
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File: 2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier: rqBxOGZFGq7wA7+Debiia9a0fh3kNg3gWl5Hb3k5FuM=
Subject key identifier: 9F:E8:5E:00:E4:14:04:92:84:3D:25:2A:E2:22:4B:EC:4C:67:87:54
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 019D9A3EE32AC07739A901687CC66C23427B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: ZnODPZNLTb4BrWAXMK7tAkyh+maNK39+w9lnNAfYay4=)
2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
5: oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa (hash: g0N6pLY+sNIqbqq3i2xctEc69tyHJmh/CSOpC4j0mH4=)
6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e3:2a:c0:77:39:a9:01:68:7c:c6:6c:23:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=9fe85e00e4140492843d252ae2224bec4c678754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:19:a4:ca:f2:48:c8:ae:62:a3:18:d6:c6:
1b:9a:e6:f7:c2:95:d1:f3:f2:52:75:da:82:ad:f0:
8b:6e:27:c7:fb:39:45:dc:e6:b2:56:6d:69:b1:98:
ca:f1:87:53:4f:da:4b:8a:a1:71:6d:a3:a7:35:1f:
09:9e:e9:2e:8a:e0:f0:c8:01:24:46:03:3c:d1:d1:
5b:4d:96:71:78:6c:6b:6f:b3:1e:43:93:73:17:43:
d4:5b:7a:9d:1c:32:8a:33:f8:85:49:5a:ce:5e:2a:
d5:3a:be:40:48:b9:8d:ee:24:7c:52:51:8a:23:25:
83:6b:47:39:97:a3:54:38:36:25:9c:3e:7b:02:ca:
93:83:43:f0:d1:7a:df:b1:db:9e:f9:53:94:0e:f5:
a5:1f:be:14:30:13:25:c4:c7:f3:d4:d4:e1:10:7b:
cd:a8:c7:56:19:2b:34:89:95:17:6b:cd:13:7b:00:
22:ce:f5:33:7a:f7:06:44:85:af:7e:16:28:39:85:
f3:ba:d3:f4:40:63:56:68:43:71:bb:0c:09:fa:97:
f9:d1:ac:fa:59:dd:12:f0:33:96:ae:2c:8a:e0:61:
e4:78:9e:00:05:7b:d5:10:6a:c0:f6:3f:3f:53:7f:
75:e8:73:f2:6e:cd:74:05:fd:3b:be:96:99:5b:46:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:5E:00:E4:14:04:92:84:3D:25:2A:E2:22:4B:EC:4C:67:87:54
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:65:a2:5c:d0:53:9d:cf:26:61:4f:74:24:4f:f8:a7:ca:8f:
95:1e:c4:22:fe:6a:d5:f1:ad:01:e3:7f:15:bf:7e:cf:a5:e4:
1d:ed:68:20:f6:6a:8f:e2:6b:64:dc:c5:19:df:9f:44:8f:8e:
1e:c3:64:59:0f:af:ab:3b:f5:5d:a8:42:ca:e8:fb:42:27:9e:
68:1c:51:e0:56:a3:13:f4:c6:13:68:7d:81:94:df:59:0a:b0:
bd:fb:0b:f6:2b:9a:07:62:9a:d5:98:ec:64:3b:02:dd:af:36:
96:89:6f:ba:da:4d:60:84:28:13:ce:8a:64:1e:4f:b0:ec:a6:
9d:a0:d4:12:1a:29:40:8d:9a:10:d7:41:4c:b1:25:88:71:32:
4b:ce:be:a4:3f:eb:ec:60:73:e1:a6:a9:e5:05:f2:c3:d7:1f:
5e:08:3d:5e:c5:9a:39:f2:c8:05:f2:53:c2:85:ab:0a:b9:48:
ca:72:56:26:29:0d:28:e9:07:bb:2c:fb:c6:9d:69:eb:b6:64:
88:9a:7f:c2:4f:b4:0f:ed:f9:5e:ae:37:f5:17:be:d5:2b:5a:
12:e0:e7:b5:26:28:1e:b8:ca:92:2b:91:d1:29:40:90:7a:05:
de:5d:ac:2b:fc:b7:87:48:93:fe:92:5d:4e:05:f9:3b:88:b8:
54:42:fc:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPuMqwHc5qQFofMZsI0J7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3
MWQ4OTIwHhcNMjYwNDE3MDcwMTQ1WhcNMjYwNDE4MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg5ZmU4NWUwMGU0MTQwNDkyODQzZDI1MmFlMjIyNGJlYzRjNjc4NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ncZpMrySMiuYqMY1sYbmub3wpXR
8/JSddqCrfCLbifH+zlF3OayVm1psZjK8YdTT9pLiqFxbaOnNR8JnukuiuDwyAEk
RgM80dFbTZZxeGxrb7MeQ5NzF0PUW3qdHDKKM/iFSVrOXirVOr5ASLmN7iR8UlGK
IyWDa0c5l6NUODYlnD57AsqTg0Pw0Xrfsdue+VOUDvWlH74UMBMlxMfz1NThEHvN
qMdWGSs0iZUXa80TewAizvUzevcGRIWvfhYoOYXzutP0QGNWaENxuwwJ+pf50az6
Wd0S8DOWriyK4GHkeJ4ABXvVEGrA9j8/U3916HPybs10Bf07vpaZW0Y5gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/oXgDkFASShD0lKuIiS+xMZ4dUMB8GA1UdIwQY
MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt
MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj
LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGWiXNBT
nc8mYU90JE/4p8qPlR7EIv5q1fGtAeN/Fb9+z6XkHe1oIPZqj+JrZNzFGd+fRI+O
HsNkWQ+vqzv1XahCyuj7QieeaBxR4FajE/TGE2h9gZTfWQqwvfsL9iuaB2Ka1Zjs
ZDsC3a82lolvutpNYIQoE86KZB5PsOymnaDUEhopQI2aENdBTLEliHEyS86+pD/r
7GBz4aap5QXyw9cfXgg9XsWaOfLIBfJTwoWrCrlIynJWJikNKOkHuyz7xp1p67Zk
iJp/wk+0D+35Xq439Re+1StaEuDntSYoHrjKkiuR0SlAkHoF3l2sK/y3h0iT/pJd
TgX5O4i4VEL87g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:09 2026 by rpki-client