Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: zJt92g5O0+Rq7pNMmPne8wXyrwFnOXEwdwnqosf5EhE=
Subject key identifier: 62:C0:C0:69:CA:44:A7:88:B6:02:1A:A2:75:4C:C8:9F:EB:35:47:FE
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 019CA9EB817902DB86DC41B7AE8120D50BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 11E3
Signing time: Sun 01 Mar 2026 15:01:49 +0000
Manifest this update: Sun 01 Mar 2026 15:01:49 +0000
Manifest next update: Mon 02 Mar 2026 15:01:49 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: /Qvsfk9CHeXp/+lIMXSdmSbP4E4vd9sbNu+ahv/8Ajk=)
2: XKi2BlHneg8Maj6fOXu_OR3e41k.roa (hash: WCQe6/yJBNE4CdbDW2e1jgFjAOf+lrnuYR4ptmdnrnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:81:79:02:db:86:dc:41:b7:ae:81:20:d5:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Mar 1 15:01:49 2026 GMT
Not After : Mar 2 15:01:49 2026 GMT
Subject: CN=62c0c069ca44a788b6021aa2754cc89feb3547fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:d8:2e:7d:7c:21:7e:a0:b6:60:38:83:8e:
ee:0e:d6:de:e7:fd:42:72:c4:2e:01:2e:33:8c:e6:
29:39:e0:1d:00:67:20:fc:e3:c6:39:c8:6f:d4:5c:
d4:2e:50:37:17:64:c4:c7:3d:07:2b:20:8d:eb:8f:
09:47:aa:a0:86:36:d7:e9:b4:aa:b0:e0:a8:71:ee:
1d:34:33:39:28:b4:c0:42:2d:5b:98:0f:af:19:17:
6e:49:af:0b:42:ea:8d:ec:3d:69:41:eb:f2:22:13:
b3:58:f7:c7:4c:e1:37:6a:c7:ff:87:15:92:53:57:
9c:ec:4e:5b:d4:db:bb:e4:5d:4d:a2:69:95:39:fb:
28:3e:ec:7f:85:ac:0d:e0:31:5e:34:22:29:e2:df:
09:10:c6:6d:ab:85:e7:64:0a:60:58:89:0c:0c:d2:
9c:87:97:f6:7c:3f:f9:c8:c5:d4:2c:bc:8b:6a:96:
31:95:52:74:aa:cd:b3:ed:0d:a7:83:d4:cc:79:76:
46:49:13:34:3b:e9:25:50:56:c4:03:a1:26:68:1b:
11:fb:61:72:3b:23:8c:04:96:bc:3d:72:35:76:51:
2d:f7:9c:13:bd:bc:63:3d:0c:e0:57:61:ee:94:99:
dc:7a:06:e3:17:b7:0b:d4:e5:9d:b8:44:b3:40:54:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:C0:69:CA:44:A7:88:B6:02:1A:A2:75:4C:C8:9F:EB:35:47:FE
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b3:8d:03:ba:51:aa:57:84:6c:ce:3f:79:35:3b:04:3c:93:
e9:3e:2a:f1:88:e3:a4:44:94:10:9f:7e:c0:79:82:23:f6:3f:
13:52:23:09:7a:20:92:9d:8c:1c:1c:ce:97:33:5c:47:66:a5:
3a:6d:57:1e:51:0d:98:c1:de:18:44:1a:c0:c3:a7:ef:3e:f0:
b4:f1:7d:a9:ec:f9:d4:2c:ab:3c:e4:0e:0b:30:8b:1f:4e:53:
f1:4e:78:da:76:a2:3d:d3:3b:25:58:df:01:9a:c7:3d:f6:4d:
fd:5c:15:e4:92:01:13:9d:47:e1:ac:2c:e1:86:23:32:76:3d:
43:72:fe:bb:48:c8:d2:f6:ea:93:7b:1f:15:f1:79:ef:02:07:
62:6e:28:be:73:44:2e:ac:35:9f:82:a1:43:75:e6:0d:5e:0b:
bb:1c:40:c8:df:1b:1d:6e:4f:76:bd:e0:f8:c0:a5:fc:1e:e9:
85:af:d9:41:42:05:29:dc:9a:7c:50:57:9f:e9:32:6e:4a:b1:
24:4d:cb:82:51:f4:5b:9e:91:83:7e:79:b3:3e:75:9f:34:b9:
3c:25:1e:82:cd:78:ab:14:c8:90:e9:f2:8e:49:f3:13:95:d7:
d5:d3:68:f1:e1:e1:da:44:d3:a1:ac:58:c6:f3:62:b3:01:48:
68:2d:9c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp64F5AtuG3EG3roEg1QvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj
NmY0YzcwHhcNMjYwMzAxMTUwMTQ5WhcNMjYwMzAyMTUwMTQ5WjAzMTEwLwYDVQQD
Eyg2MmMwYzA2OWNhNDRhNzg4YjYwMjFhYTI3NTRjYzg5ZmViMzU0N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YTYLn18IX6gtmA4g47uDtbe5/1C
csQuAS4zjOYpOeAdAGcg/OPGOchv1FzULlA3F2TExz0HKyCN648JR6qghjbX6bSq
sOCoce4dNDM5KLTAQi1bmA+vGRduSa8LQuqN7D1pQevyIhOzWPfHTOE3asf/hxWS
U1ec7E5b1Nu75F1NommVOfsoPux/hawN4DFeNCIp4t8JEMZtq4XnZApgWIkMDNKc
h5f2fD/5yMXULLyLapYxlVJ0qs2z7Q2ng9TMeXZGSRM0O+klUFbEA6EmaBsR+2Fy
OyOMBJa8PXI1dlEt95wTvbxjPQzgV2HulJncegbjF7cL1OWduESzQFQyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLAwGnKRKeItgIaonVMyJ/rNUf+MB8GA1UdIwQY
MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt
N2RiOWRmYmM0YWU5LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5
LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrONA7pR
qleEbM4/eTU7BDyT6T4q8YjjpESUEJ9+wHmCI/Y/E1IjCXogkp2MHBzOlzNcR2al
Om1XHlENmMHeGEQawMOn7z7wtPF9qez51CyrPOQOCzCLH05T8U542naiPdM7JVjf
AZrHPfZN/VwV5JIBE51H4aws4YYjMnY9Q3L+u0jI0vbqk3sfFfF57wIHYm4ovnNE
Lqw1n4KhQ3XmDV4LuxxAyN8bHW5Pdr3g+MCl/B7pha/ZQUIFKdyafFBXn+kybkqx
JE3LglH0W56Rg355sz51nzS5PCUegs14qxTIkOnyjknzE5XX1dNo8eHh2kTToaxY
xvNiswFIaC2ckg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:46 2026 by rpki-client