Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: K/JOYi9cnBerVu2lTlzAZLPL3eGBcQbPFcyC6ItUAxM=
Subject key identifier: BB:D5:70:03:50:5C:3A:24:71:15:FC:DB:6D:89:99:8E:32:36:FC:B6
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019DCF3DE9353D5D1E5AF2053EAD9274C086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 03B6
Signing time: Mon 27 Apr 2026 14:00:34 +0000
Manifest this update: Mon 27 Apr 2026 14:00:34 +0000
Manifest next update: Tue 28 Apr 2026 14:00:34 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: 2pX7L5D8T8ofo/V+4nq0CbTt2gMr2/rVvc+V17QVqWk=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:e9:35:3d:5d:1e:5a:f2:05:3e:ad:92:74:c0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Apr 27 14:00:34 2026 GMT
Not After : Apr 28 14:00:34 2026 GMT
Subject: CN=bbd57003505c3a247115fcdb6d89998e3236fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:d2:d7:9d:97:60:3f:87:9b:34:44:42:81:
87:64:0c:13:95:92:15:6a:11:8e:67:37:fe:48:ee:
34:e5:36:ea:5b:19:85:5b:74:0e:2e:f6:81:57:00:
12:0d:09:fb:69:9a:65:54:e3:44:4d:35:aa:9a:df:
07:aa:94:6e:b6:e1:53:0a:7d:8e:8b:ef:18:ae:ad:
9e:06:e5:28:96:ad:16:cc:82:db:cd:46:04:4c:09:
c4:38:ac:22:b2:8f:e8:ac:3a:75:78:e0:62:75:16:
44:60:89:6a:e4:0c:61:26:07:47:d7:f5:6e:15:54:
42:de:24:d8:f3:b5:9c:6f:6e:7f:89:b0:1a:22:c6:
d5:83:45:d9:0d:80:e9:5a:ed:2e:2d:43:c0:2c:93:
3c:97:9f:ff:e4:af:3e:4c:51:35:e3:2b:05:44:a9:
1e:a4:ed:cf:46:0c:48:0a:01:4d:71:aa:b2:20:a4:
10:26:e4:3e:84:38:6b:66:c5:25:fc:57:61:16:60:
ec:66:e1:70:03:25:22:3c:14:57:da:4f:21:ac:2f:
32:7f:59:9d:b3:19:1d:94:81:ab:d1:dd:f0:e3:d3:
37:68:9c:5d:65:8d:bd:cb:1d:07:70:20:cf:34:e2:
2e:c2:63:72:8e:00:ca:12:7f:3c:35:9f:f4:8c:5c:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D5:70:03:50:5C:3A:24:71:15:FC:DB:6D:89:99:8E:32:36:FC:B6
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:53:3a:83:ad:64:ab:90:eb:90:c8:b2:3a:5e:00:ab:c1:
94:b9:46:8f:f7:74:ec:22:eb:d8:3f:18:55:c9:fa:00:85:9e:
56:e0:49:24:d7:05:cd:64:c6:80:3f:85:eb:a7:16:ef:af:35:
94:48:da:95:44:6b:fe:fb:d4:de:91:ea:6e:7c:8e:1e:c5:6c:
a0:d7:ae:d5:4c:69:43:a5:af:1f:b0:b1:80:14:5e:7c:22:bf:
d8:18:07:01:8d:93:e8:cd:13:90:c2:72:07:1f:a4:25:be:57:
dd:19:92:21:f2:0b:14:27:02:b1:d9:47:cb:27:26:b7:7e:ed:
84:d5:92:1f:6b:9a:12:eb:86:1e:c4:5e:fb:c4:d6:f6:98:b0:
b2:4e:e7:e8:97:6e:69:04:f6:9a:65:58:ae:a7:ec:b6:e6:ad:
66:0e:e8:6e:18:80:6e:42:a1:eb:7b:ce:eb:ba:37:26:e8:90:
84:87:51:a8:e8:15:b9:08:d0:05:8d:75:ed:af:d0:98:76:18:
29:60:3a:4f:c3:d4:ed:f4:35:d0:72:79:69:66:d1:93:1d:09:
1a:83:f1:90:41:26:24:9d:ec:97:05:43:ff:cb:27:74:18:a1:
2e:95:b8:d6:98:c3:94:e5:78:e5:21:32:72:75:88:a9:ac:08:
22:01:46:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PPek1PV0eWvIFPq2SdMCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5N2E3NzkzMDEyMjg3OWE3NjY0NzBkZjhkNjYwYzk4NDQy
YTk5MzIwHhcNMjYwNDI3MTQwMDM0WhcNMjYwNDI4MTQwMDM0WjAzMTEwLwYDVQQD
EyhiYmQ1NzAwMzUwNWMzYTI0NzExNWZjZGI2ZDg5OTk4ZTMyMzZmY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueXS152XYD+HmzREQoGHZAwTlZIV
ahGOZzf+SO405TbqWxmFW3QOLvaBVwASDQn7aZplVONETTWqmt8HqpRutuFTCn2O
i+8Yrq2eBuUolq0WzILbzUYETAnEOKwiso/orDp1eOBidRZEYIlq5AxhJgdH1/Vu
FVRC3iTY87Wcb25/ibAaIsbVg0XZDYDpWu0uLUPALJM8l5//5K8+TFE14ysFRKke
pO3PRgxICgFNcaqyIKQQJuQ+hDhrZsUl/FdhFmDsZuFwAyUiPBRX2k8hrC8yf1md
sxkdlIGr0d3w49M3aJxdZY29yx0HcCDPNOIuwmNyjgDKEn88NZ/0jFytJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvVcANQXDokcRX8222JmY4yNvy2MB8GA1UdIwQY
MBaAFNl6d5MBIoeadmRw341mDJhEKpkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQt
Y2Q0NTlhNjU3MjFiLzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQtY2Q0NTlhNjU3MjFi
LzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKBTOoOt
ZKuQ65DIsjpeAKvBlLlGj/d07CLr2D8YVcn6AIWeVuBJJNcFzWTGgD+F66cW7681
lEjalURr/vvU3pHqbnyOHsVsoNeu1UxpQ6WvH7CxgBRefCK/2BgHAY2T6M0TkMJy
Bx+kJb5X3RmSIfILFCcCsdlHyycmt37thNWSH2uaEuuGHsRe+8TW9piwsk7n6Jdu
aQT2mmVYrqfstuatZg7obhiAbkKh63vO67o3JuiQhIdRqOgVuQjQBY117a/QmHYY
KWA6T8PU7fQ10HJ5aWbRkx0JGoPxkEEmJJ3slwVD/8sndBihLpW41pjDlOV45SEy
cnWIqawIIgFGHQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:03 2026 by rpki-client