Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: 6FUkVV02S2MJU4fZZeTc0rpWp7fxLbgG2Xr01dlM2sI=
Subject key identifier: F6:35:9B:3D:DC:5F:53:B4:BB:51:B2:12:AF:0D:99:3C:B2:8C:10:51
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 019D38D31F4B71E766087FD11521ECA8BEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: W/1LCF9VphBsGB3LCSFAD6gOALp8KRn0AwubX3nPF1Q=)
2: VEbdeDBfoS7OV3q8Pyt7XMZlTvw.roa (hash: ryGpV2N0yjPTa2J+772hPmPtDVApuFyLbz9EHlqw2ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1f:4b:71:e7:66:08:7f:d1:15:21:ec:a8:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=f6359b3ddc5f53b4bb51b212af0d993cb28c1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:a1:0a:1c:d0:a1:0d:fa:3c:ca:e1:7d:b1:
fc:dc:40:d3:c4:e1:3a:20:f3:52:ff:a6:4d:6b:9d:
49:68:9f:85:c6:15:a4:a1:bb:ff:09:78:68:9b:e6:
ab:7b:1e:5a:7d:14:e2:14:c8:5c:53:c0:7f:11:6c:
65:06:fa:d4:0d:6d:cd:19:51:bc:6a:4d:a4:75:d9:
a1:af:ee:17:cd:59:ca:d5:c1:5a:ce:b9:9e:2b:a2:
dc:16:48:b5:51:46:e6:fc:15:67:69:b7:1f:df:bd:
9f:07:3c:a5:46:a4:31:ae:4a:67:1d:eb:32:cd:86:
61:15:f2:dd:57:cc:0d:46:f2:6a:78:da:e0:b7:63:
15:0a:86:f8:1f:1b:f0:a5:55:f2:11:ac:51:c5:35:
02:e7:4b:1a:c7:55:22:7c:87:c4:a0:7e:b6:25:6b:
f4:60:ea:06:06:e7:2b:2a:74:a5:3e:29:d7:34:44:
a9:c8:ca:6c:ef:1c:6f:e1:1f:b3:bd:0d:d2:54:1d:
3e:10:89:97:bb:d4:0e:3c:b0:cc:92:d8:f2:5e:0e:
9a:2b:d4:6f:c1:9e:5a:4a:3f:76:0f:0e:48:05:e1:
2c:e6:72:10:25:33:0a:75:a4:05:74:a3:f6:2f:c2:
69:73:33:79:c1:60:8a:7b:c9:9d:31:d8:a3:cd:02:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:9B:3D:DC:5F:53:B4:BB:51:B2:12:AF:0D:99:3C:B2:8C:10:51
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:22:0e:88:8d:35:98:5f:32:c6:43:85:59:de:a6:e6:a9:cc:
cc:af:f4:2f:ca:94:fc:f4:9b:93:2b:6f:8e:ad:e8:bf:bd:8d:
9a:04:5a:46:18:35:a7:c5:d0:75:a9:1e:60:ee:bc:c8:59:ee:
ec:e5:8f:69:3d:43:8f:33:af:4b:c1:31:70:19:ef:41:b8:f6:
f4:1e:9a:82:cc:b0:9b:a9:59:ea:96:43:3b:8c:13:5e:bd:3d:
a7:6e:bd:4d:ff:df:09:9e:82:90:7b:cc:54:67:0e:18:f9:7d:
b0:71:ce:13:bc:dc:e3:06:b1:03:92:dd:cd:26:97:51:05:9d:
4b:5a:5f:6c:d5:a5:94:f1:ab:1c:11:53:9f:9f:d5:88:6e:3d:
07:8a:79:06:19:95:72:2c:da:d3:58:b2:0e:b8:a8:da:cc:5b:
38:6c:7e:95:70:15:69:7e:c0:45:2f:71:84:0e:2e:42:a5:aa:
89:37:04:09:1c:87:d4:41:74:9a:ba:5b:f1:6e:ee:fa:cd:ed:
61:34:af:4e:b5:3b:36:a3:c4:ee:37:b8:40:f6:1c:68:2a:d0:
22:fa:bf:ce:ea:0d:13:22:f7:dc:94:c0:dc:e3:6e:08:85:0e:
2f:88:c3:4b:bc:e8:3c:b8:66:0a:b3:96:34:7c:dc:01:0d:db:
41:f0:ca:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040x9LcedmCH/RFSHsqL72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWRhMzIxODQzZjlmYWQxMzhlNjExNWQ4NWJlZThhOTIw
YjhlMWQwHhcNMjYwMzI5MDkwMDUzWhcNMjYwMzMwMDkwMDUzWjAzMTEwLwYDVQQD
EyhmNjM1OWIzZGRjNWY1M2I0YmI1MWIyMTJhZjBkOTkzY2IyOGMxMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNShChzQoQ36PMrhfbH83EDTxOE6
IPNS/6ZNa51JaJ+FxhWkobv/CXhom+arex5afRTiFMhcU8B/EWxlBvrUDW3NGVG8
ak2kddmhr+4XzVnK1cFazrmeK6LcFki1UUbm/BVnabcf372fBzylRqQxrkpnHesy
zYZhFfLdV8wNRvJqeNrgt2MVCob4HxvwpVXyEaxRxTUC50sax1UifIfEoH62JWv0
YOoGBucrKnSlPinXNESpyMps7xxv4R+zvQ3SVB0+EImXu9QOPLDMktjyXg6aK9Rv
wZ5aSj92Dw5IBeEs5nIQJTMKdaQFdKP2L8JpczN5wWCKe8mdMdijzQIepwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY1mz3cX1O0u1GyEq8NmTyyjBBRMB8GA1UdIwQY
MBaAFNsdoyGEP5+tE45hFdhb7oqSC44dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAt
NzM5ZDYyNjY5ZjkxLzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAtNzM5ZDYyNjY5Zjkx
LzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSIOiI01
mF8yxkOFWd6m5qnMzK/0L8qU/PSbkytvjq3ov72NmgRaRhg1p8XQdakeYO68yFnu
7OWPaT1DjzOvS8ExcBnvQbj29B6agsywm6lZ6pZDO4wTXr09p269Tf/fCZ6CkHvM
VGcOGPl9sHHOE7zc4waxA5LdzSaXUQWdS1pfbNWllPGrHBFTn5/ViG49B4p5BhmV
ciza01iyDrio2sxbOGx+lXAVaX7ARS9xhA4uQqWqiTcECRyH1EF0mrpb8W7u+s3t
YTSvTrU7NqPE7je4QPYcaCrQIvq/zuoNEyL33JTA3ONuCIUOL4jDS7zoPLhmCrOW
NHzcAQ3bQfDKsg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:48 2026 by rpki-client