Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: La1CRvyBoyzP9VExEfwjl/85OEN2t4wBzaXk4SLLPgo=
Subject key identifier: D2:89:AD:2E:89:B3:EC:27:B6:71:56:6A:D6:B6:F0:30:43:04:01:0E
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019EC0DADB6F6FEBD913AAB84903AECB94AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 035B
Signing time: Sat 13 Jun 2026 12:00:28 +0000
Manifest this update: Sat 13 Jun 2026 12:00:28 +0000
Manifest next update: Sun 14 Jun 2026 12:00:28 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: nRI5WG91IKvDFLkTTl00aAsQ9LkeE3o11I9Gg3+26HQ=)
2: VQyFxclB4S79ZiZcISYdl5ii3Yc.roa (hash: iaO6GBvF8FB/BRFJa4EM0A0S19lMUnhNSB3q1meSxEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:db:6f:6f:eb:d9:13:aa:b8:49:03:ae:cb:94:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Jun 13 12:00:28 2026 GMT
Not After : Jun 14 12:00:28 2026 GMT
Subject: CN=d289ad2e89b3ec27b671566ad6b6f0304304010e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:4e:01:06:b9:67:2e:94:68:a2:55:6a:fb:
51:0b:a6:b8:03:e8:b9:d4:7b:26:35:98:19:af:4b:
ec:54:76:02:4e:0d:e3:f4:bd:ca:90:4c:35:ed:d3:
82:ca:14:cb:06:ab:83:9d:70:30:72:65:ab:5b:15:
a8:c1:75:8f:f9:c6:56:88:08:e9:15:f7:a9:08:3d:
bd:be:71:63:3f:bd:26:d8:14:cd:62:66:50:6c:d8:
f7:c2:8e:35:28:8f:9f:c9:5c:9d:d8:c3:2e:98:4e:
3c:88:fe:53:32:aa:82:e2:d4:27:3d:e1:0c:d5:f9:
c6:0d:10:0a:b1:91:8c:8d:f9:d6:e7:1a:c8:4d:f0:
78:6b:f1:b3:b8:d9:83:40:78:32:63:ba:7b:11:5a:
19:f7:3b:19:72:74:c4:31:19:b6:12:46:f3:35:e6:
45:e9:2c:dd:64:3a:e2:2b:27:e1:52:ad:a6:a7:ea:
b4:4a:98:a5:6d:42:98:ce:7f:d9:aa:8b:cc:8c:28:
9e:59:42:b0:2e:cd:2a:4b:48:4f:70:11:5d:b2:f2:
3c:a8:1b:bb:57:1c:9a:a0:b8:b1:4d:9b:19:8b:38:
71:78:d9:54:1c:cb:c7:f1:4e:e9:5f:b2:90:ee:7e:
db:f7:35:38:bf:6f:c3:15:d5:50:3d:0b:53:ae:cb:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:AD:2E:89:B3:EC:27:B6:71:56:6A:D6:B6:F0:30:43:04:01:0E
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d0:02:e6:3b:b1:0f:29:18:ed:f6:1f:5d:e4:0f:31:f0:9a:
f1:19:e8:37:9a:d4:98:ad:6d:cb:1c:5c:93:9d:74:9d:6d:01:
1a:78:4e:be:91:ac:8a:d5:3d:22:20:76:23:f2:29:14:57:5d:
dd:64:93:dc:94:c2:23:84:11:2d:1e:36:6a:45:5c:dc:9f:d4:
7e:41:e4:2d:a8:44:48:be:df:e0:51:45:b1:86:80:aa:1b:04:
51:d3:51:13:32:65:0f:8c:83:a9:9b:d6:7d:f0:39:0b:66:88:
83:a2:61:b8:b0:01:05:12:8f:1b:60:93:16:13:60:6d:df:aa:
d9:31:81:db:1d:33:f6:f5:8b:23:f4:af:92:3a:d8:12:dd:89:
33:d2:94:0e:cb:f7:ea:15:62:85:66:4a:5b:58:c1:9f:05:e9:
7f:f0:2e:9f:cc:6a:23:a6:fb:76:0a:ea:c1:61:80:e5:4f:4d:
e8:81:6d:c6:7a:e1:f9:12:9f:f2:47:be:a7:46:b4:30:94:9a:
9f:dd:29:97:8f:4c:5a:59:16:7f:d6:81:67:10:27:7e:18:8e:
cd:67:39:13:5e:e8:6e:ea:4e:a2:a8:29:27:96:fc:11:fd:6d:
9e:51:80:2b:59:21:05:d0:65:7e:f5:ed:c2:f8:42:8a:6f:a4:
cb:36:57:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2ttvb+vZE6q4SQOuy5SrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy
NGVmNjUwHhcNMjYwNjEzMTIwMDI4WhcNMjYwNjE0MTIwMDI4WjAzMTEwLwYDVQQD
EyhkMjg5YWQyZTg5YjNlYzI3YjY3MTU2NmFkNmI2ZjAzMDQzMDQwMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56pOAQa5Zy6UaKJVavtRC6a4A+i5
1HsmNZgZr0vsVHYCTg3j9L3KkEw17dOCyhTLBquDnXAwcmWrWxWowXWP+cZWiAjp
FfepCD29vnFjP70m2BTNYmZQbNj3wo41KI+fyVyd2MMumE48iP5TMqqC4tQnPeEM
1fnGDRAKsZGMjfnW5xrITfB4a/GzuNmDQHgyY7p7EVoZ9zsZcnTEMRm2EkbzNeZF
6SzdZDriKyfhUq2mp+q0SpilbUKYzn/ZqovMjCieWUKwLs0qS0hPcBFdsvI8qBu7
VxyaoLixTZsZizhxeNlUHMvH8U7pX7KQ7n7b9zU4v2/DFdVQPQtTrssHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKJrS6Js+wntnFWata28DBDBAEOMB8GA1UdIwQY
MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt
NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll
LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNAC5jux
DykY7fYfXeQPMfCa8RnoN5rUmK1tyxxck510nW0BGnhOvpGsitU9IiB2I/IpFFdd
3WST3JTCI4QRLR42akVc3J/UfkHkLahESL7f4FFFsYaAqhsEUdNREzJlD4yDqZvW
ffA5C2aIg6JhuLABBRKPG2CTFhNgbd+q2TGB2x0z9vWLI/SvkjrYEt2JM9KUDsv3
6hVihWZKW1jBnwXpf/Aun8xqI6b7dgrqwWGA5U9N6IFtxnrh+RKf8ke+p0a0MJSa
n90pl49MWlkWf9aBZxAnfhiOzWc5E17obupOoqgpJ5b8Ef1tnlGAK1khBdBlfvXt
wvhCim+kyzZXcA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:16 2026 by rpki-client