Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: y9PIbnvlFtWLNucSBUyMq2reUGXOPXffnxCqgXUncZ8=
Subject key identifier: E9:B9:8A:BD:FA:BE:75:00:5C:44:84:8F:33:C4:21:F4:27:56:25:F9
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019D38D3029AE17F70A8F9E6B87B54FCAE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 150B
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: cEIFURYN9HHSeeANy4a05vkkbm8k5d3QE8fmCwSBins=)
2: B858kg8THjaSoEIim6530sspUXs.roa (hash: HCD5tBX+9y/cDnZBRIi513FjVWEfPLJ8ux8RH4V8Dpk=)
3: GRivXpYp4CuhiN76JDUjX3oocvQ.roa (hash: INwnsmHYjS772AhOCOKo1mO3+hjHZod9QoImR0vqNKc=)
4: PCyrz_7gQySJ-l_QlnLaYZdnukM.roa (hash: 8qLUqfkbCxjZKisO86t69Q/KwJjfGVGdDtnDpf4H3cE=)
5: dOKAlcT195hvrnl94GECXypnUw4.roa (hash: uCgRu9pSvcyUSoOdBM4Z/JT81zNcZoR+ge8afkxI5PA=)
6: kuAZ8COOrRF7D7fGL9v85feX7sY.roa (hash: MeqT2suPhasDZh73lRt2kV/r/fxAtR5VksxEngVFI8Q=)
7: x8_4aac4Nz-MFK0_jVyanCY1Njs.roa (hash: W//4mpSYdJPZzB2svcIDaGv0bAnhUuw6rNgGJNlJgIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:9a:e1:7f:70:a8:f9:e6:b8:7b:54:fc:ae:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=e9b98abdfabe75005c44848f33c421f4275625f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:fa:e2:b3:d2:e1:88:b1:8f:f4:6f:9f:04:
03:35:e5:86:3d:e0:63:3a:72:66:0b:2c:e5:2b:ce:
ef:4f:a0:fe:09:06:39:74:e8:0f:f2:a7:81:73:bb:
c3:5d:19:ba:1a:c9:47:ad:e9:75:52:58:3f:c8:a8:
f9:9f:7f:99:c2:8a:9f:9d:d8:10:b7:d9:75:3a:10:
bf:4e:34:86:cc:e9:eb:f4:98:72:9c:f7:aa:fe:cf:
7e:14:b7:b1:c6:fa:f8:f6:a0:46:d0:b5:67:26:1b:
91:c7:59:7d:81:4b:ff:43:6c:6e:ec:67:29:27:4a:
7c:6f:77:a6:33:24:58:67:6b:11:80:d0:ff:43:2d:
53:e5:1f:cf:3e:d5:f9:7a:f1:84:d8:cb:31:de:72:
79:09:b0:7c:1f:02:64:15:6d:c4:ca:fb:a7:f1:7b:
ba:fb:bd:98:a8:cb:df:26:89:73:00:9d:00:ca:23:
7c:17:d9:37:27:d5:07:d1:f8:9f:05:c1:2f:6e:36:
fd:44:1a:ac:5b:db:d7:ae:b4:19:13:2b:56:b2:46:
f9:ce:19:4e:4e:bf:21:6c:b2:01:17:3f:4a:18:e3:
d5:54:70:7b:ee:ba:08:b7:62:db:a3:b0:48:4d:18:
0d:ba:5a:ca:66:0a:bd:2f:86:7e:a4:bd:55:ec:1e:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:8A:BD:FA:BE:75:00:5C:44:84:8F:33:C4:21:F4:27:56:25:F9
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ec:13:93:a3:0b:f0:e1:39:b6:ac:88:67:3c:91:fc:0a:13:
e0:44:f3:8e:f4:07:d6:78:6f:4d:08:8c:61:78:b7:d3:b1:be:
44:e9:3d:34:b1:7f:94:d4:a8:98:3c:7e:0f:c3:03:1c:ae:f4:
de:3f:00:da:ad:3d:56:cc:b9:87:d2:6e:06:ad:ee:9c:0d:e3:
09:e0:d3:0e:9d:c5:35:94:fb:2d:76:61:ce:be:87:e7:22:87:
3b:b6:1c:08:61:75:15:56:dd:8e:c7:c3:7f:18:e2:83:19:bc:
d5:a5:78:08:6d:22:f3:d5:28:04:95:7c:9c:3a:f7:f0:db:54:
29:07:8b:a3:f7:da:07:a3:22:36:78:14:e2:58:58:f7:87:bc:
d2:6c:97:29:74:63:e6:02:18:34:00:4e:14:98:35:17:fa:64:
e8:de:7b:33:2f:fd:8d:d0:3e:92:89:0b:f5:3e:c3:13:e1:fd:
8b:e5:41:70:08:92:ab:0e:85:33:fe:d8:74:c8:7e:69:1d:2b:
35:49:67:19:b5:6e:4f:74:7d:48:4a:ef:af:80:f3:61:74:c4:
7b:75:12:7e:6b:62:ad:41:be:5b:c2:a9:4e:0a:84:bc:6a:9d:
2e:43:4f:92:22:b7:85:20:25:22:e1:00:d7:c0:6a:b3:9e:2c:
81:e5:7a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wKa4X9wqPnmuHtU/K6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz
MmVhOWIwHhcNMjYwMzI5MDkwMDQ1WhcNMjYwMzMwMDkwMDQ1WjAzMTEwLwYDVQQD
EyhlOWI5OGFiZGZhYmU3NTAwNWM0NDg0OGYzM2M0MjFmNDI3NTYyNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYb64rPS4Yixj/RvnwQDNeWGPeBj
OnJmCyzlK87vT6D+CQY5dOgP8qeBc7vDXRm6GslHrel1Ulg/yKj5n3+ZwoqfndgQ
t9l1OhC/TjSGzOnr9JhynPeq/s9+FLexxvr49qBG0LVnJhuRx1l9gUv/Q2xu7Gcp
J0p8b3emMyRYZ2sRgND/Qy1T5R/PPtX5evGE2Msx3nJ5CbB8HwJkFW3Eyvun8Xu6
+72YqMvfJolzAJ0AyiN8F9k3J9UH0fifBcEvbjb9RBqsW9vXrrQZEytWskb5zhlO
Tr8hbLIBFz9KGOPVVHB77roIt2Lbo7BITRgNulrKZgq9L4Z+pL1V7B6R3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm5ir36vnUAXESEjzPEIfQnViX5MB8GA1UdIwQY
MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQewTk6ML
8OE5tqyIZzyR/AoT4ETzjvQH1nhvTQiMYXi307G+ROk9NLF/lNSomDx+D8MDHK70
3j8A2q09Vsy5h9JuBq3unA3jCeDTDp3FNZT7LXZhzr6H5yKHO7YcCGF1FVbdjsfD
fxjigxm81aV4CG0i89UoBJV8nDr38NtUKQeLo/faB6MiNngU4lhY94e80myXKXRj
5gIYNABOFJg1F/pk6N57My/9jdA+kokL9T7DE+H9i+VBcAiSqw6FM/7YdMh+aR0r
NUlnGbVuT3R9SErvr4DzYXTEe3USfmtirUG+W8KpTgqEvGqdLkNPkiK3hSAlIuEA
18Bqs54sgeV6MQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:49 2026 by rpki-client