
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File: 2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier: 3F/zep1F8eHF6XNIThimbnhEKwC3cD/sfJTp/4c6JHY=
Subject key identifier: B2:0E:39:61:77:1A:F7:C9:99:B0:0A:C1:EC:3A:96:C2:52:5B:2C:EF
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial: 019DA3E6E1E834F131ACB998F5A5AE062AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number: EE
Signing time: Sun 19 Apr 2026 04:01:50 +0000
Manifest this update: Sun 19 Apr 2026 04:01:50 +0000
Manifest next update: Mon 20 Apr 2026 04:01:50 +0000
Files and hashes: 1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: XVMQRHEWY9xN2Q5OR+C3o++vxY1bK6hEQopYKl51h0Y=)
2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
5: UD_HyZZU2C19IaFsZaCL4In6Jj0.roa (hash: rylHESPK2fj3KtkgDq6dsWyTS65oKT4JjrBMW31aQeo=)
6: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e1:e8:34:f1:31:ac:b9:98:f5:a5:ae:06:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Validity
Not Before: Apr 19 04:01:50 2026 GMT
Not After : Apr 20 04:01:50 2026 GMT
Subject: CN=b20e3961771af7c999b00ac1ec3a96c2525b2cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:77:56:a6:fe:82:36:be:7d:38:ed:1d:bf:
7e:b8:b1:a7:2b:b6:8e:74:6c:b6:75:1c:24:32:90:
ff:12:ee:01:4d:48:ca:19:63:97:5a:49:a1:c0:0c:
fb:54:5f:f4:23:a9:bd:76:65:89:e3:b5:db:3c:7d:
dc:dc:f5:c4:12:c5:20:4c:3f:bd:43:48:5e:c4:96:
3c:d1:ef:4e:3e:cb:2f:77:9e:22:3d:75:80:dd:a7:
d1:f5:31:12:e2:af:eb:8f:71:7b:55:85:c5:ae:17:
38:e4:40:cf:d1:d9:3f:a2:b8:4b:c6:ba:41:b9:9a:
90:de:0b:7d:c8:b0:06:06:2c:1d:dd:17:b0:b5:34:
36:d0:1c:ae:71:d0:04:e5:4e:4a:11:5e:96:71:10:
6c:f7:08:34:0e:b7:31:b3:4a:99:d1:0b:c1:0b:06:
62:58:49:f9:9f:59:3b:4e:e8:6f:a6:77:ed:79:cb:
40:d2:6d:6c:de:cd:ce:88:84:b5:ea:aa:78:9d:bf:
92:01:56:91:bb:fc:95:84:6c:d5:53:88:da:d8:e6:
b4:d2:aa:f9:f6:d0:51:99:5b:98:3c:5f:7c:72:94:
c5:ba:c7:da:8e:4e:ca:e0:1f:c3:4e:38:7f:d1:bf:
2a:6a:0a:2f:9a:48:0a:22:c6:c7:e6:a6:0d:1b:f3:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0E:39:61:77:1A:F7:C9:99:B0:0A:C1:EC:3A:96:C2:52:5B:2C:EF
X509v3 Authority Key Identifier:
keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:36:e2:fd:4d:3c:71:b6:dc:01:7b:4c:e8:98:0b:9f:ec:ae:
64:ab:92:03:a8:8d:14:eb:91:59:47:d2:46:60:e0:0e:a4:65:
79:30:72:79:d2:26:df:70:bc:20:c2:51:82:4f:7f:0a:77:67:
a1:ab:b9:73:2a:23:06:a4:76:fd:69:0e:fe:b6:20:0b:cf:81:
5a:77:fd:a6:78:06:6f:62:20:c6:c7:f2:ee:d2:f7:8f:6b:f8:
3c:fd:7d:68:f3:d6:96:93:f6:bf:52:ec:99:50:83:1e:4b:0b:
e4:b3:ca:0c:fd:9a:2b:15:d8:ba:ce:c0:ce:b0:ac:3c:4e:7d:
36:2d:35:4a:c6:cf:66:82:0a:33:4f:89:ab:84:2d:c7:c8:90:
f6:96:50:02:bb:ed:44:3c:4d:8a:42:76:9a:34:dc:8f:e7:f1:
c8:48:d7:e9:4c:8b:9e:ab:14:64:86:52:de:27:d7:47:1f:f3:
47:2d:47:f0:3f:8c:cc:95:60:66:fc:30:5a:28:3b:e0:13:9b:
ee:1e:77:b6:55:bb:29:96:36:6e:33:16:76:8d:2b:12:03:81:
79:4e:8f:e8:e1:ca:e8:30:26:e8:d4:29:6a:fc:fd:d1:ca:97:
83:b5:1c:85:58:d7:c8:6d:b5:58:00:32:9d:c3:73:6c:ce:b0:
0b:01:d5:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5uHoNPExrLmY9aWuBirmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Njc5Zjk1Y2E5YjY1NmI3Y2EyMjFiZTZlYjI0Zjk1ZTMy
OGIwMTAwHhcNMjYwNDE5MDQwMTUwWhcNMjYwNDIwMDQwMTUwWjAzMTEwLwYDVQQD
EyhiMjBlMzk2MTc3MWFmN2M5OTliMDBhYzFlYzNhOTZjMjUyNWIyY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr53Vqb+gja+fTjtHb9+uLGnK7aO
dGy2dRwkMpD/Eu4BTUjKGWOXWkmhwAz7VF/0I6m9dmWJ47XbPH3c3PXEEsUgTD+9
Q0hexJY80e9OPssvd54iPXWA3afR9TES4q/rj3F7VYXFrhc45EDP0dk/orhLxrpB
uZqQ3gt9yLAGBiwd3RewtTQ20ByucdAE5U5KEV6WcRBs9wg0Drcxs0qZ0QvBCwZi
WEn5n1k7TuhvpnftectA0m1s3s3OiIS16qp4nb+SAVaRu/yVhGzVU4ja2Oa00qr5
9tBRmVuYPF98cpTFusfajk7K4B/DTjh/0b8qagovmkgKIsbH5qYNG/MpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIOOWF3GvfJmbAKwew6lsJSWyzvMB8GA1UdIwQY
MBaAFNhnn5XKm2VrfKIhvm6yT5XjKLAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADbi/U08
cbbcAXtM6JgLn+yuZKuSA6iNFOuRWUfSRmDgDqRleTByedIm33C8IMJRgk9/Cndn
oau5cyojBqR2/WkO/rYgC8+BWnf9pngGb2Igxsfy7tL3j2v4PP19aPPWlpP2v1Ls
mVCDHksL5LPKDP2aKxXYus7AzrCsPE59Ni01SsbPZoIKM0+Jq4Qtx8iQ9pZQArvt
RDxNikJ2mjTcj+fxyEjX6UyLnqsUZIZS3ifXRx/zRy1H8D+MzJVgZvwwWig74BOb
7h53tlW7KZY2bjMWdo0rEgOBeU6P6OHK6DAm6NQpavz90cqXg7UchVjXyG21WAAy
ncNzbM6wCwHVJw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:14 2026 by rpki-client