Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: qBDatB9YaEd0cZE96yRcOy1dQlpES2wXLnqekPQ6TYw=
Subject key identifier: E3:03:43:B0:91:A1:47:CE:30:DE:9B:75:95:50:A7:C9:97:0C:D7:F2
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019D371BEBFD475CBCF8B68E21E507B1EAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 01:01:09 +0000
Manifest this update: Sun 29 Mar 2026 01:01:09 +0000
Manifest next update: Mon 30 Mar 2026 01:01:09 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: Rb1Lvy3hY1GmLtb9Z0C5VCRrIz7bcfWHMGAlB9id6/g=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:eb:fd:47:5c:bc:f8:b6:8e:21:e5:07:b1:ea:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Mar 29 01:01:09 2026 GMT
Not After : Mar 30 01:01:09 2026 GMT
Subject: CN=e30343b091a147ce30de9b759550a7c9970cd7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:96:a9:ef:fb:99:19:1c:0e:5a:92:49:fe:
78:e8:4d:92:57:58:16:a0:de:a6:fc:d2:7e:a7:d5:
18:02:d9:e2:fd:81:ed:c0:5e:d1:9f:14:10:98:20:
78:c1:26:83:86:c5:05:aa:69:9b:3a:9d:4e:07:6a:
16:e6:4b:b8:30:9c:5d:d0:ea:3b:ff:67:52:60:a7:
85:f2:b6:69:85:aa:5b:83:e5:95:a4:12:09:45:3f:
45:12:ea:09:75:d4:26:21:6b:78:60:49:3e:44:1c:
42:6b:2b:d9:7e:6a:25:7f:b9:5f:89:29:32:e2:79:
88:f3:be:78:2b:c8:ce:f5:27:66:8d:31:29:b4:86:
63:d7:8b:ed:ea:33:08:15:c0:be:67:3e:dd:c1:ab:
29:e2:d6:f8:2f:21:17:f5:22:a3:fb:dc:3c:2c:69:
30:cb:c3:c2:55:1a:3d:16:7f:48:96:6f:c6:f8:ea:
4c:bc:d5:bd:cc:ad:81:a7:5d:74:4b:6f:72:52:fd:
86:fb:99:d3:0d:01:76:d3:75:27:7d:2f:1c:0f:b3:
4a:66:50:92:e6:6a:d0:c5:e7:a3:3d:52:e3:a2:39:
cc:da:93:4f:34:68:a4:e6:65:e5:76:95:b0:91:5a:
3f:1f:ce:36:12:29:5a:bd:fa:4c:0a:89:6d:50:5a:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:43:B0:91:A1:47:CE:30:DE:9B:75:95:50:A7:C9:97:0C:D7:F2
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:f2:49:fb:8d:37:89:74:38:96:6d:3f:84:44:9c:f3:14:
cb:6e:4d:08:9d:e3:ce:47:13:4a:72:a2:2e:53:57:a9:12:46:
64:a2:6b:82:7f:46:39:2a:78:c5:19:13:7d:80:74:3d:f7:75:
ef:fd:01:3c:0a:b3:0b:45:3c:34:22:63:71:99:3f:8a:1a:c3:
5f:88:01:77:3c:5e:5c:34:6e:cf:29:98:73:38:96:3b:8c:ba:
8d:f2:18:28:8f:4b:82:50:73:12:a5:f7:4c:52:01:6c:56:d5:
19:81:7e:2d:0c:d9:1b:cf:45:86:c2:b4:51:0b:a9:ab:c9:51:
8c:78:22:f7:19:bf:b4:f2:07:90:45:4d:36:33:61:28:59:56:
4e:18:10:7c:07:7f:22:08:cc:a9:90:ec:90:87:46:fb:05:00:
00:9b:f7:ad:f6:68:24:52:9b:52:20:a7:49:c6:c8:80:c2:1a:
41:3c:83:26:89:b2:45:9a:1b:45:4c:07:50:16:cd:ad:58:a2:
31:c3:72:93:a9:27:bc:59:7d:f3:e1:36:a7:ae:2e:3e:c6:b9:
42:04:cf:42:63:ec:73:77:d7:c5:e7:b1:ec:56:36:f3:61:36:
9d:65:05:88:ee:45:41:c5:7b:71:a2:2a:d3:2a:20:6a:01:a0:
d1:29:ca:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G+v9R1y8+LaOIeUHseqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk
M2EzNDcwHhcNMjYwMzI5MDEwMTA5WhcNMjYwMzMwMDEwMTA5WjAzMTEwLwYDVQQD
EyhlMzAzNDNiMDkxYTE0N2NlMzBkZTliNzU5NTUwYTdjOTk3MGNkN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8qWqe/7mRkcDlqSSf546E2SV1gW
oN6m/NJ+p9UYAtni/YHtwF7RnxQQmCB4wSaDhsUFqmmbOp1OB2oW5ku4MJxd0Oo7
/2dSYKeF8rZphapbg+WVpBIJRT9FEuoJddQmIWt4YEk+RBxCayvZfmolf7lfiSky
4nmI8754K8jO9SdmjTEptIZj14vt6jMIFcC+Zz7dwasp4tb4LyEX9SKj+9w8LGkw
y8PCVRo9Fn9Ilm/G+OpMvNW9zK2Bp110S29yUv2G+5nTDQF203UnfS8cD7NKZlCS
5mrQxeejPVLjojnM2pNPNGik5mXldpWwkVo/H842EilavfpMColtUFpO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMDQ7CRoUfOMN6bdZVQp8mXDNfyMB8GA1UdIwQY
MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt
ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx
LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgDySfuN
N4l0OJZtP4REnPMUy25NCJ3jzkcTSnKiLlNXqRJGZKJrgn9GOSp4xRkTfYB0Pfd1
7/0BPAqzC0U8NCJjcZk/ihrDX4gBdzxeXDRuzymYcziWO4y6jfIYKI9LglBzEqX3
TFIBbFbVGYF+LQzZG89FhsK0UQupq8lRjHgi9xm/tPIHkEVNNjNhKFlWThgQfAd/
IgjMqZDskIdG+wUAAJv3rfZoJFKbUiCnScbIgMIaQTyDJomyRZobRUwHUBbNrVii
McNyk6knvFl98+E2p64uPsa5QgTPQmPsc3fXxeex7FY282E2nWUFiO5FQcV7caIq
0yogagGg0SnKMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:30 2026 by rpki-client