Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
File: 2DmRJrYFJVLagB0O5HosfDLnzbw.mft (raw, json)
Hash identifier: Qrp8Z6qZnz3ggQFFPsuMXAFngGyOeagkmV8wvTO8k0w=
Subject key identifier: C6:96:E3:36:07:67:48:86:44:09:A6:CA:6B:49:8E:5C:14:D6:A2:8F
Authority key identifier: D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
Certificate issuer: /CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Certificate serial: 019D37C04E4DDC2E4A84B1888AAE33A4AAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
Manifest number: DC
Signing time: Sun 29 Mar 2026 04:00:42 +0000
Manifest this update: Sun 29 Mar 2026 04:00:42 +0000
Manifest next update: Mon 30 Mar 2026 04:00:42 +0000
Files and hashes: 1: 0zE3UfEHUEziOBAn5MV-3cMOfAI.roa (hash: C69mVu54AG+KnNmbROi8pSxGo/q1kcnt7UFnI0LaEzc=)
2: 2DmRJrYFJVLagB0O5HosfDLnzbw.crl (hash: T2iL3r/7uF8nwJm87aAcKx2JUexAd3qbYe6xxmXKCvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4e:4d:dc:2e:4a:84:b1:88:8a:ae:33:a4:aa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Validity
Not Before: Mar 29 04:00:42 2026 GMT
Not After : Mar 30 04:00:42 2026 GMT
Subject: CN=c696e336076748864409a6ca6b498e5c14d6a28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:7a:c1:d0:ae:b7:07:5f:20:eb:1c:6e:09:
24:e5:1a:93:04:19:ff:55:12:a0:cc:7f:8b:c2:fe:
d5:fc:5d:1f:28:e2:90:86:76:a9:53:ef:b7:1f:24:
e5:bd:22:a1:fb:c2:42:56:b7:2e:61:62:d9:3c:bc:
da:17:54:6f:13:6c:19:2e:55:96:63:4a:51:f7:6b:
7f:cb:0f:58:de:ac:cf:7a:44:d6:b2:66:47:8d:52:
1a:7f:e4:46:a8:16:65:a0:8a:18:ed:99:8a:2b:9d:
bd:c0:c0:48:bc:ff:06:00:ea:df:76:17:78:59:16:
7f:02:33:66:23:1d:81:8b:7d:61:55:d7:0f:56:25:
4a:1f:d8:08:3a:99:db:d2:ee:bf:ad:0c:17:59:da:
4e:4f:eb:87:2e:e0:05:a1:b5:43:6e:48:36:ce:e4:
18:9f:21:89:80:50:3f:df:ee:7a:80:4f:6b:28:63:
8d:f0:19:f1:d5:70:89:76:1d:27:ae:b6:85:9b:01:
48:b7:22:b4:29:43:13:ac:9b:dd:57:fe:d1:75:c8:
34:32:63:62:79:95:66:30:b0:a7:24:60:ad:c6:d2:
e6:0a:3f:62:f5:f1:c4:22:ba:60:e6:0f:a3:02:13:
f0:a2:a8:ad:18:6e:a7:b0:16:fd:16:ed:65:40:1c:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:E3:36:07:67:48:86:44:09:A6:CA:6B:49:8E:5C:14:D6:A2:8F
X509v3 Authority Key Identifier:
keyid:D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:a0:40:de:1f:37:2a:d0:d9:7e:6a:6a:17:e8:16:19:55:
f6:fe:3a:64:f7:15:14:b7:a0:d4:3e:f5:c2:fd:19:d8:c1:7e:
50:e7:3d:27:b7:ff:a5:34:ac:bb:b3:ab:08:b0:f9:5c:e7:a4:
b9:4a:4c:a8:c4:18:d5:df:7d:b9:80:9b:94:ca:e5:6d:84:0c:
06:1b:9f:76:5c:ea:bc:7d:66:ae:71:d9:17:da:47:40:1c:cf:
63:eb:99:91:13:0d:f3:13:1f:aa:ff:86:91:69:5d:82:01:76:
48:2a:14:4a:66:76:d3:ff:29:ee:4e:ee:ad:8d:40:9e:77:aa:
57:08:c6:ff:a9:52:51:d7:7c:3b:9c:fd:e8:c4:cf:d8:f8:bd:
f6:23:21:c7:bb:58:4e:cb:ed:8d:e1:aa:41:5b:92:9d:54:dd:
d5:f7:77:8e:70:fe:79:f1:66:d3:a6:d5:0b:c3:74:1c:28:2f:
58:3d:f5:af:8e:01:13:c7:89:3c:c1:6d:cf:d0:fe:93:25:7d:
78:9b:8c:a6:58:29:31:7b:d3:65:17:15:52:15:07:eb:e4:64:
df:0e:fe:e0:7d:03:a4:54:b3:b8:28:d3:8c:88:24:53:af:a5:
21:d9:36:35:13:e0:89:49:4d:ad:6f:7d:45:13:8a:69:2a:99:
1a:8d:a8:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wE5N3C5KhLGIiq4zpKrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mzk5MTI2YjYwNTI1NTJkYTgwMWQwZWU0N2EyYzdjMzJl
N2NkYmMwHhcNMjYwMzI5MDQwMDQyWhcNMjYwMzMwMDQwMDQyWjAzMTEwLwYDVQQD
EyhjNjk2ZTMzNjA3Njc0ODg2NDQwOWE2Y2E2YjQ5OGU1YzE0ZDZhMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPN6wdCutwdfIOscbgkk5RqTBBn/
VRKgzH+Lwv7V/F0fKOKQhnapU++3HyTlvSKh+8JCVrcuYWLZPLzaF1RvE2wZLlWW
Y0pR92t/yw9Y3qzPekTWsmZHjVIaf+RGqBZloIoY7ZmKK529wMBIvP8GAOrfdhd4
WRZ/AjNmIx2Bi31hVdcPViVKH9gIOpnb0u6/rQwXWdpOT+uHLuAFobVDbkg2zuQY
nyGJgFA/3+56gE9rKGON8Bnx1XCJdh0nrraFmwFItyK0KUMTrJvdV/7Rdcg0MmNi
eZVmMLCnJGCtxtLmCj9i9fHEIrpg5g+jAhPwoqitGG6nsBb9Fu1lQBzaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaW4zYHZ0iGRAmmymtJjlwU1qKPMB8GA1UdIwQY
MBaAFNg5kSa2BSVS2oAdDuR6LHwy5828MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRtUkpyWUZKVkxhZ0IwTzVIb3NmRExuemJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZGIxMGQtMGY0MC00MTUxLWFlMTct
YzFiNjIxNmI3MjY4LzEvMkRtUkpyWUZKVkxhZ0IwTzVIb3NmRExuemJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZGIxMGQtMGY0MC00MTUxLWFlMTctYzFiNjIxNmI3MjY4
LzEvMkRtUkpyWUZKVkxhZ0IwTzVIb3NmRExuemJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3OgQN4f
NyrQ2X5qahfoFhlV9v46ZPcVFLeg1D71wv0Z2MF+UOc9J7f/pTSsu7OrCLD5XOek
uUpMqMQY1d99uYCblMrlbYQMBhufdlzqvH1mrnHZF9pHQBzPY+uZkRMN8xMfqv+G
kWldggF2SCoUSmZ20/8p7k7urY1AnneqVwjG/6lSUdd8O5z96MTP2Pi99iMhx7tY
TsvtjeGqQVuSnVTd1fd3jnD+efFm06bVC8N0HCgvWD31r44BE8eJPMFtz9D+kyV9
eJuMplgpMXvTZRcVUhUH6+Rk3w7+4H0DpFSzuCjTjIgkU6+lIdk2NRPgiUlNrW99
RROKaSqZGo2odw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client