Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: copFVOWQEsfyqsj8wfc0ZubULoAvhkDxzGfIJtSoebY=
Subject key identifier: C5:14:80:16:A0:91:DB:8B:11:DB:12:D4:29:C3:9A:B0:33:E7:5B:1A
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019D3789269ABA3A5604817CDA70C7C5E4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: F8
Signing time: Sun 29 Mar 2026 03:00:28 +0000
Manifest this update: Sun 29 Mar 2026 03:00:28 +0000
Manifest next update: Mon 30 Mar 2026 03:00:28 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: zzq7lELrPFpmRHVhkZGMD4bLWx6U7mTSUSMTtEkBUvY=)
2: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:26:9a:ba:3a:56:04:81:7c:da:70:c7:c5:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Mar 29 03:00:28 2026 GMT
Not After : Mar 30 03:00:28 2026 GMT
Subject: CN=c5148016a091db8b11db12d429c39ab033e75b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:26:63:99:eb:19:25:eb:07:8e:6d:29:10:
90:f4:53:2d:73:0d:bf:75:90:6c:5e:ba:3e:e8:b8:
f6:64:86:9a:72:de:c2:a2:67:ec:03:1f:0f:3c:4a:
34:c8:c5:8d:e9:62:69:ce:08:97:81:9a:e1:ef:05:
68:f4:5f:d7:85:42:28:9d:52:5b:40:8f:52:bd:f0:
9a:3a:5c:b9:c3:34:2a:3c:f4:9e:91:46:67:ed:19:
a4:8c:ec:5c:86:2c:41:21:e6:e7:5e:7b:61:f1:4e:
3f:43:54:46:d9:9d:56:12:50:2f:bb:57:24:4b:65:
69:fe:91:98:20:f1:b1:f0:26:4a:46:7f:78:e7:af:
ac:72:ea:b4:c2:83:4a:fc:7f:fc:cb:8b:71:e9:07:
13:c2:c6:ce:7b:c3:c0:b3:4c:e0:2f:23:ac:10:64:
0c:97:f1:dc:6c:32:75:04:b0:9c:af:96:2d:08:79:
fd:1e:ed:0d:0f:9b:3c:b2:da:bc:a3:1b:44:94:66:
e7:6a:52:b3:af:b2:5d:fc:a5:1f:e3:83:c6:12:07:
a5:2f:9e:5e:c1:c7:bf:5d:0a:05:79:8f:be:76:b2:
79:27:7d:f7:0f:93:05:73:52:cc:c9:a7:e6:d0:e2:
bc:f4:c4:06:fe:99:c3:90:dc:f1:97:a5:06:55:e2:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:14:80:16:A0:91:DB:8B:11:DB:12:D4:29:C3:9A:B0:33:E7:5B:1A
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:15:50:c3:e5:61:3f:0b:27:6c:34:72:ca:ad:48:2c:fa:63:
b9:26:fc:95:a3:2e:15:8a:c9:a2:2a:15:7d:a1:3b:71:19:39:
50:b2:a9:c4:7f:3f:69:f1:4d:8f:23:10:f8:a6:7b:47:eb:27:
89:2f:33:92:44:3e:8a:97:d5:53:70:68:7d:50:9c:c4:61:50:
88:d4:b0:3e:9d:52:90:10:d0:8d:67:43:c1:f6:85:95:18:cf:
de:16:18:e8:15:e8:d8:f2:45:76:8f:8a:1d:05:69:46:1b:aa:
b0:d6:97:96:8d:14:ff:b2:1c:97:ac:25:28:03:bf:85:fc:8e:
31:df:56:3d:9c:b5:9a:d0:1b:4e:70:fa:df:d0:e4:0d:fb:52:
7a:0e:6d:f0:c0:cd:79:7a:d1:2c:0b:a7:1b:f5:33:62:60:4f:
fe:ee:cf:59:6a:d6:51:66:b7:4a:29:26:59:f5:1b:dc:48:9f:
2a:1d:01:17:a3:a5:d6:75:29:bc:50:22:dc:fd:7a:88:8b:05:
46:16:04:70:7e:a5:c2:be:81:8d:3a:15:90:5c:bb:39:9f:51:
0e:cd:b1:e0:d8:02:04:88:43:4d:55:cb:ad:8c:29:fa:2b:c9:
25:52:40:c2:60:d4:d3:4f:d7:3c:51:5d:ab:b7:6d:36:c0:d5:
96:fa:c9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iSaaujpWBIF82nDHxeTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjMwM2U5NjgwMzc5M2MzYzQ4Y2RhNTIwN2E0MWU3NGU1
MGNiN2MwHhcNMjYwMzI5MDMwMDI4WhcNMjYwMzMwMDMwMDI4WjAzMTEwLwYDVQQD
EyhjNTE0ODAxNmEwOTFkYjhiMTFkYjEyZDQyOWMzOWFiMDMzZTc1YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AMmY5nrGSXrB45tKRCQ9FMtcw2/
dZBsXro+6Lj2ZIaact7ComfsAx8PPEo0yMWN6WJpzgiXgZrh7wVo9F/XhUIonVJb
QI9SvfCaOly5wzQqPPSekUZn7RmkjOxchixBIebnXnth8U4/Q1RG2Z1WElAvu1ck
S2Vp/pGYIPGx8CZKRn9456+scuq0woNK/H/8y4tx6QcTwsbOe8PAs0zgLyOsEGQM
l/HcbDJ1BLCcr5YtCHn9Hu0ND5s8stq8oxtElGbnalKzr7Jd/KUf44PGEgelL55e
wce/XQoFeY++drJ5J333D5MFc1LMyafm0OK89MQG/pnDkNzxl6UGVeKDywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUUgBagkduLEdsS1CnDmrAz51saMB8GA1UdIwQY
MBaAFNsjA+loA3k8PEjNpSB6QedOUMt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNWY4MDQtYTE5My00YjNmLWE2NTIt
NDVmMmFmYzkxZDJkLzEvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNWY4MDQtYTE5My00YjNmLWE2NTItNDVmMmFmYzkxZDJk
LzEvMnlNRDZXZ0RlVHc4U00ybElIcEI1MDVReTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxVQw+Vh
PwsnbDRyyq1ILPpjuSb8laMuFYrJoioVfaE7cRk5ULKpxH8/afFNjyMQ+KZ7R+sn
iS8zkkQ+ipfVU3BofVCcxGFQiNSwPp1SkBDQjWdDwfaFlRjP3hYY6BXo2PJFdo+K
HQVpRhuqsNaXlo0U/7Icl6wlKAO/hfyOMd9WPZy1mtAbTnD639DkDftSeg5t8MDN
eXrRLAunG/UzYmBP/u7PWWrWUWa3SikmWfUb3EifKh0BF6Ol1nUpvFAi3P16iIsF
RhYEcH6lwr6BjToVkFy7OZ9RDs2x4NgCBIhDTVXLrYwp+ivJJVJAwmDU00/XPFFd
q7dtNsDVlvrJyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client