Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: JGZ0HsHcV0SpN6FZEq+MvipLMWl8SteLmUIT/9Bm0f8=
Subject key identifier: 7E:54:40:D0:C6:5A:95:51:D0:82:63:C3:3A:FF:B5:7F:9F:89:D3:AF
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019CAC7E663110E027394B168160BF594A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:30 +0000
Manifest this update: Mon 02 Mar 2026 03:01:30 +0000
Manifest next update: Tue 03 Mar 2026 03:01:30 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: ZpO+4NL7XB6hp8C83cbxJ01iDvSofodZ2rPgwsjUhqs=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:66:31:10:e0:27:39:4b:16:81:60:bf:59:4a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Mar 2 03:01:30 2026 GMT
Not After : Mar 3 03:01:30 2026 GMT
Subject: CN=7e5440d0c65a9551d08263c33affb57f9f89d3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:47:95:a8:a6:d3:c1:02:6c:c8:7a:a4:0b:
03:ff:29:62:c8:ec:2c:82:80:38:aa:71:f9:80:d0:
e1:19:ba:bb:fe:70:7e:fc:98:74:eb:8f:20:63:f3:
e9:7a:7e:a7:90:64:2b:ce:d5:d4:d4:63:df:a7:3d:
e3:a7:3e:f5:ba:67:d8:bc:39:db:a1:b8:4b:8f:b5:
77:8e:a3:72:57:21:db:50:90:b9:87:ff:d5:de:40:
43:07:9e:39:78:e6:df:e5:e1:5d:45:c7:44:c5:66:
72:74:69:2c:3e:84:45:cf:21:87:d5:c6:26:cf:ee:
7f:8d:0d:99:f3:44:42:54:21:48:62:10:81:14:03:
a7:68:7d:10:f7:c4:2d:5f:3f:7b:39:47:cb:92:71:
56:1f:ed:4f:46:30:ae:bf:27:4f:5d:d0:21:23:ce:
24:78:2f:a0:44:2c:9a:08:28:93:18:b6:5d:db:4a:
a0:05:f0:03:97:9f:84:ce:b4:4e:8f:a8:75:83:8d:
d3:bb:8f:ce:7f:cb:f9:76:07:f6:36:47:f6:94:be:
a3:67:f6:6f:53:8e:de:93:28:94:11:81:3d:2f:56:
2b:12:32:0f:5b:c4:61:ca:fd:34:bb:fc:7b:40:6e:
fb:88:d3:a0:4f:48:a0:77:3d:55:f5:1f:b6:33:c5:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:40:D0:C6:5A:95:51:D0:82:63:C3:3A:FF:B5:7F:9F:89:D3:AF
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:aa:ed:35:26:70:38:2f:66:54:ec:0a:9f:06:0b:b7:32:0f:
14:7d:c0:b2:7a:8d:a7:68:b1:8b:7f:f9:34:cc:c9:97:64:2b:
b5:eb:de:8e:9f:8b:ce:90:3c:94:48:5d:41:5c:b1:cb:88:86:
8a:f1:87:1f:64:b1:3f:e5:5e:c7:43:3d:3b:b5:f3:4c:f8:e2:
36:89:9f:8e:b1:32:37:c0:8b:4b:bc:c5:e6:c4:cd:28:b5:05:
4a:82:46:fd:78:a9:b3:9e:2e:21:36:8d:05:a3:ef:c0:b2:e4:
50:38:1a:cb:59:78:2a:e0:cb:91:f7:ab:e6:f4:28:8c:a4:54:
ba:49:da:d7:54:c9:d6:bf:da:2e:9e:34:d6:de:a0:08:de:e3:
a5:ef:c6:77:a5:96:0a:a5:a4:c9:61:42:22:af:f2:7d:bc:33:
b0:1a:8e:1f:3e:11:d3:d2:0d:ac:08:cb:9f:df:7e:d0:b0:fb:
bf:5b:27:e9:f3:3e:58:8a:c8:fc:35:1f:fe:1f:82:71:01:fe:
02:5e:6a:a4:5c:82:ce:8a:b6:ba:ce:32:d5:c1:c0:3f:6c:c3:
7f:62:99:25:57:4e:d6:f4:af:1c:22:8f:54:75:77:a5:fb:e9:
e9:f1:85:2a:81:ae:b3:5e:03:bd:02:ac:0b:10:c7:5b:a5:e3:
2e:0a:3d:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfmYxEOAnOUsWgWC/WUpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1
YjVkN2IwHhcNMjYwMzAyMDMwMTMwWhcNMjYwMzAzMDMwMTMwWjAzMTEwLwYDVQQD
Eyg3ZTU0NDBkMGM2NWE5NTUxZDA4MjYzYzMzYWZmYjU3ZjlmODlkM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLhHlaim08ECbMh6pAsD/yliyOws
goA4qnH5gNDhGbq7/nB+/Jh0648gY/Ppen6nkGQrztXU1GPfpz3jpz71umfYvDnb
obhLj7V3jqNyVyHbUJC5h//V3kBDB545eObf5eFdRcdExWZydGksPoRFzyGH1cYm
z+5/jQ2Z80RCVCFIYhCBFAOnaH0Q98QtXz97OUfLknFWH+1PRjCuvydPXdAhI84k
eC+gRCyaCCiTGLZd20qgBfADl5+EzrROj6h1g43Tu4/Of8v5dgf2Nkf2lL6jZ/Zv
U47ekyiUEYE9L1YrEjIPW8Rhyv00u/x7QG77iNOgT0igdz1V9R+2M8VmQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5UQNDGWpVR0IJjwzr/tX+fidOvMB8GA1UdIwQY
MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct
NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy
LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVartNSZw
OC9mVOwKnwYLtzIPFH3AsnqNp2ixi3/5NMzJl2Qrtevejp+LzpA8lEhdQVyxy4iG
ivGHH2SxP+Vex0M9O7XzTPjiNomfjrEyN8CLS7zF5sTNKLUFSoJG/Xips54uITaN
BaPvwLLkUDgay1l4KuDLkfer5vQojKRUukna11TJ1r/aLp401t6gCN7jpe/Gd6WW
CqWkyWFCIq/yfbwzsBqOHz4R09INrAjLn99+0LD7v1sn6fM+WIrI/DUf/h+CcQH+
Al5qpFyCzoq2us4y1cHAP2zDf2KZJVdO1vSvHCKPVHV3pfvp6fGFKoGus14DvQKs
CxDHW6XjLgo9fQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:17 2026 by rpki-client