Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: zdLSO8qxnqD7EZgBBRWCA6Cl35uexLOeoifjOqwjpQQ=
Subject key identifier: 70:0A:9C:2B:11:B4:DB:39:07:6D:D5:19:3B:17:D1:1F:3E:A1:C7:88
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019D985082EA9C511661CC4A8C4AE013A2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 1056
Signing time: Thu 16 Apr 2026 22:01:46 +0000
Manifest this update: Thu 16 Apr 2026 22:01:46 +0000
Manifest next update: Fri 17 Apr 2026 22:01:46 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: ty6zh2Tso0g/T47MQfynYvJub+utn9uyaGhI/OWqAuA=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:82:ea:9c:51:16:61:cc:4a:8c:4a:e0:13:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Apr 16 22:01:46 2026 GMT
Not After : Apr 17 22:01:46 2026 GMT
Subject: CN=700a9c2b11b4db39076dd5193b17d11f3ea1c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:51:9c:ae:90:7a:f6:0c:0e:f2:05:7b:35:
83:c0:75:bf:b6:90:13:6e:1d:6e:c2:55:72:3c:ce:
66:6f:e8:6a:96:ab:ae:56:bd:c6:fa:2d:b1:13:49:
a9:04:3e:9d:3e:6c:22:cc:4a:46:74:21:3d:b1:30:
5d:d9:dd:de:99:b8:6a:96:ca:ba:2b:ff:00:71:d2:
18:58:11:2a:72:1b:59:f0:f8:39:f5:3b:ee:a1:f3:
87:77:9b:52:52:b0:8a:dd:65:5e:26:32:b4:24:cb:
a2:f8:f5:58:c1:a1:c1:1a:56:bb:fd:58:d1:a4:d2:
f1:e6:88:20:df:0c:c7:7e:03:f9:23:df:ce:a4:93:
25:f2:f7:55:2f:1a:8b:9d:3b:a2:92:4f:34:52:98:
04:51:82:26:7b:66:19:26:4f:32:9b:87:34:c6:41:
b7:2e:b6:59:d2:ef:65:d3:d6:e5:ea:80:f0:26:00:
f8:78:be:86:57:ce:d2:35:db:a0:1e:5c:75:c8:b4:
a6:fa:e8:e5:c4:7c:08:ea:38:c4:b5:80:10:9e:bc:
1c:de:bd:d8:69:cf:d7:b1:27:39:cb:b2:6b:1f:82:
ca:ce:1d:87:0b:c1:06:92:ba:88:1b:bc:94:92:4f:
24:0f:43:da:4b:4c:ae:dd:40:17:54:f5:7e:52:4f:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:9C:2B:11:B4:DB:39:07:6D:D5:19:3B:17:D1:1F:3E:A1:C7:88
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cf:f4:7a:b5:0e:31:0b:a1:92:71:6b:04:3d:f6:a5:78:75:
97:92:bb:10:50:62:f4:9e:af:20:7a:19:46:5f:53:f3:cd:27:
91:14:34:3e:d5:89:05:e9:ff:68:95:5b:a5:2b:77:d3:3e:10:
4b:50:66:ef:7f:14:de:ed:ec:b2:f9:ae:72:99:09:b8:be:be:
71:01:03:22:59:1e:c8:a8:f0:fd:f2:f9:12:cb:e5:fd:96:75:
d3:1f:61:14:03:c9:12:a7:03:06:58:6e:fe:f7:25:f0:3a:2e:
1d:10:64:a8:02:49:96:30:2f:d9:c3:40:a0:52:2e:35:63:4e:
89:01:24:29:87:eb:9a:1e:6a:d3:41:41:52:44:a9:f0:8b:13:
a4:ad:8d:87:05:ca:c1:47:6c:69:1f:74:aa:51:62:3f:87:22:
cd:c6:a7:e1:fd:44:72:b3:8a:d8:a7:5c:a9:b3:90:69:64:04:
2a:39:aa:ac:63:fe:9d:66:c1:b7:69:36:b1:02:0f:50:a7:d5:
2c:b9:6d:25:b0:28:91:fd:6e:25:91:7b:ca:8b:56:f5:e1:90:
e2:39:25:d7:64:54:d7:15:f7:78:b3:36:22:10:3d:db:ae:55:
1d:2d:7b:53:49:4a:24:2b:c1:47:d5:31:94:5d:27:b8:f0:70:
84:74:00:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUILqnFEWYcxKjErgE6LOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjYwNDE2MjIwMTQ2WhcNMjYwNDE3MjIwMTQ2WjAzMTEwLwYDVQQD
Eyg3MDBhOWMyYjExYjRkYjM5MDc2ZGQ1MTkzYjE3ZDExZjNlYTFjNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0NRnK6QevYMDvIFezWDwHW/tpAT
bh1uwlVyPM5mb+hqlquuVr3G+i2xE0mpBD6dPmwizEpGdCE9sTBd2d3embhqlsq6
K/8AcdIYWBEqchtZ8Pg59TvuofOHd5tSUrCK3WVeJjK0JMui+PVYwaHBGla7/VjR
pNLx5ogg3wzHfgP5I9/OpJMl8vdVLxqLnTuikk80UpgEUYIme2YZJk8ym4c0xkG3
LrZZ0u9l09bl6oDwJgD4eL6GV87SNdugHlx1yLSm+ujlxHwI6jjEtYAQnrwc3r3Y
ac/XsSc5y7JrH4LKzh2HC8EGkrqIG7yUkk8kD0PaS0yu3UAXVPV+Uk/hDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAKnCsRtNs5B23VGTsX0R8+oceIMB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8/0erUO
MQuhknFrBD32pXh1l5K7EFBi9J6vIHoZRl9T880nkRQ0PtWJBen/aJVbpSt30z4Q
S1Bm738U3u3ssvmucpkJuL6+cQEDIlkeyKjw/fL5Esvl/ZZ10x9hFAPJEqcDBlhu
/vcl8DouHRBkqAJJljAv2cNAoFIuNWNOiQEkKYfrmh5q00FBUkSp8IsTpK2NhwXK
wUdsaR90qlFiP4cizcan4f1EcrOK2KdcqbOQaWQEKjmqrGP+nWbBt2k2sQIPUKfV
LLltJbAokf1uJZF7yotW9eGQ4jkl12RU1xX3eLM2IhA9265VHS17U0lKJCvBR9Ux
lF0nuPBwhHQA9A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:50 2026 by rpki-client