Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: Fme0JCHCipOk9jcR1SQW8/eiwvbQUgSjbXs4i2/tLME=
Subject key identifier: 79:5D:68:D5:07:BF:A7:F3:2F:19:C4:D3:06:73:35:89:56:09:82:4E
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019CADC857A43AA44F8433C6C233DA5526A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:01:53 +0000
Manifest this update: Mon 02 Mar 2026 09:01:53 +0000
Manifest next update: Tue 03 Mar 2026 09:01:53 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: CLAg6XZPTt2wc8w3Jsuue8DzeB7PrL/q0+rWkzRBb70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:57:a4:3a:a4:4f:84:33:c6:c2:33:da:55:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Mar 2 09:01:53 2026 GMT
Not After : Mar 3 09:01:53 2026 GMT
Subject: CN=795d68d507bfa7f32f19c4d3067335895609824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:c3:dc:8e:2c:fc:76:34:4a:96:cb:6d:a3:
7b:10:c5:0b:1d:76:eb:8a:9b:58:2f:dd:4d:73:1a:
00:b0:5c:86:c4:1c:88:59:a7:ec:96:f0:ee:54:4a:
5f:a6:2b:61:a4:51:8d:7d:32:aa:79:d5:9a:78:e8:
28:a1:f3:ff:d5:e6:75:f2:29:11:32:50:a1:7a:67:
74:14:47:4e:74:54:a7:84:1d:19:d6:d8:a0:fe:1e:
45:33:cf:a4:db:86:e0:52:4a:e4:86:2e:b0:3b:f4:
45:2b:ac:78:5b:ca:a6:72:d1:ce:14:2f:cb:71:97:
dc:80:a8:53:25:61:e3:1e:ca:24:56:e4:cc:98:8a:
62:50:d7:2c:b6:02:20:a9:c5:68:11:37:ce:f7:92:
1a:2e:c8:e4:c1:aa:66:6d:4a:77:c8:78:d4:b9:c1:
6c:6b:a7:67:d7:b1:2b:6f:23:45:4d:ff:07:ca:ec:
bd:83:85:b1:16:67:b8:7f:68:e4:2e:27:0a:09:20:
85:4b:22:5e:87:49:46:43:22:37:bf:6c:4a:c7:5c:
b6:68:96:13:6c:0b:5d:76:20:ec:a9:aa:8b:13:62:
da:12:c5:89:e7:05:37:f2:a3:fe:57:31:f7:10:c7:
5e:cb:9f:26:82:6f:86:d6:d9:df:f2:8d:46:a6:9b:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:68:D5:07:BF:A7:F3:2F:19:C4:D3:06:73:35:89:56:09:82:4E
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:9e:5a:98:6b:57:98:65:6c:ba:08:4f:b2:16:09:aa:b6:
ec:71:60:ed:93:1c:9a:07:e3:b7:9a:2f:6f:f4:42:0a:37:bf:
91:6d:85:25:df:a3:62:39:7f:36:e5:b2:ad:c0:11:55:7c:b7:
6a:05:4e:a8:f2:01:12:89:42:d7:84:ee:8a:6f:1f:b8:3b:46:
74:79:62:9c:cf:88:fd:70:dd:d9:35:4a:e5:6b:a3:04:92:77:
07:cb:2f:e7:ae:53:99:9f:b6:fa:10:1e:f4:3f:5b:54:3b:3b:
62:4b:f7:ff:ca:c2:87:8c:90:b4:d6:42:c9:54:50:cd:a2:72:
2b:31:4c:e1:83:01:5d:fc:b1:48:eb:5a:a4:9c:3f:ed:9c:ff:
87:df:9d:42:79:55:dc:e1:b4:86:1e:90:57:97:2a:39:70:43:
53:35:c7:43:58:c7:9b:89:6b:aa:c0:a6:d0:c6:72:ac:36:d6:
83:74:21:27:09:69:08:f6:b3:fa:32:0e:36:98:11:f8:14:02:
47:9a:98:b6:9a:55:f1:ab:cf:1c:a1:a3:c7:44:7f:9b:7b:4e:
e7:db:b4:50:a4:91:2f:0b:93:46:b8:c9:07:5f:d1:34:31:3d:
7c:d3:8f:ac:92:03:9a:47:f6:95:66:2d:43:87:6f:3a:88:26:
7e:cc:d3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyFekOqRPhDPGwjPaVSamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0
NTNmNzEwHhcNMjYwMzAyMDkwMTUzWhcNMjYwMzAzMDkwMTUzWjAzMTEwLwYDVQQD
Eyg3OTVkNjhkNTA3YmZhN2YzMmYxOWM0ZDMwNjczMzU4OTU2MDk4MjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l/D3I4s/HY0SpbLbaN7EMULHXbr
iptYL91NcxoAsFyGxByIWafslvDuVEpfpithpFGNfTKqedWaeOgoofP/1eZ18ikR
MlChemd0FEdOdFSnhB0Z1tig/h5FM8+k24bgUkrkhi6wO/RFK6x4W8qmctHOFC/L
cZfcgKhTJWHjHsokVuTMmIpiUNcstgIgqcVoETfO95IaLsjkwapmbUp3yHjUucFs
a6dn17ErbyNFTf8Hyuy9g4WxFme4f2jkLicKCSCFSyJeh0lGQyI3v2xKx1y2aJYT
bAtddiDsqaqLE2LaEsWJ5wU38qP+VzH3EMdey58mgm+G1tnf8o1GppvonQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHldaNUHv6fzLxnE0wZzNYlWCYJOMB8GA1UdIwQY
MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct
NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl
LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyGeWphr
V5hlbLoIT7IWCaq27HFg7ZMcmgfjt5ovb/RCCje/kW2FJd+jYjl/NuWyrcARVXy3
agVOqPIBEolC14Tuim8fuDtGdHlinM+I/XDd2TVK5WujBJJ3B8sv565TmZ+2+hAe
9D9bVDs7Ykv3/8rCh4yQtNZCyVRQzaJyKzFM4YMBXfyxSOtapJw/7Zz/h9+dQnlV
3OG0hh6QV5cqOXBDUzXHQ1jHm4lrqsCm0MZyrDbWg3QhJwlpCPaz+jIONpgR+BQC
R5qYtppV8avPHKGjx0R/m3tO59u0UKSRLwuTRrjJB1/RNDE9fNOPrJIDmkf2lWYt
Q4dvOogmfszTYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:40 2026 by rpki-client