Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: e0qN9MslDvHZRRjfB4S+qvfAB0gC5vnyGUthEMrBIYQ=
Subject key identifier: 09:21:76:54:32:B3:BC:93:42:9A:1E:1D:B6:91:03:B5:87:A3:B0:A4
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 019DA3E6ABA84A73BDB4A03DFBCEF45DB156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 04:01:36 +0000
Manifest this update: Sun 19 Apr 2026 04:01:36 +0000
Manifest next update: Mon 20 Apr 2026 04:01:36 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: DrW+FA7EKkZ7TW0XLXfoFbyoSQRdnlJhIBDEpIvxAzU=)
2: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
3: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
4: pVvMXgDr2GkTCSK_5f1ePFciEQg.roa (hash: mh5BsWHtCJfZ4gQ+iPPY97N+I0ndF/4yXsY9SvO6gqo=)
5: yKo-4icwyEpIS-Zvd5t9wSgTaEc.roa (hash: f8cW6zKbbrWGdT4UYGeMYoJzkCOMROgC8fVMGAq5axA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ab:a8:4a:73:bd:b4:a0:3d:fb:ce:f4:5d:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Apr 19 04:01:36 2026 GMT
Not After : Apr 20 04:01:36 2026 GMT
Subject: CN=0921765432b3bc93429a1e1db69103b587a3b0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:3c:14:dd:f7:bf:55:44:b5:0c:0a:01:8c:
ef:e2:58:d7:0d:af:5a:35:dd:ec:1a:5e:91:c6:62:
ed:4e:cd:1e:53:6e:6b:da:a4:f8:67:a2:aa:3f:ed:
8a:b7:76:ed:da:d3:25:06:7b:51:2a:2e:0c:69:14:
33:ba:6d:72:69:77:63:bd:40:38:c8:3d:18:69:75:
63:07:2d:79:a6:08:0c:0c:4d:23:10:e3:13:67:29:
19:a4:d4:7d:38:1c:a9:0c:22:46:be:28:5f:a1:4b:
f2:80:9d:c1:bb:16:8e:32:50:31:00:32:bc:36:1c:
c5:19:60:71:f0:38:9a:ff:27:9c:a3:09:2b:c5:f8:
94:10:09:34:39:b0:33:21:1a:10:a5:c1:39:65:56:
a0:26:d3:77:12:cc:5c:6b:70:8e:d8:0b:19:a6:62:
0a:c1:cf:b0:7d:4a:14:fd:5c:1a:80:2d:14:14:b4:
07:73:13:03:b2:16:a1:1b:9f:31:6f:be:33:0a:cb:
c2:25:c0:d1:a0:0b:0b:34:c8:4b:09:1b:21:96:c8:
15:e7:b9:40:c6:29:c4:64:d2:2b:e0:05:f2:ff:ca:
42:bf:21:4f:2d:fa:a2:cb:60:92:5d:18:52:9f:15:
e6:e5:29:6d:21:73:13:8a:6c:ff:fd:a4:1c:25:96:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:76:54:32:B3:BC:93:42:9A:1E:1D:B6:91:03:B5:87:A3:B0:A4
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:e0:15:50:e2:e0:3b:e6:e4:65:5e:d4:51:b7:85:5c:0f:
21:d8:b1:21:10:94:16:c3:3a:67:93:a7:ef:c2:c8:25:30:0c:
b2:bc:a0:90:fc:a7:19:b5:69:dd:a5:f4:88:74:c1:f5:1a:56:
72:48:73:e1:46:13:09:5a:be:fe:ab:58:04:bc:92:26:9a:68:
e8:40:32:58:7d:47:ea:9f:ec:1e:ce:49:f9:6b:1f:26:56:5e:
13:47:e1:ed:4a:96:27:31:99:aa:26:8b:5b:d9:79:a7:04:bb:
df:a8:f9:ee:b6:5e:e7:09:88:08:19:37:3a:ab:6d:0a:48:10:
d5:5d:18:b3:13:98:f8:70:35:ec:74:34:75:69:6a:8a:22:57:
5a:f9:c4:94:b4:9a:3f:50:1f:3f:62:79:53:1f:7d:7b:6f:23:
1a:89:20:e7:6f:dc:61:8f:99:e5:f9:6e:24:d5:0c:3a:88:08:
06:6e:89:f3:b9:89:6c:24:29:42:2e:b0:6c:58:ba:a6:63:10:
36:14:54:24:9a:d0:a0:a6:28:e2:5e:15:5c:91:ba:84:5a:1d:
aa:6c:05:c2:59:13:91:8c:50:7d:76:2d:37:fa:9b:f1:76:ee:
70:ba:e9:70:bb:31:89:35:8c:f2:90:bd:6d:09:a2:71:66:99:
cb:89:f4:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5quoSnO9tKA9+870XbFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1
MjRkZWMwHhcNMjYwNDE5MDQwMTM2WhcNMjYwNDIwMDQwMTM2WjAzMTEwLwYDVQQD
EygwOTIxNzY1NDMyYjNiYzkzNDI5YTFlMWRiNjkxMDNiNTg3YTNiMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvE8FN33v1VEtQwKAYzv4ljXDa9a
Nd3sGl6RxmLtTs0eU25r2qT4Z6KqP+2Kt3bt2tMlBntRKi4MaRQzum1yaXdjvUA4
yD0YaXVjBy15pggMDE0jEOMTZykZpNR9OBypDCJGvihfoUvygJ3BuxaOMlAxADK8
NhzFGWBx8Dia/yecowkrxfiUEAk0ObAzIRoQpcE5ZVagJtN3Esxca3CO2AsZpmIK
wc+wfUoU/VwagC0UFLQHcxMDshahG58xb74zCsvCJcDRoAsLNMhLCRshlsgV57lA
xinEZNIr4AXy/8pCvyFPLfqiy2CSXRhSnxXm5SltIXMTimz//aQcJZbjiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkhdlQys7yTQpoeHbaRA7WHo7CkMB8GA1UdIwQY
MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt
MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi
LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWrgFVDi
4Dvm5GVe1FG3hVwPIdixIRCUFsM6Z5On78LIJTAMsrygkPynGbVp3aX0iHTB9RpW
ckhz4UYTCVq+/qtYBLySJppo6EAyWH1H6p/sHs5J+WsfJlZeE0fh7UqWJzGZqiaL
W9l5pwS736j57rZe5wmICBk3OqttCkgQ1V0YsxOY+HA17HQ0dWlqiiJXWvnElLSa
P1AfP2J5Ux99e28jGokg52/cYY+Z5fluJNUMOogIBm6J87mJbCQpQi6wbFi6pmMQ
NhRUJJrQoKYo4l4VXJG6hFodqmwFwlkTkYxQfXYtN/qb8XbucLrpcLsxiTWM8pC9
bQmicWaZy4n0TA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:49 2026 by rpki-client