA1UdIwQY
MBaAFHNnxJBEf1BFwCNn240htOCHSfp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTIt
NWJhNzU2ZTc4ODY5LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTItNWJhNzU2ZTc4ODY5
LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfR8v2lP
6L1M3tWKur52JkreGnOMcDsKJVcGkxZDjRnjrt5FpLMy24HXGuVQVeS83/oGkU7m
SiXMWTUIKQZN03ToEAIwKWpYHn3Lm+5B/EE+028Fqnn+zc6aHrlmnAIsbtnEgm3f
cHMW0RmibcaLhUmxuelCTv4nqnGtdhMwg3JAy4SH5OmVP+FsFjimLt+b3ZaHtULL
RX2MRZA116d7ABRHHyqG9nAH+P8Z4wIIxPI0G4zkBaJXIaC2ZVqJgF+RWAnGHaJi
fv1MVhRiUuB0WBAh+dGgOmVRqGB0vuORDEqUjUvQ3F6QOaYL+QlY4BMfd8W5oLxD
AhRpkT79qh/Bqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:32 2026 by rpki-client