Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier: dPcyRZ1jvDd3uL9phRb8GEmwRG59ysOe4M2+Rt+GJMQ=
Subject key identifier: E3:6F:58:B9:01:F2:BF:1C:35:74:BF:A7:B1:CE:2A:B4:4D:41:9F:01
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial: 019D382E2C64A419DBF2192CBC463115D81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number: 0322
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: M3QxUYKymbcSI44Iu8taaEQxFzbbBrwdf5d55BVXyxM=)
2: VHbe_xOVGHCgQR5XnYgh-yKH6cE.roa (hash: 5VSEEsjJBUwWudxQvIdtRqUqe0PKutNTBibCMoL8Zoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2c:64:a4:19:db:f2:19:2c:bc:46:31:15:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=e36f58b901f2bf1c3574bfa7b1ce2ab44d419f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:0b:29:30:5d:22:31:75:8f:0c:2c:f2:42:
76:dd:28:97:31:11:f9:3e:61:a2:0c:2c:98:36:cc:
b3:ce:b6:28:29:c4:28:e4:c4:2a:2f:99:d8:93:c6:
5f:22:2c:11:ec:f9:f4:62:3b:ce:92:1a:e9:86:a9:
d9:b6:50:7f:eb:92:6c:91:ec:4c:5d:35:6c:8f:68:
84:18:d2:50:c7:f0:b7:3c:f2:24:ce:fd:89:07:dd:
dd:ff:ef:69:02:cc:8c:e5:79:35:c8:56:71:f3:de:
8e:22:78:16:1f:7c:3a:29:5d:58:fb:63:2f:e2:5b:
b0:5d:a7:0e:d7:c0:41:07:10:e0:27:31:f2:54:b2:
32:f2:fa:c8:2e:86:c1:40:aa:2c:85:13:88:9e:05:
dc:e9:bb:6e:e6:c5:96:d1:90:00:fc:2b:fd:29:69:
47:b7:c0:fe:f5:07:6f:0b:94:82:bc:79:7e:8c:57:
d6:06:31:d2:a7:d6:e5:a1:cf:78:e0:b4:c3:19:db:
81:ad:30:31:c7:f4:dc:f0:fd:72:5f:d8:f6:bd:b4:
34:11:2e:be:e7:69:7d:31:ed:b6:2e:58:23:d5:00:
ae:2e:47:62:b9:73:ac:3b:cb:42:00:6e:ac:f5:94:
b6:08:19:e4:b6:03:27:99:42:33:ab:02:0c:c7:1c:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:58:B9:01:F2:BF:1C:35:74:BF:A7:B1:CE:2A:B4:4D:41:9F:01
X509v3 Authority Key Identifier:
keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:69:cf:2d:d1:cd:38:97:53:3e:21:bc:44:60:eb:92:09:5c:
00:e1:44:00:a4:7f:1c:08:ca:10:71:9a:f8:a4:e5:d8:64:11:
9a:d7:0b:96:4f:be:1a:a5:8e:39:07:dc:a0:0c:87:7e:bd:7e:
97:c2:4f:4d:38:e9:3d:51:49:9f:1e:31:14:50:4e:a1:be:7c:
26:1e:1d:4e:1e:11:96:cc:ff:11:f8:d5:62:99:5f:9b:29:94:
62:af:68:68:74:a6:8e:ba:6f:a0:fe:0e:51:ca:d3:54:14:32:
fd:84:0b:ac:50:b1:12:0f:0c:4b:a8:cc:aa:fe:17:73:34:41:
de:67:72:df:f4:1e:ae:07:6f:63:92:56:c4:42:c7:6c:b6:28:
37:4b:19:68:90:72:8c:7c:1d:4d:8c:32:12:ed:f9:6b:62:b4:
f2:42:28:5a:f9:73:00:1d:b6:04:3e:c8:0f:27:77:02:f5:f2:
ed:83:ce:de:df:ba:b7:ab:0d:fd:ae:56:dd:da:d8:02:7b:6c:
80:60:ad:19:a5:3b:52:ce:76:13:74:6d:f5:5e:9f:c8:72:80:
ed:71:d8:5c:e1:52:4f:be:cd:89:91:06:29:21:a6:43:62:cb:
3a:52:be:d9:76:4f:40:95:e3:ea:47:c8:97:90:76:52:b9:f9:
e4:7f:a3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LixkpBnb8hksvEYxFdgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5
MDc5ZWQwHhcNMjYwMzI5MDYwMDQzWhcNMjYwMzMwMDYwMDQzWjAzMTEwLwYDVQQD
EyhlMzZmNThiOTAxZjJiZjFjMzU3NGJmYTdiMWNlMmFiNDRkNDE5ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0twLKTBdIjF1jwws8kJ23SiXMRH5
PmGiDCyYNsyzzrYoKcQo5MQqL5nYk8ZfIiwR7Pn0YjvOkhrphqnZtlB/65JskexM
XTVsj2iEGNJQx/C3PPIkzv2JB93d/+9pAsyM5Xk1yFZx896OIngWH3w6KV1Y+2Mv
4luwXacO18BBBxDgJzHyVLIy8vrILobBQKoshROIngXc6btu5sWW0ZAA/Cv9KWlH
t8D+9QdvC5SCvHl+jFfWBjHSp9bloc944LTDGduBrTAxx/Tc8P1yX9j2vbQ0ES6+
52l9Me22Llgj1QCuLkdiuXOsO8tCAG6s9ZS2CBnktgMnmUIzqwIMxxwhVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONvWLkB8r8cNXS/p7HOKrRNQZ8BMB8GA1UdIwQY
MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt
ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm
LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2nPLdHN
OJdTPiG8RGDrkglcAOFEAKR/HAjKEHGa+KTl2GQRmtcLlk++GqWOOQfcoAyHfr1+
l8JPTTjpPVFJnx4xFFBOob58Jh4dTh4Rlsz/EfjVYplfmymUYq9oaHSmjrpvoP4O
UcrTVBQy/YQLrFCxEg8MS6jMqv4XczRB3mdy3/QergdvY5JWxELHbLYoN0sZaJBy
jHwdTYwyEu35a2K08kIoWvlzAB22BD7IDyd3AvXy7YPO3t+6t6sN/a5W3drYAnts
gGCtGaU7Us52E3Rt9V6fyHKA7XHYXOFST77NiZEGKSGmQ2LLOlK+2XZPQJXj6kfI
l5B2Urn55H+jbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client