Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: s0zv/Iokoq5RifK0e6h7ih/gM7sLZ5JtQw/PX2pGbe0=
Subject key identifier: E8:C9:C3:1F:9A:59:3F:3F:39:CE:A7:9F:98:20:ED:BA:A5:DC:D5:98
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019CAAFD0793BAB5D3FB3A0EECC5D13A5B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0585
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: fXjQBd3MeMkGBNvUGCIujMioydd/ymYguvVUaSGYF/U=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:07:93:ba:b5:d3:fb:3a:0e:ec:c5:d1:3a:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=e8c9c31f9a593f3f39cea79f9820edbaa5dcd598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:4b:e9:87:3e:31:7a:46:50:24:9e:30:94:
d8:f3:bd:61:2c:4a:fb:85:ba:9e:2f:ac:d5:d9:e2:
77:8b:28:8b:99:52:fc:31:06:06:a0:32:d5:49:52:
1d:6f:cb:c4:2e:21:a5:65:7c:55:e7:e2:54:44:00:
3d:08:e1:f1:35:e5:99:4e:e9:95:9c:99:3b:67:97:
62:7a:c6:71:8d:d8:ef:e5:10:94:bf:f5:0f:5c:d1:
51:c1:36:04:d5:82:c5:19:51:90:8d:ff:64:ae:80:
74:32:45:54:6f:f4:ff:c3:7f:b7:73:aa:00:ad:e1:
3f:26:72:f0:24:78:c3:4d:e0:10:aa:99:cc:92:67:
01:48:9d:f7:fd:13:a6:2a:09:94:ed:7d:c9:f7:e6:
66:8f:98:4b:44:c2:54:c5:cc:0f:53:80:81:ab:33:
ef:9c:f2:40:46:f8:95:7d:01:21:5d:48:ba:42:8e:
8d:35:f0:5e:b0:81:b7:ae:d5:13:b6:05:c7:9e:f3:
45:d5:86:78:13:17:da:6f:15:ac:27:d1:b6:36:ed:
06:66:56:1b:61:58:d8:98:ee:07:19:20:2b:e0:7c:
8e:2d:5c:61:85:3a:c5:4d:ee:6d:5c:61:27:de:85:
04:65:69:1f:3d:ef:c7:8c:85:12:cb:da:fe:90:cd:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:C3:1F:9A:59:3F:3F:39:CE:A7:9F:98:20:ED:BA:A5:DC:D5:98
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b5:b0:16:1f:58:9a:77:3b:5b:b6:2a:55:e4:9d:b6:49:5c:
3c:2b:a2:00:50:b3:8d:43:3a:db:f1:f4:68:1a:84:b4:4f:be:
ad:8b:9b:08:fa:a7:18:07:c8:07:9c:07:6c:ee:8f:8c:d0:f4:
6f:93:23:1d:f3:5c:71:f8:52:58:85:f5:30:68:61:ce:f2:94:
8d:cf:cc:f2:13:57:1e:59:d0:b1:2d:b4:23:4e:bc:f6:93:f6:
72:51:18:c9:3a:36:6d:b6:bf:34:79:c6:0e:c4:f2:3c:f5:64:
65:b4:3d:7c:16:b0:7b:85:d3:d0:53:a2:d6:49:11:20:80:ae:
b7:c3:cb:ab:19:4c:2f:c0:23:c6:1b:95:05:26:a6:5f:3c:dc:
67:f1:7a:59:42:29:c3:ff:7a:2a:54:4b:f5:cb:89:f6:bf:ad:
34:a4:a7:91:c0:cf:61:1a:0e:3e:52:b4:4d:64:67:36:c7:b9:
e8:41:6a:44:73:81:db:9b:32:05:00:80:83:cd:bc:aa:e8:86:
16:f1:01:af:d2:61:a7:4d:d6:0b:28:6c:e9:f7:f4:92:c3:a8:
78:ed:19:d6:fc:36:9b:d7:73:27:b3:3d:20:3e:c2:92:99:27:
2c:62:55:9e:65:6f:2c:c1:01:cb:7d:e1:02:1c:a0:5a:d1:ce:
d5:dd:80:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QeTurXT+zoO7MXROltiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3
MDZjZTIwHhcNMjYwMzAxMjAwMDM0WhcNMjYwMzAyMjAwMDM0WjAzMTEwLwYDVQQD
EyhlOGM5YzMxZjlhNTkzZjNmMzljZWE3OWY5ODIwZWRiYWE1ZGNkNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg1L6Yc+MXpGUCSeMJTY871hLEr7
hbqeL6zV2eJ3iyiLmVL8MQYGoDLVSVIdb8vELiGlZXxV5+JURAA9COHxNeWZTumV
nJk7Z5diesZxjdjv5RCUv/UPXNFRwTYE1YLFGVGQjf9kroB0MkVUb/T/w3+3c6oA
reE/JnLwJHjDTeAQqpnMkmcBSJ33/ROmKgmU7X3J9+Zmj5hLRMJUxcwPU4CBqzPv
nPJARviVfQEhXUi6Qo6NNfBesIG3rtUTtgXHnvNF1YZ4ExfabxWsJ9G2Nu0GZlYb
YVjYmO4HGSAr4HyOLVxhhTrFTe5tXGEn3oUEZWkfPe/HjIUSy9r+kM35swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjJwx+aWT8/Oc6nn5gg7bql3NWYMB8GA1UdIwQY
MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt
MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0
LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbWwFh9Y
mnc7W7YqVeSdtklcPCuiAFCzjUM62/H0aBqEtE++rYubCPqnGAfIB5wHbO6PjND0
b5MjHfNccfhSWIX1MGhhzvKUjc/M8hNXHlnQsS20I0689pP2clEYyTo2bba/NHnG
DsTyPPVkZbQ9fBawe4XT0FOi1kkRIICut8PLqxlML8AjxhuVBSamXzzcZ/F6WUIp
w/96KlRL9cuJ9r+tNKSnkcDPYRoOPlK0TWRnNse56EFqRHOB25syBQCAg828quiG
FvEBr9Jhp03WCyhs6ff0ksOoeO0Z1vw2m9dzJ7M9ID7CkpknLGJVnmVvLMEBy33h
AhygWtHO1d2ABQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:18 2026 by rpki-client