Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier: 8Mkn75jJmtyu+QYGvRQf4/cjHWKiWIOQt/TeKq/MdTk=
Subject key identifier: 1D:32:7D:D3:95:6F:E8:D4:C9:48:F4:54:23:3D:A7:00:84:8A:44:3F
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 019CAAFCF15E494932E0A04D8AAC4317D00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number: 0EB0
Signing time: Sun 01 Mar 2026 20:00:29 +0000
Manifest this update: Sun 01 Mar 2026 20:00:29 +0000
Manifest next update: Mon 02 Mar 2026 20:00:29 +0000
Files and hashes: 1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: dhTwUUSpBuQ6EAlXNamT4Fx4Nuo2DRzCS8SGGWtUXTk=)
2: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
3: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
4: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
5: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f1:5e:49:49:32:e0:a0:4d:8a:ac:43:17:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Mar 1 20:00:29 2026 GMT
Not After : Mar 2 20:00:29 2026 GMT
Subject: CN=1d327dd3956fe8d4c948f454233da700848a443f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:98:2a:85:cf:82:a4:f9:20:34:50:79:c4:
12:95:8a:ed:0e:06:37:09:c1:76:c8:d1:95:a2:18:
ad:e6:98:a7:52:85:bb:b3:cc:e3:63:bd:8c:c1:ed:
08:bf:60:e0:17:be:b5:62:9c:a4:5a:7c:cd:70:53:
f6:8b:98:31:ca:3e:19:45:41:d8:9f:9a:d1:08:2f:
5a:0a:e1:1d:4f:07:ab:3b:eb:74:d6:c2:bd:8b:91:
99:6c:c9:ab:c4:b3:c8:e0:07:96:b0:95:db:66:01:
6c:c2:c8:8d:9b:fc:a0:e4:fb:e0:f3:1a:cc:82:02:
a8:12:16:09:b7:2d:7f:91:8c:70:66:fc:6c:7f:79:
c6:89:6c:88:cc:22:5a:02:b5:21:37:19:7a:7c:09:
aa:d5:d1:42:56:03:5c:ff:56:00:81:21:44:f8:96:
88:34:45:89:4c:f3:44:17:ad:9b:b3:35:9a:ba:07:
11:79:03:57:aa:b2:3b:bb:47:b6:ea:da:ee:9b:39:
05:5c:99:bd:a5:7c:30:86:3a:fc:ad:cc:83:7f:27:
5d:df:bf:a3:8b:88:a9:e1:35:96:47:0a:d9:b0:26:
7d:85:17:0d:f8:93:09:75:c1:40:ca:d8:48:6f:5f:
3c:f6:15:fb:95:73:e7:5c:f8:c4:90:f4:89:e0:55:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:7D:D3:95:6F:E8:D4:C9:48:F4:54:23:3D:A7:00:84:8A:44:3F
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3e:fc:78:d1:3e:05:c4:99:95:18:42:e5:f5:8b:c5:02:2c:
11:f2:02:83:1b:20:0d:bc:b9:cc:d5:73:6e:6c:7d:86:03:13:
17:9a:20:15:cc:fd:e8:e4:fd:d9:a0:7b:0b:68:28:ab:f2:08:
6d:a3:07:95:d3:d6:a9:7d:62:a3:09:1f:97:60:07:ad:b6:e2:
c3:3a:d7:b4:d0:85:02:18:5a:84:c0:1a:c5:dc:10:26:9a:62:
04:c8:72:f2:99:4d:7c:43:16:86:f4:f9:9a:a9:8b:5f:91:69:
86:05:b0:7d:d9:a5:ad:27:be:57:59:83:b3:b4:6f:1e:47:b3:
11:c9:f3:fd:ab:48:8c:51:a9:1e:1f:a8:6f:20:18:1e:b6:9c:
65:a3:bc:ae:7f:70:54:f2:2e:db:13:82:da:1b:f3:43:a6:89:
ca:12:96:8b:1c:b3:95:bd:5d:0a:9c:45:9a:82:92:9b:bd:4a:
18:8d:81:cf:ca:14:0c:e8:56:3d:b4:89:25:f6:2f:35:5f:4f:
ca:e7:19:cb:9b:b8:29:51:0b:ce:49:0a:b7:3e:b2:e1:0c:f9:
08:7d:0c:ee:1c:4e:cc:f0:ce:0a:38:0b:f6:18:e5:0b:ce:54:
a7:e9:0d:78:36:4b:d1:70:ed:6a:f9:cf:a7:cb:32:7d:08:6f:
84:d7:1b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/PFeSUky4KBNiqxDF9APMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl
ODY0ZmYwHhcNMjYwMzAxMjAwMDI5WhcNMjYwMzAyMjAwMDI5WjAzMTEwLwYDVQQD
EygxZDMyN2RkMzk1NmZlOGQ0Yzk0OGY0NTQyMzNkYTcwMDg0OGE0NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT6YKoXPgqT5IDRQecQSlYrtDgY3
CcF2yNGVohit5pinUoW7s8zjY72Mwe0Iv2DgF761YpykWnzNcFP2i5gxyj4ZRUHY
n5rRCC9aCuEdTwerO+t01sK9i5GZbMmrxLPI4AeWsJXbZgFswsiNm/yg5Pvg8xrM
ggKoEhYJty1/kYxwZvxsf3nGiWyIzCJaArUhNxl6fAmq1dFCVgNc/1YAgSFE+JaI
NEWJTPNEF62bszWaugcReQNXqrI7u0e26trumzkFXJm9pXwwhjr8rcyDfydd37+j
i4ip4TWWRwrZsCZ9hRcN+JMJdcFAythIb1889hX7lXPnXPjEkPSJ4FVptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0yfdOVb+jUyUj0VCM9pwCEikQ/MB8GA1UdIwQY
MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt
NzczM2JkODg4ZTI4LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4
LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz78eNE+
BcSZlRhC5fWLxQIsEfICgxsgDby5zNVzbmx9hgMTF5ogFcz96OT92aB7C2goq/II
baMHldPWqX1iowkfl2AHrbbiwzrXtNCFAhhahMAaxdwQJppiBMhy8plNfEMWhvT5
mqmLX5FphgWwfdmlrSe+V1mDs7RvHkezEcnz/atIjFGpHh+obyAYHracZaO8rn9w
VPIu2xOC2hvzQ6aJyhKWixyzlb1dCpxFmoKSm71KGI2Bz8oUDOhWPbSJJfYvNV9P
yucZy5u4KVELzkkKtz6y4Qz5CH0M7hxOzPDOCjgL9hjlC85Up+kNeDZL0XDtavnP
p8syfQhvhNcbLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:40 2026 by rpki-client