Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json)
Hash identifier: gZwAMYDRNGslPkejFdwimPqwZx0PGsC4jEsdcfRF+uU=
Subject key identifier: E7:06:28:FB:60:E9:F7:F5:7B:F4:CD:66:3D:31:9F:67:83:B2:B3:CD
Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Certificate serial: 019D27DFB83ECC1CA5B7618B9A76C1115E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
Manifest number: 0164
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: 0AzcAjUT9N1QB5cI07RUAHonZOs.roa (hash: g0trIEnIrBs+QaX8y9UPsVa9Dhsva7/upARrEo7U33o=)
2: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: vVu/XbOHVMloMCx8pYCR5PD0SpolAshWI7IBLDjuTKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b8:3e:cc:1c:a5:b7:61:8b:9a:76:c1:11:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=e70628fb60e9f7f57bf4cd663d319f6783b2b3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:79:26:99:68:3d:a9:09:0e:f4:5d:30:db:
3a:eb:e9:c9:44:c4:b3:03:17:f0:5a:f0:5a:fc:0b:
35:22:fd:61:45:6c:96:79:9a:2c:8b:00:5d:c4:29:
0c:d5:f8:75:e9:b5:3d:a5:6c:d4:27:3a:5f:0e:62:
11:5a:66:30:2f:b3:75:8d:93:91:76:45:8d:17:bc:
81:41:05:aa:25:85:5c:7d:ec:f2:0b:49:bd:a4:e2:
6c:81:a2:03:9f:04:6e:bc:97:fc:11:9a:81:02:93:
7c:8f:ba:5a:13:8e:fd:b7:c5:b9:ac:d7:74:7a:ca:
03:3f:23:59:fa:a1:40:00:b3:14:30:4c:25:07:d0:
f1:b7:06:56:94:f6:3a:59:08:b5:2e:39:74:8c:b9:
12:39:9a:05:0d:49:ca:cc:30:63:76:b6:20:57:e9:
2f:ab:0d:b7:4c:ab:2b:14:e5:06:c1:74:7c:81:d9:
6c:88:cd:96:00:00:26:dd:ec:9f:df:2b:57:45:3a:
51:18:20:ce:2f:e5:7e:8c:4d:3f:34:47:53:5d:14:
89:d2:97:47:d1:47:4d:f1:67:09:94:87:20:1b:32:
b8:6d:22:0e:ae:18:49:4c:7e:ec:d9:95:3a:6b:c8:
a7:18:49:41:8f:fe:7c:ad:ec:ce:5c:98:45:49:22:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:28:FB:60:E9:F7:F5:7B:F4:CD:66:3D:31:9F:67:83:B2:B3:CD
X509v3 Authority Key Identifier:
keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e0:9f:bf:d8:86:11:fa:e8:94:ea:2a:6c:a4:58:0a:67:4d:
29:98:d5:7c:24:ac:3d:16:ea:b0:2c:29:fb:b7:2e:35:79:0f:
94:36:bc:e9:66:5b:fe:9a:5b:41:77:6a:11:35:be:36:1a:92:
d2:f5:35:e4:93:55:99:b5:d2:fe:ef:12:dc:d5:ea:c1:21:6a:
30:ab:f1:b6:2c:b5:fd:c4:0e:4d:7c:7d:cf:85:24:3e:74:af:
b3:d2:e3:8c:41:9b:6b:5b:73:98:8b:e6:f2:6b:54:ea:ae:60:
08:78:ae:23:0d:12:35:86:8d:5d:e2:46:09:42:95:7a:d7:f5:
c2:d3:7d:bf:3a:a6:1c:4b:c3:09:79:5f:6a:b4:05:08:50:48:
d0:c0:38:2b:9f:de:23:b7:6d:a8:00:15:ae:4c:db:58:07:5f:
b6:de:7d:71:43:c1:8a:66:0e:fc:1b:07:b2:be:ae:fb:2e:f9:
dd:7f:17:70:48:47:e7:7c:10:c7:25:49:13:c0:cb:81:3a:a6:
bb:b0:1e:54:74:48:09:d0:8c:ef:ef:5d:49:d6:02:f1:35:ee:
b2:3c:03:43:a3:0d:66:69:a7:f3:1d:df:40:94:36:57:4a:df:
05:44:d9:33:40:45:fb:81:dd:d6:6c:30:87:21:b9:b9:c7:45:
4a:17:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:38 2026 by rpki-client