Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: qsswXMsppcHY4Cakc1y36dZSa2FBR2duXFgf4wtHnP0=
Subject key identifier: 58:4F:56:36:64:05:BE:F3:22:1E:27:4D:A8:0C:8E:1A:29:06:7D:A3
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019CABD9A96047857906C914B018E17C2136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: Ve9QPLNIkiIKx4ggY87M9EjQhu8pA3siJ0mvKKYQIns=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a9:60:47:85:79:06:c9:14:b0:18:e1:7c:21:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=584f56366405bef3221e274da80c8e1a29067da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:8a:bf:4a:af:61:9a:25:e5:f1:c4:47:55:
11:a5:b2:dd:2f:40:db:f4:8a:b2:29:5f:33:29:b0:
9c:29:0f:89:48:1a:5a:e2:d8:b2:82:07:07:e8:fd:
5a:32:77:fb:97:40:ea:6b:7b:0d:fb:29:09:bd:85:
2d:e0:86:d2:ae:ae:4b:7b:1e:0f:af:6e:e9:d4:ba:
67:60:17:ca:e8:b8:e9:e8:72:15:1b:9d:2e:1e:13:
59:56:76:38:f6:34:fa:53:46:4d:5d:3b:c9:21:c1:
23:ac:b0:97:0c:44:3e:b7:09:36:25:4c:0d:b9:7d:
5d:97:11:d0:0c:93:ef:66:bd:fc:81:da:50:6b:06:
e9:ce:f1:0d:e7:c2:5e:82:58:f9:14:7a:f2:2d:6a:
b6:fb:4b:f1:af:43:6c:0d:f3:8f:32:3c:b7:ce:d6:
ef:c3:50:3b:3f:c2:04:a3:77:be:d2:2e:3a:c4:c5:
32:47:b0:a5:05:ba:d2:ea:9f:09:4d:9a:a8:88:ed:
30:e1:77:aa:3a:18:9b:45:d6:48:98:be:48:48:17:
ea:e5:5f:5c:6a:fb:ea:35:c1:47:af:93:49:c3:e8:
20:9c:fd:aa:7b:cc:d2:c8:f7:19:d7:c7:51:d0:cd:
3b:ed:4a:91:be:55:c7:f5:59:44:52:ab:df:28:57:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:56:36:64:05:BE:F3:22:1E:27:4D:A8:0C:8E:1A:29:06:7D:A3
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:e3:fb:63:cb:69:3c:f7:86:b9:1d:d9:96:89:6e:40:e1:
5e:a0:7f:e3:c4:50:06:3a:f5:84:71:49:da:5f:19:b2:6c:cb:
a3:50:b7:99:8f:86:ba:32:ff:80:da:a3:8c:c1:6a:8c:f4:e2:
d2:e8:d8:64:b6:6d:7b:98:37:0a:aa:74:12:a3:6d:77:6b:6d:
58:83:78:3c:16:a3:cc:32:a2:ee:cd:78:5a:f3:1e:36:2e:c7:
77:00:ef:6b:d9:fb:92:0f:c1:1c:74:43:e1:06:89:e6:0c:2b:
ac:b8:6e:26:29:9f:d4:15:c9:3b:35:8a:1e:9b:d2:7d:05:e2:
cf:bd:9c:16:ef:19:ec:89:13:7c:4d:41:56:5b:c3:9d:8d:f8:
35:21:31:71:14:c5:56:b1:13:bc:eb:89:f0:c6:58:6b:7b:8c:
d8:f4:3e:5b:f3:c1:2c:bb:0f:73:a1:7a:54:b2:e9:fa:2b:8c:
ad:1d:a1:1a:76:8f:c8:ef:18:d2:cb:f7:0a:8b:a2:12:27:c5:
f1:60:99:34:a0:4e:5e:d7:49:80:88:69:5a:3f:a2:d2:b4:87:
93:63:5b:b9:78:e0:78:7d:d5:df:f0:95:3e:ef:fb:3d:aa:03:
1b:21:a7:df:2c:eb:15:a0:e3:6c:79:51:da:9c:02:5b:7d:d2:
07:56:7d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2algR4V5BskUsBjhfCE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi
OTUwODcwHhcNMjYwMzAyMDAwMTM0WhcNMjYwMzAzMDAwMTM0WjAzMTEwLwYDVQQD
Eyg1ODRmNTYzNjY0MDViZWYzMjIxZTI3NGRhODBjOGUxYTI5MDY3ZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVaKv0qvYZol5fHER1URpbLdL0Db
9IqyKV8zKbCcKQ+JSBpa4tiyggcH6P1aMnf7l0Dqa3sN+ykJvYUt4IbSrq5Lex4P
r27p1LpnYBfK6Ljp6HIVG50uHhNZVnY49jT6U0ZNXTvJIcEjrLCXDEQ+twk2JUwN
uX1dlxHQDJPvZr38gdpQawbpzvEN58Jeglj5FHryLWq2+0vxr0NsDfOPMjy3ztbv
w1A7P8IEo3e+0i46xMUyR7ClBbrS6p8JTZqoiO0w4XeqOhibRdZImL5ISBfq5V9c
avvqNcFHr5NJw+ggnP2qe8zSyPcZ18dR0M077UqRvlXH9VlEUqvfKFddoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhPVjZkBb7zIh4nTagMjhopBn2jMB8GA1UdIwQY
MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt
NzEyYjFhNzk2OGU2LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2
LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAXj+2PL
aTz3hrkd2ZaJbkDhXqB/48RQBjr1hHFJ2l8ZsmzLo1C3mY+GujL/gNqjjMFqjPTi
0ujYZLZte5g3Cqp0EqNtd2ttWIN4PBajzDKi7s14WvMeNi7HdwDva9n7kg/BHHRD
4QaJ5gwrrLhuJimf1BXJOzWKHpvSfQXiz72cFu8Z7IkTfE1BVlvDnY34NSExcRTF
VrETvOuJ8MZYa3uM2PQ+W/PBLLsPc6F6VLLp+iuMrR2hGnaPyO8Y0sv3CouiEifF
8WCZNKBOXtdJgIhpWj+i0rSHk2NbuXjgeH3V3/CVPu/7PaoDGyGn3yzrFaDjbHlR
2pwCW33SB1Z9AQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:40 2026 by rpki-client