Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: TOf5CMfQiZ4VDmIxVgbihMpf2s4j8nUd0XR5WkfmmQQ=
Subject key identifier: 66:14:DF:A1:DF:CC:A3:CC:24:2D:53:0A:38:48:00:A0:B8:19:49:8F
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019CAED9EB36CD8CE8CEB9B1E9BA807F705F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 02E2
Signing time: Mon 02 Mar 2026 14:00:42 +0000
Manifest this update: Mon 02 Mar 2026 14:00:42 +0000
Manifest next update: Tue 03 Mar 2026 14:00:42 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: ShmUgWXnLMAZAZ2SFgf+HeFkzs2q8/CctRkp6o7alJY=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:eb:36:cd:8c:e8:ce:b9:b1:e9:ba:80:7f:70:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Mar 2 14:00:42 2026 GMT
Not After : Mar 3 14:00:42 2026 GMT
Subject: CN=6614dfa1dfcca3cc242d530a384800a0b819498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:c7:07:c2:7c:4a:d3:34:8b:3c:ac:1d:32:
6b:32:52:3f:ac:14:8e:be:98:ac:ea:92:26:f8:53:
8d:ef:1e:3d:a9:53:66:a1:c8:ca:61:b9:1c:12:e0:
dc:42:48:6a:24:fe:48:de:a5:00:29:fb:d6:f7:d2:
e2:db:84:14:be:f2:13:e1:a4:22:29:1e:bb:4e:e8:
0b:71:13:37:85:fb:88:a8:4e:76:1c:5a:af:23:14:
a7:a4:83:c7:47:18:69:0f:2e:c9:17:bd:3b:a1:19:
ff:e0:73:3a:0d:f4:d0:56:12:5a:d0:f5:8e:60:0b:
ce:97:01:c5:fc:a9:4d:a9:b5:1f:e4:de:1a:23:2c:
03:f9:11:d0:3e:af:d4:49:de:09:ed:f5:53:b4:b9:
19:30:ba:58:85:ae:c4:cd:12:49:37:11:7e:74:25:
a0:5c:58:7c:77:96:8f:37:6c:ba:01:e2:e1:3d:79:
19:2a:4b:ff:75:81:99:73:c4:da:b5:d3:27:cb:03:
5e:c5:3d:3d:03:71:81:50:e5:1a:eb:91:0d:86:13:
b4:de:cc:b9:2c:ee:2c:c2:7f:5e:ec:2e:e2:ed:fa:
31:39:cf:58:12:24:0b:33:17:d7:a0:cf:62:12:95:
51:14:bc:97:6d:56:0d:ca:94:d4:65:70:9f:4b:33:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:DF:A1:DF:CC:A3:CC:24:2D:53:0A:38:48:00:A0:B8:19:49:8F
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ff:f7:ed:79:0b:f0:a6:22:7c:5f:bd:e1:2b:7e:89:03:b6:
55:6d:51:9f:8f:1d:4d:b9:0f:20:86:d1:70:3b:b1:be:3b:88:
1e:9b:f0:5c:4b:6f:55:e0:6f:5a:14:07:c0:2d:c7:52:9c:9c:
a3:cd:5d:95:25:fe:6d:79:a7:3a:a5:fb:c5:4e:4e:d2:eb:19:
6b:aa:9b:23:ec:2a:e8:40:20:a8:ef:bd:7c:f9:a2:17:c2:3a:
68:f5:ec:e4:83:57:1b:ab:1d:a0:72:44:d9:95:e0:df:55:83:
81:a7:9b:34:58:2c:4a:18:6d:7e:d9:f7:51:3a:08:0c:df:eb:
16:b2:44:45:05:29:ca:ce:18:d6:a1:ec:99:cc:3e:e9:50:02:
bd:f1:39:87:3e:70:ed:be:72:ab:c6:b0:f7:4f:fb:8c:8a:ad:
f9:ae:66:47:45:67:17:cf:be:7d:b1:42:e6:c3:c5:07:79:5b:
a6:24:17:b6:c1:26:c3:c8:62:be:e2:d3:40:e6:f0:91:06:8e:
93:9c:ca:94:b5:6e:c7:af:bb:03:a3:f3:5f:ff:f6:2f:22:98:
3c:c0:c7:5b:89:45:71:c6:f3:a1:e2:cd:6b:d2:f8:be:1d:56:
23:fe:32:8e:af:fd:b8:a8:42:1e:e6:a3:18:4f:d5:e7:6d:20:
dd:dc:cd:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2es2zYzozrmx6bqAf3BfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy
OTUwZjgwHhcNMjYwMzAyMTQwMDQyWhcNMjYwMzAzMTQwMDQyWjAzMTEwLwYDVQQD
Eyg2NjE0ZGZhMWRmY2NhM2NjMjQyZDUzMGEzODQ4MDBhMGI4MTk0OThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql/HB8J8StM0izysHTJrMlI/rBSO
vpis6pIm+FON7x49qVNmocjKYbkcEuDcQkhqJP5I3qUAKfvW99Li24QUvvIT4aQi
KR67TugLcRM3hfuIqE52HFqvIxSnpIPHRxhpDy7JF707oRn/4HM6DfTQVhJa0PWO
YAvOlwHF/KlNqbUf5N4aIywD+RHQPq/USd4J7fVTtLkZMLpYha7EzRJJNxF+dCWg
XFh8d5aPN2y6AeLhPXkZKkv/dYGZc8TatdMnywNexT09A3GBUOUa65ENhhO03sy5
LO4swn9e7C7i7foxOc9YEiQLMxfXoM9iEpVRFLyXbVYNypTUZXCfSzNrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYU36HfzKPMJC1TCjhIAKC4GUmPMB8GA1UdIwQY
MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt
MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy
LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT//37XkL
8KYifF+94St+iQO2VW1Rn48dTbkPIIbRcDuxvjuIHpvwXEtvVeBvWhQHwC3HUpyc
o81dlSX+bXmnOqX7xU5O0usZa6qbI+wq6EAgqO+9fPmiF8I6aPXs5INXG6sdoHJE
2ZXg31WDgaebNFgsShhtftn3UToIDN/rFrJERQUpys4Y1qHsmcw+6VACvfE5hz5w
7b5yq8aw90/7jIqt+a5mR0VnF8++fbFC5sPFB3lbpiQXtsEmw8hivuLTQObwkQaO
k5zKlLVux6+7A6PzX//2LyKYPMDHW4lFccbzoeLNa9L4vh1WI/4yjq/9uKhCHuaj
GE/V520g3dzNvQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:46 2026 by rpki-client