Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: 339bLfIdrPZB9D8CY/lwQ5/Gmr+iQh1eNnRpdjga66s=
Subject key identifier: BB:7F:5D:07:0E:A7:1D:96:5A:37:59:A9:F5:7B:E7:86:8B:F0:21:AB
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019D35D279BB90BE6F0A5E32D4B41B6C9491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 028D
Signing time: Sat 28 Mar 2026 19:01:19 +0000
Manifest this update: Sat 28 Mar 2026 19:01:19 +0000
Manifest next update: Sun 29 Mar 2026 19:01:19 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: qTCbLY1lZhPj694EJVH8yC4KoppXQv0ptV2pA5l9HJw=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d2:79:bb:90:be:6f:0a:5e:32:d4:b4:1b:6c:94:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Mar 28 19:01:19 2026 GMT
Not After : Mar 29 19:01:19 2026 GMT
Subject: CN=bb7f5d070ea71d965a3759a9f57be7868bf021ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:f0:ad:11:28:c9:65:8b:50:8d:4f:02:35:
29:77:e6:00:a6:04:a8:cb:12:30:76:07:fc:df:25:
ec:18:a8:6d:f0:33:f4:33:66:da:5f:9a:70:af:1d:
46:eb:d1:21:59:35:f8:39:11:0e:1f:85:b7:38:96:
30:04:e6:d9:3f:d2:25:e7:6b:86:63:22:4c:a3:14:
e5:05:99:d8:f3:82:44:e7:2a:85:a5:d4:5b:e3:35:
38:ba:d1:3f:f0:21:17:29:10:af:e9:16:6f:4e:1e:
08:1a:a3:60:c2:b9:62:bd:f3:75:8b:3d:34:50:41:
0b:aa:bb:63:71:79:ac:0a:e0:08:e9:4b:f6:87:a7:
2c:1d:cc:18:d0:c6:a0:d9:44:8e:70:45:1d:e5:41:
a3:81:4c:d2:5f:c2:e3:bf:7d:e9:b3:cb:a6:41:9b:
a5:fc:56:09:f7:e7:f9:01:1a:bd:16:b0:e8:33:8a:
7d:61:5c:c5:af:c6:90:aa:bf:ae:e4:11:1d:3b:3d:
86:28:c8:e6:be:a3:e3:16:70:7c:de:0f:40:e6:2c:
ce:76:49:f7:b7:e9:2d:ad:54:3c:c1:05:31:12:40:
3c:c4:ee:d7:f2:79:82:73:4e:9f:26:af:75:dc:fe:
2d:b0:79:de:e2:f3:7f:31:80:44:5c:75:f5:b9:ee:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:5D:07:0E:A7:1D:96:5A:37:59:A9:F5:7B:E7:86:8B:F0:21:AB
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:78:a6:0b:1f:2a:7e:71:5b:fe:21:82:c5:d1:e8:62:1d:3d:
02:b1:38:fd:c8:a3:a1:f3:3a:9c:ce:2d:e0:a6:de:45:63:41:
b9:2d:02:6f:00:a5:0b:74:79:7c:2d:30:1d:19:7a:2e:2e:ab:
70:39:ad:0e:17:48:17:9e:25:b6:a7:fb:a8:6d:a5:49:8d:2e:
26:42:1b:e2:ad:d0:bf:f7:1b:65:6f:23:c6:28:85:63:e0:92:
f8:2d:64:2f:59:81:8a:37:c8:80:83:23:9b:e6:3d:28:ac:dd:
44:38:7c:f2:0e:7a:fe:87:70:3b:65:03:a0:85:ff:24:5f:32:
08:d7:76:f4:16:43:d0:0a:0a:04:e1:92:7e:dc:db:91:70:59:
48:43:b6:bf:2a:5d:d8:e3:87:88:33:d3:57:1b:f2:07:ea:8c:
73:32:0d:6f:2b:d1:fb:10:6b:a5:d1:6b:73:1a:28:06:67:ac:
f1:a8:8a:ce:6f:a7:96:49:54:70:68:2d:64:70:08:47:4a:1a:
76:78:c9:55:35:2a:93:33:c0:1c:cf:a0:ac:ec:49:a1:bd:bb:
66:60:fa:e0:5d:c7:f3:55:19:b3:15:fb:38:a5:d0:d7:09:6f:
f3:86:8e:28:e0:0e:bf:d9:92:3d:c4:04:74:d6:bb:d0:b6:f1:
e7:9f:f1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ010nm7kL5vCl4y1LQbbJSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy
NGVmNjUwHhcNMjYwMzI4MTkwMTE5WhcNMjYwMzI5MTkwMTE5WjAzMTEwLwYDVQQD
EyhiYjdmNWQwNzBlYTcxZDk2NWEzNzU5YTlmNTdiZTc4NjhiZjAyMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8fwrREoyWWLUI1PAjUpd+YApgSo
yxIwdgf83yXsGKht8DP0M2baX5pwrx1G69EhWTX4OREOH4W3OJYwBObZP9Il52uG
YyJMoxTlBZnY84JE5yqFpdRb4zU4utE/8CEXKRCv6RZvTh4IGqNgwrlivfN1iz00
UEELqrtjcXmsCuAI6Uv2h6csHcwY0Mag2USOcEUd5UGjgUzSX8Ljv33ps8umQZul
/FYJ9+f5ARq9FrDoM4p9YVzFr8aQqr+u5BEdOz2GKMjmvqPjFnB83g9A5izOdkn3
t+ktrVQ8wQUxEkA8xO7X8nmCc06fJq913P4tsHne4vN/MYBEXHX1ue5eCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt/XQcOpx2WWjdZqfV754aL8CGrMB8GA1UdIwQY
MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt
NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll
LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3imCx8q
fnFb/iGCxdHoYh09ArE4/cijofM6nM4t4KbeRWNBuS0CbwClC3R5fC0wHRl6Li6r
cDmtDhdIF54ltqf7qG2lSY0uJkIb4q3Qv/cbZW8jxiiFY+CS+C1kL1mBijfIgIMj
m+Y9KKzdRDh88g56/odwO2UDoIX/JF8yCNd29BZD0AoKBOGSftzbkXBZSEO2vypd
2OOHiDPTVxvyB+qMczINbyvR+xBrpdFrcxooBmes8aiKzm+nlklUcGgtZHAIR0oa
dnjJVTUqkzPAHM+grOxJob27ZmD64F3H81UZsxX7OKXQ1wlv84aOKOAOv9mSPcQE
dNa70Lbx55/xtg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 21:45:06 2026 by rpki-client