Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: 8ed0BHAE+Kbi3BSfSJnVjONmyJW0lw0OHehx+cqyhz4=
Subject key identifier: 29:ED:87:89:1C:B3:11:2D:68:3D:2F:DE:4E:C8:3C:71:85:EC:5D:FE
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019DA6B026E699F44D9AA5022DDC30FA8024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0AD4
Signing time: Sun 19 Apr 2026 17:00:55 +0000
Manifest this update: Sun 19 Apr 2026 17:00:55 +0000
Manifest next update: Mon 20 Apr 2026 17:00:55 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: sDMKbW8Zmj+rJuZivHtdrJ7PFTwWwUzJ+HauPvVa+nU=)
2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:b0:26:e6:99:f4:4d:9a:a5:02:2d:dc:30:fa:80:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Apr 19 17:00:55 2026 GMT
Not After : Apr 20 17:00:55 2026 GMT
Subject: CN=29ed87891cb3112d683d2fde4ec83c7185ec5dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:5e:f3:f2:45:4f:33:29:00:27:8b:41:31:
74:40:9e:21:2b:cc:60:08:72:bb:e9:72:c1:33:7d:
80:60:5c:0f:f6:18:ed:56:38:db:f8:20:0b:5d:c9:
5d:76:6a:69:ac:9d:12:8e:32:73:5e:fe:07:0e:d8:
75:69:85:b6:83:9e:77:64:d4:e7:de:d7:2f:9f:86:
7e:05:b8:16:bd:93:f8:f8:b7:b5:81:04:80:d4:4b:
69:c6:0a:ff:38:99:d0:34:21:87:23:45:7d:00:e6:
9e:b8:80:77:ef:c1:3d:3e:c6:8b:33:f5:21:ac:4b:
1c:ef:66:9f:b4:c6:bf:1d:5e:1f:a5:4a:a2:9f:d6:
12:d7:2e:e6:0f:78:d2:43:30:5c:a9:f4:be:32:f2:
00:bb:46:76:ab:f8:fa:df:92:8c:c5:af:e9:7d:60:
0b:46:9e:15:32:be:f4:23:cc:cb:79:d7:6d:4e:4f:
48:fd:6d:a5:e8:2e:c7:f9:8e:ce:b8:e6:d9:6c:39:
cd:51:fe:e8:04:7d:98:dc:94:72:09:d6:68:9c:6c:
18:63:2c:45:a5:a6:c5:ae:73:90:a4:8c:ee:e2:0d:
94:03:33:9b:04:4a:f2:03:33:ba:b1:2c:61:14:b9:
c4:57:07:42:18:e0:7b:9f:62:8a:20:76:cf:4f:df:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:87:89:1C:B3:11:2D:68:3D:2F:DE:4E:C8:3C:71:85:EC:5D:FE
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a0:cc:19:08:b7:e8:7d:15:c5:bd:2e:d2:44:46:e8:04:36:
f0:ca:f9:9b:cc:1b:dc:18:38:59:9d:74:5d:0a:53:99:2e:9d:
ed:0f:a0:ad:65:d8:4f:35:db:4a:78:d8:ec:30:e1:10:9e:9d:
6e:05:9a:e0:22:42:05:4d:9a:09:7e:81:10:ab:94:76:47:96:
c4:52:3f:ae:03:c9:fa:b8:e8:51:ee:b2:60:60:5a:24:43:f6:
0a:a9:9b:73:49:da:2a:f2:de:75:dc:71:d2:ae:7c:bd:4c:e7:
5b:6d:bd:e5:67:82:92:9f:6c:46:27:c2:d3:de:c5:46:3d:e3:
1f:06:b3:c3:87:40:f4:c7:c2:09:5d:c3:e1:99:72:8b:ae:5e:
a9:0e:0d:63:e2:49:e4:35:73:39:79:96:e3:13:49:b6:aa:dd:
03:20:d3:75:d7:ab:ac:e3:de:74:09:5c:13:f1:1f:b7:c0:fd:
4e:9a:68:e5:01:34:e2:fe:38:4a:67:25:86:e4:04:7e:70:8a:
b5:0c:be:5a:04:10:92:1a:79:3a:5a:6a:38:38:ac:28:87:8d:
47:87:75:df:09:74:70:76:54:7e:38:d2:6a:2d:5c:73:82:90:
75:ee:f4:22:1a:a1:5b:83:cc:60:4e:31:77:3c:6d:78:6e:d2:
97:75:f5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2msCbmmfRNmqUCLdww+oAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4
ZmRmY2IwHhcNMjYwNDE5MTcwMDU1WhcNMjYwNDIwMTcwMDU1WjAzMTEwLwYDVQQD
EygyOWVkODc4OTFjYjMxMTJkNjgzZDJmZGU0ZWM4M2M3MTg1ZWM1ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld5e8/JFTzMpACeLQTF0QJ4hK8xg
CHK76XLBM32AYFwP9hjtVjjb+CALXclddmpprJ0SjjJzXv4HDth1aYW2g553ZNTn
3tcvn4Z+BbgWvZP4+Le1gQSA1Etpxgr/OJnQNCGHI0V9AOaeuIB378E9PsaLM/Uh
rEsc72aftMa/HV4fpUqin9YS1y7mD3jSQzBcqfS+MvIAu0Z2q/j635KMxa/pfWAL
Rp4VMr70I8zLeddtTk9I/W2l6C7H+Y7OuObZbDnNUf7oBH2Y3JRyCdZonGwYYyxF
pabFrnOQpIzu4g2UAzObBEryAzO6sSxhFLnEVwdCGOB7n2KKIHbPT99pdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnth4kcsxEtaD0v3k7IPHGF7F3+MB8GA1UdIwQY
MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt
ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm
LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKDMGQi3
6H0Vxb0u0kRG6AQ28Mr5m8wb3Bg4WZ10XQpTmS6d7Q+grWXYTzXbSnjY7DDhEJ6d
bgWa4CJCBU2aCX6BEKuUdkeWxFI/rgPJ+rjoUe6yYGBaJEP2Cqmbc0naKvLeddxx
0q58vUznW2295WeCkp9sRifC097FRj3jHwazw4dA9MfCCV3D4Zlyi65eqQ4NY+JJ
5DVzOXmW4xNJtqrdAyDTdderrOPedAlcE/Eft8D9Tppo5QE04v44SmclhuQEfnCK
tQy+WgQQkhp5OlpqODisKIeNR4d13wl0cHZUfjjSai1cc4KQde70IhqhW4PMYE4x
dzxteG7Sl3X1Cw==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:54 2026 by rpki-client