Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: O1MhcU6+bbi3rplyC5nDZfUxPW1EbiIXZpz358YJBUg=
Subject key identifier: 30:A6:25:1A:0B:2E:28:92:A7:E9:6E:07:08:92:7E:ED:09:71:92:9A
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 019D37C0D9BA1D74425FBFDD1AC4F0D2E14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 084F
Signing time: Sun 29 Mar 2026 04:01:18 +0000
Manifest this update: Sun 29 Mar 2026 04:01:18 +0000
Manifest next update: Mon 30 Mar 2026 04:01:18 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: hjFSkc64VMXX1E2+gMbRbJOkrNcZV8ld90UCnzeNf9U=)
2: yAvipSzqrRMIwGb_dYX551oEf3c.roa (hash: PTrrr2bY67mRScuYX9mwm1OfW9eCtFbaYeGSBUpSsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d9:ba:1d:74:42:5f:bf:dd:1a:c4:f0:d2:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Mar 29 04:01:18 2026 GMT
Not After : Mar 30 04:01:18 2026 GMT
Subject: CN=30a6251a0b2e2892a7e96e0708927eed0971929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:61:e9:66:dc:b4:b3:97:62:29:de:9a:e6:
0b:89:c4:93:0d:ca:9e:dc:69:49:83:b6:d5:6f:b8:
2e:20:c3:90:63:10:45:ba:73:cd:5c:48:7d:0a:5f:
72:75:4d:5c:b4:7a:62:db:1e:f3:19:a8:93:a0:25:
ff:74:dd:36:dd:ef:56:31:96:a9:9c:3c:a8:68:09:
a5:85:70:f5:e6:93:de:10:9e:ab:2b:b8:b2:ea:8a:
b2:67:19:99:3f:15:70:25:f7:6a:ac:48:29:8e:1f:
3f:20:c7:a5:c3:75:1d:67:5d:c6:f6:ec:95:43:c5:
19:81:37:65:99:7d:77:06:20:49:9a:39:75:94:9d:
4a:59:ec:69:ac:39:ae:98:26:d3:fd:ab:04:37:39:
30:f9:46:d6:11:62:6f:77:fe:76:06:1f:3c:61:da:
95:96:69:48:fc:bf:39:57:6b:1b:45:ea:fe:5f:6d:
a8:69:c9:2d:78:54:ad:cf:ae:1d:71:33:d7:99:70:
48:1e:02:fe:d7:2f:16:41:aa:e8:3c:3b:ee:c5:f1:
80:c6:08:64:f6:3f:4f:ac:90:77:e8:7b:83:32:53:
46:60:e0:83:7d:ff:28:d7:ce:ac:36:0e:4d:0a:d0:
70:58:98:7a:13:80:12:e6:fe:7c:6e:a2:00:fa:4d:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:25:1A:0B:2E:28:92:A7:E9:6E:07:08:92:7E:ED:09:71:92:9A
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c0:f5:ef:2f:98:40:97:4f:38:2f:21:b2:bc:2e:b4:40:4d:
93:31:9e:a6:98:5f:02:7e:62:50:cc:44:6c:c6:2f:78:91:8d:
16:56:8e:59:8a:8d:2c:5c:ab:88:9e:86:ee:70:84:2d:64:c8:
57:42:f6:96:17:73:72:9d:19:a4:fe:98:51:bb:97:16:0b:48:
ad:21:00:b0:8b:be:89:db:fe:60:c0:cb:49:13:f5:47:8f:c7:
c5:82:c9:91:5e:15:af:ab:f9:d0:c1:22:08:f5:c1:61:2d:aa:
44:50:73:b9:fa:68:42:6d:91:46:95:33:e9:e7:34:63:20:1f:
7f:b5:2a:e2:89:ea:52:21:92:91:da:45:f7:fa:a8:11:6d:a7:
76:4e:88:f5:e6:ee:f1:38:ed:c6:db:c9:89:ef:70:55:c7:0d:
be:a6:04:49:1a:94:14:cd:ac:fd:20:21:c7:bd:e6:88:b8:44:
88:81:66:73:de:85:9c:30:52:7d:81:34:c3:94:e1:cc:1c:09:
6f:39:1e:11:6c:af:b3:9d:03:5a:ab:b4:c9:e3:f0:cd:ff:a1:
b7:c3:3c:3a:39:26:ff:3a:b4:34:58:d9:95:e4:a9:49:58:08:
34:1a:b1:15:da:6f:34:fb:e4:d0:1f:2b:48:59:c1:8d:64:c5:
98:a1:4a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNm6HXRCX7/dGsTw0uFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy
MzhlZDgwHhcNMjYwMzI5MDQwMTE4WhcNMjYwMzMwMDQwMTE4WjAzMTEwLwYDVQQD
EygzMGE2MjUxYTBiMmUyODkyYTdlOTZlMDcwODkyN2VlZDA5NzE5MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXRh6WbctLOXYinemuYLicSTDcqe
3GlJg7bVb7guIMOQYxBFunPNXEh9Cl9ydU1ctHpi2x7zGaiToCX/dN023e9WMZap
nDyoaAmlhXD15pPeEJ6rK7iy6oqyZxmZPxVwJfdqrEgpjh8/IMelw3UdZ13G9uyV
Q8UZgTdlmX13BiBJmjl1lJ1KWexprDmumCbT/asENzkw+UbWEWJvd/52Bh88YdqV
lmlI/L85V2sbRer+X22oackteFStz64dcTPXmXBIHgL+1y8WQaroPDvuxfGAxghk
9j9PrJB36HuDMlNGYOCDff8o186sNg5NCtBwWJh6E4AS5v58bqIA+k36lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCmJRoLLiiSp+luBwiSfu0JcZKaMB8GA1UdIwQY
MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt
YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5
LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8D17y+Y
QJdPOC8hsrwutEBNkzGepphfAn5iUMxEbMYveJGNFlaOWYqNLFyriJ6G7nCELWTI
V0L2lhdzcp0ZpP6YUbuXFgtIrSEAsIu+idv+YMDLSRP1R4/HxYLJkV4Vr6v50MEi
CPXBYS2qRFBzufpoQm2RRpUz6ec0YyAff7Uq4onqUiGSkdpF9/qoEW2ndk6I9ebu
8TjtxtvJie9wVccNvqYESRqUFM2s/SAhx73miLhEiIFmc96FnDBSfYE0w5ThzBwJ
bzkeEWyvs50DWqu0yePwzf+ht8M8Ojkm/zq0NFjZleSpSVgINBqxFdpvNPvk0B8r
SFnBjWTFmKFKmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:18 2026 by rpki-client