Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: Hf0Mu7M9vCio253H9qY/75tUBNWeZa8nnlQ7sdCYwLg=
Subject key identifier: 71:13:F8:6C:7F:30:D9:AB:18:46:3A:2C:FC:06:0C:79:9B:27:5E:B7
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019D382E872B2A75B92AA4494ECEBBA90C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0FD6
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: P2TetmZc+MYyFfP+a1YAkJgO/mUtA06Y+gJ+Mv1opGU=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:87:2b:2a:75:b9:2a:a4:49:4e:ce:bb:a9:0c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=7113f86c7f30d9ab18463a2cfc060c799b275eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:78:5b:28:23:09:9f:f9:8f:22:2f:22:e7:
9e:60:08:d9:2b:c7:14:d1:5f:14:a4:d3:09:43:b3:
00:19:07:d2:28:94:21:ec:87:ef:59:6b:2d:9d:69:
65:69:dd:04:c7:e1:82:83:ee:44:a3:09:bd:92:77:
22:6f:7e:83:eb:31:92:b0:7c:f9:aa:4d:80:c1:cb:
7f:82:5b:5b:ff:75:96:0f:14:54:44:3c:46:1f:d8:
d4:21:17:b8:ce:09:eb:c1:5b:9f:4f:f6:29:6c:18:
ff:d0:5c:71:67:d2:02:84:b3:19:e7:48:a9:49:9a:
1f:22:91:2a:87:63:64:fe:4d:8a:cc:5e:d1:d0:25:
4b:62:4b:db:57:a8:96:e4:05:f1:5d:f3:d9:95:bb:
48:e6:db:ef:04:a5:45:e8:1d:90:15:fe:e7:9d:fc:
5e:f4:15:1f:95:50:9c:05:e8:e8:14:21:37:a5:07:
f4:ff:a6:8c:c9:08:c9:13:fd:a7:0a:90:68:50:20:
ec:a1:18:a6:08:e1:b6:ae:ce:55:dd:53:f1:d7:20:
cd:82:0a:91:a3:68:6e:89:f3:8d:89:5b:f3:71:db:
14:a3:ce:59:67:5b:76:21:94:b6:91:68:b1:e0:d6:
ad:5e:ad:9b:72:6b:81:a7:ae:af:1c:21:4a:bb:c4:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:F8:6C:7F:30:D9:AB:18:46:3A:2C:FC:06:0C:79:9B:27:5E:B7
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:e1:31:f7:1e:11:06:9d:65:27:99:d8:b0:57:ca:40:30:
04:42:5a:03:13:23:9b:dc:00:68:de:c8:82:23:72:0d:b2:48:
67:e2:27:b2:1e:2c:c4:e3:eb:67:43:8b:ca:43:0f:2e:0e:61:
ff:d4:ab:0d:2c:ed:66:7e:cd:36:da:de:21:17:1f:44:75:b8:
b9:2c:c6:6b:a8:43:2c:61:ad:fc:b0:3b:f1:5f:89:01:06:ac:
74:08:61:ef:43:44:c3:16:f5:32:cd:ab:08:d4:35:11:d4:5f:
62:1a:db:0e:b3:d6:0a:70:40:40:24:50:79:8b:7b:90:e0:94:
5c:d2:84:7b:18:41:c7:af:0b:b3:38:39:93:3c:6d:5d:99:4f:
33:89:6b:c6:2f:d2:09:c8:7c:af:ff:82:d3:2f:82:2a:86:57:
1d:6c:c8:43:d7:e2:5a:81:0c:f9:9f:4d:d0:12:73:ce:b7:5c:
18:eb:06:de:ab:ea:e7:91:25:0e:c4:a1:27:ff:ea:56:36:cd:
2e:8a:8f:ee:2f:67:25:29:33:49:de:71:8f:21:ee:63:b7:3d:
d9:6c:45:47:85:6b:8e:65:f2:23:5c:da:63:15:a0:18:26:13:
b5:e8:08:63:c6:bb:5b:66:00:88:09:29:69:da:40:f2:25:9a:
00:02:54:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LocrKnW5KqRJTs67qQxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli
NjlkZGMwHhcNMjYwMzI5MDYwMTA2WhcNMjYwMzMwMDYwMTA2WjAzMTEwLwYDVQQD
Eyg3MTEzZjg2YzdmMzBkOWFiMTg0NjNhMmNmYzA2MGM3OTliMjc1ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoZ4WygjCZ/5jyIvIueeYAjZK8cU
0V8UpNMJQ7MAGQfSKJQh7IfvWWstnWllad0Ex+GCg+5Eowm9kncib36D6zGSsHz5
qk2Awct/gltb/3WWDxRURDxGH9jUIRe4zgnrwVufT/YpbBj/0FxxZ9IChLMZ50ip
SZofIpEqh2Nk/k2KzF7R0CVLYkvbV6iW5AXxXfPZlbtI5tvvBKVF6B2QFf7nnfxe
9BUflVCcBejoFCE3pQf0/6aMyQjJE/2nCpBoUCDsoRimCOG2rs5V3VPx1yDNggqR
o2huifONiVvzcdsUo85ZZ1t2IZS2kWix4NatXq2bcmuBp66vHCFKu8QMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHET+Gx/MNmrGEY6LPwGDHmbJ163MB8GA1UdIwQY
MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt
M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh
LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuXhMfce
EQadZSeZ2LBXykAwBEJaAxMjm9wAaN7IgiNyDbJIZ+Insh4sxOPrZ0OLykMPLg5h
/9SrDSztZn7NNtreIRcfRHW4uSzGa6hDLGGt/LA78V+JAQasdAhh70NEwxb1Ms2r
CNQ1EdRfYhrbDrPWCnBAQCRQeYt7kOCUXNKEexhBx68Lszg5kzxtXZlPM4lrxi/S
Cch8r/+C0y+CKoZXHWzIQ9fiWoEM+Z9N0BJzzrdcGOsG3qvq55ElDsShJ//qVjbN
LoqP7i9nJSkzSd5xjyHuY7c92WxFR4VrjmXyI1zaYxWgGCYTtegIY8a7W2YAiAkp
adpA8iWaAAJUBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client