Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: V8+3ztjOSod9o8xkeaeknGbVa8qYTaymkUH4inMQ9cE=
Subject key identifier: E9:4D:66:E1:72:9A:50:C5:60:4B:92:C1:15:D9:E7:2C:06:04:D2:1B
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019D378925197244D23F1FE1F19411A54853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 136B
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: hxcGIDN5pAgN1TKCWEN3gmxEcHQVcHvSXbYi5XIh86E=)
2: OZMA82xPSJu-yBhBRmE2uQQQB7c.roa (hash: hd/p26xBT3/OwpQY6ul+XP0iSi+M0eAbCh1LP64Oo+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:25:19:72:44:d2:3f:1f:e1:f1:94:11:a5:48:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=e94d66e1729a50c5604b92c115d9e72c0604d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:52:2f:77:c2:d9:e9:08:90:d7:fd:e5:85:
02:bf:61:fc:8c:03:23:c9:d3:a6:bc:a3:4b:68:52:
55:57:c9:0c:e6:94:50:68:83:20:60:43:e9:9c:66:
1f:14:1d:4a:3b:05:7a:aa:9b:9a:2f:22:5d:0e:a5:
5b:bd:74:9f:31:ec:27:bf:08:23:d7:57:d7:19:24:
04:58:87:d3:97:8d:0d:22:91:80:9a:89:37:d8:79:
84:53:80:ef:33:93:1a:23:28:ff:d3:0e:5b:a7:20:
6e:e6:38:99:c2:2c:b9:d1:67:bf:35:5b:3a:be:78:
29:44:af:76:12:3b:43:a1:f9:14:6f:c9:bc:7c:fb:
47:53:77:7b:36:2c:a3:98:56:76:7d:b4:e9:02:23:
a6:b7:70:19:f1:5e:cb:68:09:67:f8:d1:23:a1:f9:
5c:19:fa:5f:70:83:65:7d:f7:a0:7c:51:b6:51:e5:
43:76:1e:02:45:47:cc:1c:77:36:22:a0:cd:c2:5e:
ae:0a:8b:6f:6d:25:ea:4a:ff:db:0f:3c:d7:f8:09:
16:96:1a:04:a4:10:4a:01:3d:47:8f:d9:f4:d1:a9:
e0:57:e6:a0:74:1e:df:a0:e0:44:39:d7:1f:96:12:
53:11:b0:96:36:a0:28:a7:00:61:8c:c2:68:f5:2c:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:66:E1:72:9A:50:C5:60:4B:92:C1:15:D9:E7:2C:06:04:D2:1B
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:5c:8c:c6:8b:2a:9c:1a:7f:41:e2:10:fc:5e:d2:5c:79:
85:af:18:6f:95:f7:2b:2d:93:a9:51:c8:a6:ea:a7:30:65:05:
ad:fa:91:51:b8:96:37:9c:9c:f9:49:e9:cc:2e:9e:b7:66:3a:
28:84:e4:ad:7d:6b:95:60:86:d9:6d:93:e0:cd:d8:e4:9c:2a:
8d:22:7d:ab:04:e3:69:17:c5:03:7a:de:6f:be:47:81:e1:f0:
10:88:d0:67:38:ba:dd:26:5d:7d:4b:76:5a:7e:78:31:76:4a:
76:1f:5d:9b:80:68:f3:20:0a:c9:fb:41:83:1c:33:ff:19:99:
d2:6c:0b:27:95:29:86:af:d0:13:f6:aa:e8:b6:10:a1:09:3f:
05:6b:cd:94:60:f6:9b:ad:c4:d0:b5:5f:c6:17:bf:7a:54:9b:
a7:08:d6:46:e5:31:c7:b8:e8:f1:9d:7f:53:ba:01:eb:12:4e:
b1:2a:ae:4a:45:0c:d3:85:32:c3:3a:18:c2:78:81:99:50:f0:
41:4c:d1:fc:bc:06:0c:b3:06:e5:18:c1:59:ba:84:15:0a:18:
ac:80:11:1f:68:02:be:bb:e4:3d:50:42:96:18:7f:c1:b4:31:
e1:2b:ca:a5:4b:bb:bf:e0:49:dc:f3:f4:5f:a8:a8:ca:2f:f2:
33:74:6e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iSUZckTSPx/h8ZQRpUhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj
ZmYwZWUwHhcNMjYwMzI5MDMwMDI3WhcNMjYwMzMwMDMwMDI3WjAzMTEwLwYDVQQD
EyhlOTRkNjZlMTcyOWE1MGM1NjA0YjkyYzExNWQ5ZTcyYzA2MDRkMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MdSL3fC2ekIkNf95YUCv2H8jAMj
ydOmvKNLaFJVV8kM5pRQaIMgYEPpnGYfFB1KOwV6qpuaLyJdDqVbvXSfMewnvwgj
11fXGSQEWIfTl40NIpGAmok32HmEU4DvM5MaIyj/0w5bpyBu5jiZwiy50We/NVs6
vngpRK92EjtDofkUb8m8fPtHU3d7NiyjmFZ2fbTpAiOmt3AZ8V7LaAln+NEjoflc
GfpfcINlffegfFG2UeVDdh4CRUfMHHc2IqDNwl6uCotvbSXqSv/bDzzX+AkWlhoE
pBBKAT1Hj9n00angV+agdB7foOBEOdcflhJTEbCWNqAopwBhjMJo9Sw0AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlNZuFymlDFYEuSwRXZ5ywGBNIbMB8GA1UdIwQY
MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbFcjMaL
Kpwaf0HiEPxe0lx5ha8Yb5X3Ky2TqVHIpuqnMGUFrfqRUbiWN5yc+UnpzC6et2Y6
KITkrX1rlWCG2W2T4M3Y5JwqjSJ9qwTjaRfFA3reb75HgeHwEIjQZzi63SZdfUt2
Wn54MXZKdh9dm4Bo8yAKyftBgxwz/xmZ0mwLJ5Uphq/QE/aq6LYQoQk/BWvNlGD2
m63E0LVfxhe/elSbpwjWRuUxx7jo8Z1/U7oB6xJOsSquSkUM04UywzoYwniBmVDw
QUzR/LwGDLMG5RjBWbqEFQoYrIARH2gCvrvkPVBClhh/wbQx4SvKpUu7v+BJ3PP0
X6ioyi/yM3RuyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:57 2026 by rpki-client