Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: PFRb+ZpN3EmuqSBFhj6KZgWjMIHhBxtS2853Z6ED0OE=
Subject key identifier: F9:FC:12:5A:C9:2B:98:8C:C5:91:DE:D9:82:4E:8A:33:B1:71:42:42
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019CE5FF2312607E62E081BE6BA116643291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0F10
Signing time: Fri 13 Mar 2026 07:00:28 +0000
Manifest this update: Fri 13 Mar 2026 07:00:28 +0000
Manifest next update: Sat 14 Mar 2026 07:00:28 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: kj6u9DvDXkBLju0b0ab4oJyOPLWOwE9nDWp0FnYYuhI=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:23:12:60:7e:62:e0:81:be:6b:a1:16:64:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Mar 13 07:00:28 2026 GMT
Not After : Mar 14 07:00:28 2026 GMT
Subject: CN=f9fc125ac92b988cc591ded9824e8a33b1714242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:5b:ee:2c:8d:0d:e7:c4:c1:28:90:cb:02:
c4:d5:a0:90:58:3c:e8:50:25:24:0f:46:22:3e:7b:
62:6b:3d:2b:95:85:c9:11:0f:c1:7d:51:f6:2a:e6:
a9:37:81:f6:54:3f:05:27:d0:c1:62:d2:5d:5f:50:
9c:92:cc:bc:03:80:ed:29:df:09:69:08:d9:4a:90:
8d:be:30:46:58:1a:2a:76:5c:93:70:a2:81:f0:1d:
69:1f:e5:6d:e7:0f:84:54:a1:12:7d:af:8b:0a:73:
c1:68:17:df:64:61:41:c4:45:f9:52:ef:c8:49:35:
d0:a7:88:79:9a:25:00:a1:be:65:ed:93:5d:3e:3e:
26:85:47:31:bf:ba:70:f5:eb:6a:1c:33:8a:4e:60:
84:39:eb:86:25:83:41:88:e1:f9:5d:b0:dd:62:53:
2d:06:40:5f:20:4c:be:1e:8c:3b:99:85:ae:c6:04:
82:cd:1c:ca:53:a4:9c:bf:65:96:07:ee:42:5f:a1:
dd:fe:d9:c3:97:f7:bc:9a:d6:c7:4a:4f:d5:b7:28:
7a:7a:b3:98:a8:6c:49:55:d7:06:fa:c3:74:18:75:
eb:9b:73:fb:10:cc:2b:e3:f4:0c:0b:5d:af:46:48:
d2:0d:86:c3:8e:ad:8b:f3:f0:20:ef:9e:cc:80:77:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:12:5A:C9:2B:98:8C:C5:91:DE:D9:82:4E:8A:33:B1:71:42:42
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5b:78:19:a5:18:a1:8c:94:f7:52:49:4d:2d:b6:fd:17:7c:
a3:44:a0:6f:11:18:62:e3:1b:82:bd:b4:26:65:8a:03:90:77:
06:83:ba:d9:e7:4d:ad:12:65:20:7e:a1:9c:7d:2b:fa:a5:27:
ac:84:36:c2:e2:ad:55:2d:b3:27:15:10:34:7b:f3:f6:63:80:
5c:bc:8e:94:48:10:73:d9:43:57:25:ed:29:c8:1e:0c:4d:64:
f6:76:85:88:cb:87:df:88:02:72:41:3c:a5:90:00:52:10:fd:
93:93:39:95:3e:f6:91:4b:67:26:22:ef:b8:3d:00:15:82:0c:
f7:58:b4:2d:49:93:12:b1:47:cb:ab:de:7b:b2:2d:e3:f6:f3:
43:fb:8a:1f:60:78:f4:7e:2f:04:8b:d5:7a:0e:ef:f1:27:5c:
c7:4a:7b:7c:35:cc:a1:4d:72:7a:34:ac:da:3d:59:cc:5a:33:
36:c4:c6:f8:8f:bd:13:1c:0c:c9:39:40:18:e6:9d:ad:c3:33:
b3:9d:2e:b9:1c:e3:30:df:ab:fc:a4:bd:6f:79:60:ee:21:9d:
6e:36:a8:94:8d:12:47:12:f4:d1:e8:4e:76:e1:ea:b5:98:d4:
74:7b:61:e1:57:6b:96:64:f4:44:f7:35:33:5f:00:f2:56:6a:
fa:67:06:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/yMSYH5i4IG+a6EWZDKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl
ZWNkOWEwHhcNMjYwMzEzMDcwMDI4WhcNMjYwMzE0MDcwMDI4WjAzMTEwLwYDVQQD
EyhmOWZjMTI1YWM5MmI5ODhjYzU5MWRlZDk4MjRlOGEzM2IxNzE0MjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkxb7iyNDefEwSiQywLE1aCQWDzo
UCUkD0YiPntiaz0rlYXJEQ/BfVH2KuapN4H2VD8FJ9DBYtJdX1Ccksy8A4DtKd8J
aQjZSpCNvjBGWBoqdlyTcKKB8B1pH+Vt5w+EVKESfa+LCnPBaBffZGFBxEX5Uu/I
STXQp4h5miUAob5l7ZNdPj4mhUcxv7pw9etqHDOKTmCEOeuGJYNBiOH5XbDdYlMt
BkBfIEy+How7mYWuxgSCzRzKU6Scv2WWB+5CX6Hd/tnDl/e8mtbHSk/Vtyh6erOY
qGxJVdcG+sN0GHXrm3P7EMwr4/QMC12vRkjSDYbDjq2L8/Ag757MgHdXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn8ElrJK5iMxZHe2YJOijOxcUJCMB8GA1UdIwQY
MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt
NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj
LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1t4GaUY
oYyU91JJTS22/Rd8o0SgbxEYYuMbgr20JmWKA5B3BoO62edNrRJlIH6hnH0r+qUn
rIQ2wuKtVS2zJxUQNHvz9mOAXLyOlEgQc9lDVyXtKcgeDE1k9naFiMuH34gCckE8
pZAAUhD9k5M5lT72kUtnJiLvuD0AFYIM91i0LUmTErFHy6vee7It4/bzQ/uKH2B4
9H4vBIvVeg7v8Sdcx0p7fDXMoU1yejSs2j1ZzFozNsTG+I+9ExwMyTlAGOadrcMz
s50uuRzjMN+r/KS9b3lg7iGdbjaolI0SRxL00ehOduHqtZjUdHth4VdrlmT0RPc1
M18A8lZq+mcGWg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:00:20 2026 by rpki-client