Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: ta272WGTwBkuUSNIo7LwDxb5XxbItmpyyI7KT9hpqxw=
Subject key identifier: E1:F0:83:B6:CC:20:0B:E2:DA:F3:3A:48:CF:14:A9:8C:FF:2E:BF:72
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019D98504CEC052D69D6A424014214DFE4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0818
Signing time: Thu 16 Apr 2026 22:01:32 +0000
Manifest this update: Thu 16 Apr 2026 22:01:32 +0000
Manifest next update: Fri 17 Apr 2026 22:01:32 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: exj3SXW+mJC5SyxHUvMpQVy4oYxMM15z4aNHzNsFe9Y=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4c:ec:05:2d:69:d6:a4:24:01:42:14:df:e4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Apr 16 22:01:32 2026 GMT
Not After : Apr 17 22:01:32 2026 GMT
Subject: CN=e1f083b6cc200be2daf33a48cf14a98cff2ebf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:15:1b:59:f6:a4:ed:eb:0a:2f:76:22:cd:
37:c6:ed:55:e4:aa:63:66:ec:ba:c1:4d:ef:cb:95:
16:c6:20:92:5f:a7:c2:3b:3e:37:d1:e6:37:d9:4b:
f2:93:e3:7b:a1:86:03:82:b7:6a:76:c2:b4:5f:3d:
c0:e8:82:9c:b1:53:e3:03:c9:25:2d:83:ea:e1:49:
6c:65:4e:c5:b9:dd:00:5b:1d:91:cc:ca:fc:6c:db:
7e:34:80:98:67:bf:7d:21:86:42:10:4a:01:d4:0d:
1f:e9:f5:2c:ea:82:39:ff:ff:4d:08:34:a1:d6:54:
80:15:28:cd:5e:a6:de:9b:62:97:52:3c:86:28:25:
bb:d9:35:7a:17:2a:16:da:5d:76:03:89:f3:4a:6c:
34:f4:48:f3:16:e3:20:8a:c4:c0:63:18:55:1b:ae:
b4:1c:8b:ca:7a:5c:e0:4e:69:80:4e:d6:86:7d:83:
ef:75:65:82:a3:53:9b:fe:4f:6c:65:c9:29:ae:21:
53:ec:d3:9a:c9:d0:e4:66:b2:b8:5c:9b:b3:31:36:
b2:ca:79:7d:45:6d:0e:bd:37:6f:0c:ac:95:5b:38:
bd:8d:12:6b:1c:23:73:42:d0:37:6c:2d:99:e8:b3:
6b:8b:62:18:30:b3:66:71:8d:b3:6d:dd:c9:95:a8:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:83:B6:CC:20:0B:E2:DA:F3:3A:48:CF:14:A9:8C:FF:2E:BF:72
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:28:6d:4f:6b:3b:5f:27:a1:8d:62:bb:7a:3b:5d:5e:64:
0c:ec:28:54:22:77:78:5c:6e:70:33:8f:b6:04:cc:33:c3:93:
68:a7:a7:92:56:be:25:6c:72:e7:70:7d:09:c4:30:68:cb:c8:
27:f5:e0:6f:ef:bd:5f:9a:92:b7:1d:d4:36:b7:42:95:7c:6a:
fd:af:47:f2:6a:e7:69:f5:be:c4:46:37:0c:f0:a6:01:7e:92:
23:4b:78:14:22:07:c2:bd:88:8f:9f:b8:d7:e5:f8:a1:9f:83:
14:4a:aa:13:60:ef:a4:28:c7:ec:d5:86:88:12:04:ec:0d:f1:
cb:a8:df:7b:14:b9:9b:6d:3c:65:2d:b9:50:56:5a:fc:30:01:
a8:c3:3a:83:ca:3a:70:53:b7:e7:76:ae:ea:f7:fe:13:7a:e4:
a6:09:10:8e:fe:e7:b3:d1:16:89:c1:01:41:11:2e:b4:88:ad:
c9:98:ae:c5:a0:87:4a:97:f9:6b:5a:3a:a7:eb:7d:10:2c:50:
16:cc:1b:0e:8e:8e:05:b2:3f:0a:b3:ab:94:6a:50:a8:b7:de:
b3:7e:b7:37:b7:24:24:21:c3:20:1a:a7:42:64:73:36:c3:71:
88:2b:7a:2a:fa:71:04:12:cb:26:aa:01:2f:eb:3e:04:2e:1e:
72:31:26:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEzsBS1p1qQkAUIU3+TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjYwNDE2MjIwMTMyWhcNMjYwNDE3MjIwMTMyWjAzMTEwLwYDVQQD
EyhlMWYwODNiNmNjMjAwYmUyZGFmMzNhNDhjZjE0YTk4Y2ZmMmViZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39AVG1n2pO3rCi92Is03xu1V5Kpj
Zuy6wU3vy5UWxiCSX6fCOz430eY32Uvyk+N7oYYDgrdqdsK0Xz3A6IKcsVPjA8kl
LYPq4UlsZU7Fud0AWx2RzMr8bNt+NICYZ799IYZCEEoB1A0f6fUs6oI5//9NCDSh
1lSAFSjNXqbem2KXUjyGKCW72TV6FyoW2l12A4nzSmw09EjzFuMgisTAYxhVG660
HIvKelzgTmmATtaGfYPvdWWCo1Ob/k9sZckpriFT7NOaydDkZrK4XJuzMTayynl9
RW0OvTdvDKyVWzi9jRJrHCNzQtA3bC2Z6LNri2IYMLNmcY2zbd3JlagkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHwg7bMIAvi2vM6SM8UqYz/Lr9yMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDAobU9r
O18noY1iu3o7XV5kDOwoVCJ3eFxucDOPtgTMM8OTaKenkla+JWxy53B9CcQwaMvI
J/Xgb++9X5qStx3UNrdClXxq/a9H8mrnafW+xEY3DPCmAX6SI0t4FCIHwr2Ij5+4
1+X4oZ+DFEqqE2DvpCjH7NWGiBIE7A3xy6jfexS5m208ZS25UFZa/DABqMM6g8o6
cFO353au6vf+E3rkpgkQjv7ns9EWicEBQREutIityZiuxaCHSpf5a1o6p+t9ECxQ
FswbDo6OBbI/CrOrlGpQqLfes363N7ckJCHDIBqnQmRzNsNxiCt6KvpxBBLLJqoB
L+s+BC4ecjEmrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:17 2026 by rpki-client