Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: DNqkNFVTQKGDOCWidVmpUvEy/WfJtp9zw9dyHZtmdNM=
Subject key identifier: 9F:26:CA:2A:8D:93:70:F1:BE:A4:08:A0:AB:B0:2F:78:DA:DE:E4:D6
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019CABD98A9119C29492314B5629B6CD88A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: kXReH6ef22A+2rm1z99HkwMF4L7LNmaA6JYiYwi/oxc=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8a:91:19:c2:94:92:31:4b:56:29:b6:cd:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=9f26ca2a8d9370f1bea408a0abb02f78dadee4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:58:16:ec:d2:57:a7:6e:40:0c:a4:46:c8:
09:19:35:58:6e:94:bf:49:09:61:45:5b:90:e7:1d:
d5:17:b2:45:71:18:bb:4d:52:52:1f:9e:ad:5a:df:
49:d0:e2:8b:8e:8f:f7:fe:5a:12:e4:c0:7c:32:8d:
8b:db:1d:07:92:a2:28:0e:b5:69:72:fd:6e:d0:a2:
cc:f4:fa:1e:31:89:04:31:8a:f9:9b:10:11:54:ea:
e8:47:68:09:73:b4:84:27:4b:31:3d:0c:6c:0a:50:
5e:de:c0:70:9b:a5:dd:f6:e0:ce:e9:10:97:c1:04:
0d:23:26:f1:98:bd:b3:1c:72:3a:8c:6a:8a:53:b9:
f6:89:ff:4f:00:4e:63:58:8f:8f:eb:0b:c6:d6:f2:
e2:5f:c3:53:72:e6:8e:3b:25:1b:c1:61:34:fa:1a:
4a:ca:a8:3a:64:68:9b:9d:c6:77:df:12:14:96:10:
fd:cb:3a:77:d7:80:c0:54:33:39:ad:65:e2:9e:19:
b6:2e:09:08:bf:6b:82:5a:22:8e:b0:94:ab:87:f4:
db:3f:38:b0:93:f7:67:6b:1a:4d:d0:8c:52:f1:bf:
2a:55:40:1b:69:87:52:c7:f5:22:dc:9c:3e:81:8d:
b1:09:22:b9:23:3b:96:96:a3:35:34:a4:5d:a3:7e:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:26:CA:2A:8D:93:70:F1:BE:A4:08:A0:AB:B0:2F:78:DA:DE:E4:D6
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8f:a0:db:a3:e1:8b:cc:fe:37:16:8e:22:44:18:6d:4c:79:
c9:05:9c:22:89:f9:52:c0:62:0b:7a:a7:13:22:43:ad:04:c5:
98:3c:b7:29:c5:1e:16:eb:9c:94:02:d0:59:6c:8b:52:c9:96:
26:c4:b1:69:c7:0c:69:af:0b:0b:19:54:57:2e:64:f5:34:3a:
80:b5:1c:c5:af:37:a6:6f:60:d4:0e:f5:68:88:26:0f:62:b3:
d9:db:0d:d5:f0:eb:5f:9e:eb:25:3d:75:1a:cc:7b:bd:a6:2d:
b1:c1:9b:d2:d9:98:fb:9d:77:2c:94:46:68:0b:57:aa:b9:f0:
93:b9:84:d7:33:d8:88:2a:bc:37:a9:74:57:ac:1b:88:3a:dd:
8e:04:11:75:9b:1b:4f:66:0b:e9:0f:ca:4b:1f:ba:14:5a:94:
49:bb:f1:25:41:ee:fe:0f:e8:06:cb:ca:78:0d:95:5d:06:67:
ce:6a:bf:53:f3:b7:06:ef:0e:ed:62:8c:65:c3:c2:67:5a:1e:
cf:19:c4:c6:29:c8:80:c2:8e:6c:d7:95:63:13:ee:37:40:1a:
f9:e2:e4:99:a1:b7:ba:92:1b:92:e5:e7:ec:c5:ea:ac:57:5e:
0e:ee:29:72:7a:86:5e:d5:96:b8:06:f8:12:4f:fe:7f:75:3a:
93:d9:31:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2YqRGcKUkjFLVim2zYimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjYwMzAyMDAwMTI2WhcNMjYwMzAzMDAwMTI2WjAzMTEwLwYDVQQD
Eyg5ZjI2Y2EyYThkOTM3MGYxYmVhNDA4YTBhYmIwMmY3OGRhZGVlNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUJYFuzSV6duQAykRsgJGTVYbpS/
SQlhRVuQ5x3VF7JFcRi7TVJSH56tWt9J0OKLjo/3/loS5MB8Mo2L2x0HkqIoDrVp
cv1u0KLM9PoeMYkEMYr5mxARVOroR2gJc7SEJ0sxPQxsClBe3sBwm6Xd9uDO6RCX
wQQNIybxmL2zHHI6jGqKU7n2if9PAE5jWI+P6wvG1vLiX8NTcuaOOyUbwWE0+hpK
yqg6ZGibncZ33xIUlhD9yzp314DAVDM5rWXinhm2LgkIv2uCWiKOsJSrh/TbPziw
k/dnaxpN0IxS8b8qVUAbaYdSx/Ui3Jw+gY2xCSK5IzuWlqM1NKRdo35A8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8myiqNk3DxvqQIoKuwL3ja3uTWMB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtY+g26Ph
i8z+NxaOIkQYbUx5yQWcIon5UsBiC3qnEyJDrQTFmDy3KcUeFuuclALQWWyLUsmW
JsSxaccMaa8LCxlUVy5k9TQ6gLUcxa83pm9g1A71aIgmD2Kz2dsN1fDrX57rJT11
Gsx7vaYtscGb0tmY+513LJRGaAtXqrnwk7mE1zPYiCq8N6l0V6wbiDrdjgQRdZsb
T2YL6Q/KSx+6FFqUSbvxJUHu/g/oBsvKeA2VXQZnzmq/U/O3Bu8O7WKMZcPCZ1oe
zxnExinIgMKObNeVYxPuN0Aa+eLkmaG3upIbkuXn7MXqrFdeDu4pcnqGXtWWuAb4
Ek/+f3U6k9kxWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:06 2026 by rpki-client