Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: LJBIHgfmr5yXAH0BF0NlVsrV6SS4laJR3T3cJLeFCRI=
Subject key identifier: 9F:C2:83:09:BD:0B:1F:A4:83:74:5A:2B:87:09:80:5B:B7:95:E0:76
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019CAB6B304DE612AEA0172B1F73431A262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: KU1v91iHjKB7pg7trC6yged7hJ2pdzT3bmyNcK/g7zQ=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:30:4d:e6:12:ae:a0:17:2b:1f:73:43:1a:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=9fc28309bd0b1fa483745a2b8709805bb795e076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:30:04:20:39:75:bb:5d:e7:74:ca:c5:3f:
2a:c8:41:cd:73:8a:75:80:96:9c:fb:6f:fe:7a:06:
58:76:33:e9:55:83:86:1e:69:c9:4c:e3:43:5d:0a:
ac:31:f5:1e:6c:64:4e:2c:1b:9a:6c:b5:36:96:95:
29:00:af:8c:51:d4:84:6a:25:36:c1:aa:a1:d9:97:
19:91:71:5a:70:e6:c8:0d:1e:d3:b5:84:bc:bb:a6:
fc:44:5b:1a:95:6a:c6:0b:30:79:0b:f2:d4:18:59:
3e:af:1e:fe:b0:99:ef:f6:b4:2b:9f:cd:48:71:a0:
d7:ff:e1:c6:26:cc:5d:1c:77:4f:6a:41:67:63:f6:
43:4e:22:08:d3:2e:d7:49:a7:e7:10:87:21:5f:be:
55:a0:5d:98:ad:7f:6d:70:24:c2:0f:66:66:e0:51:
64:66:b3:14:46:7e:9d:66:49:b2:35:64:88:71:dd:
e2:83:2f:12:e1:2b:03:ec:5a:f2:6c:18:f5:8b:59:
ea:42:5d:47:2d:3a:68:7b:42:d5:bb:3e:d6:c6:b9:
0f:f8:9a:d1:8b:05:24:2b:0b:f0:3f:b0:ee:10:2c:
dd:4b:85:3b:3a:65:32:42:58:26:ca:0b:40:4c:dc:
d1:47:18:20:49:0d:92:88:6f:8e:7f:e9:9f:09:40:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:83:09:BD:0B:1F:A4:83:74:5A:2B:87:09:80:5B:B7:95:E0:76
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b5:c8:01:8f:5f:e7:62:cb:e3:31:a5:43:7a:92:67:4a:ae:
3a:f0:c6:4f:7d:40:97:4d:19:50:41:5f:55:bb:38:d8:30:7d:
71:30:4f:8b:2d:f2:56:23:b8:79:7c:4a:f6:0a:14:6c:0f:ba:
48:d5:ad:87:53:89:ba:ce:df:dc:8c:77:ad:d3:1c:26:93:09:
6b:a4:d9:7b:f9:0d:a3:aa:74:90:a7:9f:58:cd:ca:33:34:d1:
18:73:a8:9b:42:d4:a9:3e:1a:20:4b:65:62:25:9a:27:8b:80:
9e:94:dd:b6:c1:63:93:93:2b:ce:d3:04:15:7c:69:3b:d4:03:
85:76:19:1f:86:38:5b:60:bb:73:61:12:4c:a2:4c:6b:b4:aa:
62:8f:69:2e:f3:4d:a2:eb:bb:4c:69:37:86:d9:47:d8:aa:43:
00:5e:3b:b9:9e:10:a6:92:71:9d:11:72:3d:9f:a1:f7:b6:4e:
5f:6f:7e:58:c3:3f:89:12:4e:5b:e3:68:f9:3f:af:83:eb:6e:
e1:82:77:8d:c9:0b:c1:cf:b5:b8:41:ac:95:34:6c:2a:ef:cc:
e3:44:bc:cb:b2:63:19:b9:f0:c7:45:14:24:3d:a4:e0:51:6d:
42:bf:ea:39:f3:cd:52:56:1b:93:5f:99:30:99:97:8f:a0:45:
f9:d2:4f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazBN5hKuoBcrH3NDGiYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDYwNjQxODY0OTBkOGNlYTIzNDdmZjdhM2E4MjQ5MmQx
Zjc5NzcwHhcNMjYwMzAxMjIwMDU0WhcNMjYwMzAyMjIwMDU0WjAzMTEwLwYDVQQD
Eyg5ZmMyODMwOWJkMGIxZmE0ODM3NDVhMmI4NzA5ODA1YmI3OTVlMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPwwBCA5dbtd53TKxT8qyEHNc4p1
gJac+2/+egZYdjPpVYOGHmnJTONDXQqsMfUebGROLBuabLU2lpUpAK+MUdSEaiU2
waqh2ZcZkXFacObIDR7TtYS8u6b8RFsalWrGCzB5C/LUGFk+rx7+sJnv9rQrn81I
caDX/+HGJsxdHHdPakFnY/ZDTiII0y7XSafnEIchX75VoF2YrX9tcCTCD2Zm4FFk
ZrMURn6dZkmyNWSIcd3igy8S4SsD7FrybBj1i1nqQl1HLTpoe0LVuz7WxrkP+JrR
iwUkKwvwP7DuECzdS4U7OmUyQlgmygtATNzRRxggSQ2SiG+Of+mfCUBY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/Cgwm9Cx+kg3RaK4cJgFu3leB2MB8GA1UdIwQY
MBaAFNjWBkGGSQ2M6iNH/3o6gkktH3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTIt
NTYwODVjOWU1MjJlLzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTItNTYwODVjOWU1MjJl
LzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbXIAY9f
52LL4zGlQ3qSZ0quOvDGT31Al00ZUEFfVbs42DB9cTBPiy3yViO4eXxK9goUbA+6
SNWth1OJus7f3Ix3rdMcJpMJa6TZe/kNo6p0kKefWM3KMzTRGHOom0LUqT4aIEtl
YiWaJ4uAnpTdtsFjk5MrztMEFXxpO9QDhXYZH4Y4W2C7c2ESTKJMa7SqYo9pLvNN
ouu7TGk3htlH2KpDAF47uZ4QppJxnRFyPZ+h97ZOX29+WMM/iRJOW+No+T+vg+tu
4YJ3jckLwc+1uEGslTRsKu/M40S8y7JjGbnwx0UUJD2k4FFtQr/qOfPNUlYbk1+Z
MJmXj6BF+dJPlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:57 2026 by rpki-client