Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: sJPuiMqbWWVv4wh8EQ957k16s1d5z+d7+dx8VnHPKhA=
Subject key identifier: 65:6A:00:23:DC:8C:B8:D2:7C:5B:EB:F8:C7:9F:AB:B6:33:C1:A6:03
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019D205D053B94C27688D4FB6BABD8DE86BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0C06
Signing time: Tue 24 Mar 2026 15:01:00 +0000
Manifest this update: Tue 24 Mar 2026 15:01:00 +0000
Manifest next update: Wed 25 Mar 2026 15:01:00 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: rwDBNi/vLCz4gHkmTvVWdi5+pwHFp36KCqilq6qM6mI=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:5d:05:3b:94:c2:76:88:d4:fb:6b:ab:d8:de:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Mar 24 15:01:00 2026 GMT
Not After : Mar 25 15:01:00 2026 GMT
Subject: CN=656a0023dc8cb8d27c5bebf8c79fabb633c1a603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:2e:6a:12:3f:43:61:57:a2:ac:df:d3:34:
dd:3b:6a:d3:c2:e2:20:7c:99:2b:a3:f8:bb:44:6f:
20:d9:e2:17:95:40:ad:7f:0e:ba:78:d4:dd:7e:8c:
df:20:f7:e4:98:9c:65:b2:4c:15:a6:bc:20:7c:97:
57:68:26:9e:c2:13:83:64:56:ac:d9:e6:1f:7e:3f:
4c:86:9f:4b:5c:59:36:ef:38:ce:04:38:6c:b9:e4:
b5:17:e9:ba:88:64:1d:41:8b:29:64:a8:92:34:f8:
f6:d4:12:55:2a:6f:e1:59:ae:90:07:8e:66:af:12:
d2:bc:2a:b9:69:e2:3b:d9:4b:4f:be:e1:28:c4:89:
0c:3e:64:d8:45:10:7b:e8:24:f1:2e:ec:ea:e9:16:
0c:f6:ca:de:c3:1d:e6:3f:ee:9b:78:73:dd:1a:d2:
fa:9e:70:bb:71:e9:6e:39:b8:86:8c:2f:81:b2:22:
00:25:93:91:91:ce:18:9d:a5:aa:17:d4:65:9d:11:
19:5b:ea:79:c3:c5:19:7a:e4:34:5d:e7:ab:12:b4:
fd:a5:10:76:b9:47:73:0c:13:30:7b:ed:0d:b5:92:
87:2a:7d:df:9f:e7:24:13:70:6a:0b:fc:8e:63:da:
aa:3f:18:d6:69:50:d6:e6:e0:d0:0a:27:ec:9d:29:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:00:23:DC:8C:B8:D2:7C:5B:EB:F8:C7:9F:AB:B6:33:C1:A6:03
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:d2:37:1e:7e:cb:53:a5:3d:d9:8f:b0:31:81:7b:ae:17:
85:ac:22:67:aa:9a:00:47:28:8b:4d:58:94:e2:6c:b5:c1:ef:
c6:2e:64:10:4e:a1:22:65:10:51:54:2a:75:8b:cc:cf:63:c0:
26:97:23:9c:ca:ab:3c:79:f1:1b:fb:dd:6a:80:c1:f9:6a:f7:
da:30:37:19:38:40:5f:55:91:cd:90:cd:70:8a:36:3f:fa:a1:
5e:b6:c9:df:62:ba:ab:b0:24:31:30:e3:f5:e3:60:38:70:cf:
69:71:b7:e9:24:b5:0e:a4:15:2d:dc:14:27:32:59:d5:c5:ef:
14:cc:94:0b:a1:54:32:8e:6a:cd:93:84:74:7f:a1:49:8b:01:
76:57:ac:e2:c5:10:17:f7:bd:94:4f:4d:a3:e0:f8:27:c5:12:
c6:e2:20:ad:cc:ac:b9:46:c1:33:b9:5e:29:15:80:5f:c1:35:
01:de:12:78:5b:d0:2a:21:72:c0:0d:4b:14:a2:1f:dd:99:92:
ec:d8:97:b9:f7:42:bf:6d:d0:ec:bd:44:e0:b8:6a:9d:3b:f6:
55:0e:a7:36:b5:06:72:c6:81:a4:a1:31:38:0f:90:40:bf:c8:
84:58:e0:fc:76:33:ce:ce:52:2b:6e:ee:ac:c0:28:ce:ff:54:
5f:09:10:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0gXQU7lMJ2iNT7a6vY3oa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5
MWJlYjAwHhcNMjYwMzI0MTUwMTAwWhcNMjYwMzI1MTUwMTAwWjAzMTEwLwYDVQQD
Eyg2NTZhMDAyM2RjOGNiOGQyN2M1YmViZjhjNzlmYWJiNjMzYzFhNjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I4uahI/Q2FXoqzf0zTdO2rTwuIg
fJkro/i7RG8g2eIXlUCtfw66eNTdfozfIPfkmJxlskwVprwgfJdXaCaewhODZFas
2eYffj9Mhp9LXFk27zjOBDhsueS1F+m6iGQdQYspZKiSNPj21BJVKm/hWa6QB45m
rxLSvCq5aeI72UtPvuEoxIkMPmTYRRB76CTxLuzq6RYM9srewx3mP+6beHPdGtL6
nnC7celuObiGjC+BsiIAJZORkc4YnaWqF9RlnREZW+p5w8UZeuQ0XeerErT9pRB2
uUdzDBMwe+0NtZKHKn3fn+ckE3BqC/yOY9qqPxjWaVDW5uDQCifsnSmyBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVqACPcjLjSfFvr+Mefq7YzwaYDMB8GA1UdIwQY
MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt
MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl
LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhjSNx5+
y1OlPdmPsDGBe64XhawiZ6qaAEcoi01YlOJstcHvxi5kEE6hImUQUVQqdYvMz2PA
JpcjnMqrPHnxG/vdaoDB+Wr32jA3GThAX1WRzZDNcIo2P/qhXrbJ32K6q7AkMTDj
9eNgOHDPaXG36SS1DqQVLdwUJzJZ1cXvFMyUC6FUMo5qzZOEdH+hSYsBdles4sUQ
F/e9lE9No+D4J8USxuIgrcysuUbBM7leKRWAX8E1Ad4SeFvQKiFywA1LFKIf3ZmS
7NiXufdCv23Q7L1E4LhqnTv2VQ6nNrUGcsaBpKExOA+QQL/IhFjg/HYzzs5SK27u
rMAozv9UXwkQjA==
-----END CERTIFICATE-----
Generated at Tue Mar 24 21:13:33 2026 by rpki-client