Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: wjWjqujTuPvedYx/oVT/zk2agxqmNxAQPLHyuS8YHb4=
Subject key identifier: 47:28:7E:60:E9:09:B1:F5:30:A9:5B:BF:32:CB:F6:75:D5:3C:78:72
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 019D281709B25D18142DCBDB7CF74CF26671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: 02FA
Signing time: Thu 26 Mar 2026 03:01:31 +0000
Manifest this update: Thu 26 Mar 2026 03:01:31 +0000
Manifest next update: Fri 27 Mar 2026 03:01:31 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: SHnFGeT4n/YmBVcFDMdba8cs7gCVaqdykl2o9QP8iS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:09:b2:5d:18:14:2d:cb:db:7c:f7:4c:f2:66:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Mar 26 03:01:31 2026 GMT
Not After : Mar 27 03:01:31 2026 GMT
Subject: CN=47287e60e909b1f530a95bbf32cbf675d53c7872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:10:33:fa:42:19:2b:cb:ea:0c:da:e4:8c:
5d:f5:48:1e:2f:ab:2c:13:ed:81:df:0c:85:97:ad:
51:ea:01:44:1f:3e:0a:70:5f:7f:38:d6:46:94:5d:
58:6f:ff:9d:78:d6:23:8c:e9:8c:bc:39:ae:d7:79:
69:71:99:89:8b:4b:00:36:74:08:16:6e:12:f7:87:
16:cd:13:23:28:9d:f7:31:8c:2e:dd:79:a1:c6:7e:
94:8e:81:04:9b:2c:d7:6e:2a:a8:f3:87:59:b3:0c:
0b:8b:3e:52:07:0b:ee:a5:bc:9a:19:70:82:92:00:
a3:dc:81:d1:f9:f7:ad:af:9b:18:d6:d6:27:4d:cc:
6f:1b:9a:a0:64:9b:a2:b8:0f:71:87:09:98:63:82:
31:c1:8a:06:cc:80:43:49:c9:9a:3a:02:2c:f8:fb:
30:b8:c5:86:a6:33:cf:97:72:5f:10:5e:bd:4d:ef:
13:e3:01:04:1a:c5:42:fb:43:06:d0:9e:98:b0:1c:
f3:0e:7c:18:bc:09:11:f1:5a:ec:1f:4c:ff:02:40:
51:8f:93:ca:f6:91:2c:ac:73:13:23:43:db:b1:51:
7b:16:e4:44:f7:84:ee:8a:f8:8b:4b:77:8a:b6:f6:
1f:e6:3b:c0:dd:2f:55:ef:a2:95:ca:80:64:ea:28:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:7E:60:E9:09:B1:F5:30:A9:5B:BF:32:CB:F6:75:D5:3C:78:72
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:72:65:31:27:63:7d:19:73:aa:f4:5f:dc:5b:94:a5:9f:
ce:68:df:bc:de:72:70:8b:2d:97:56:8a:d4:81:6b:a8:c2:de:
02:bf:a0:74:1f:a8:bc:96:ce:29:04:1a:81:97:02:5a:94:10:
37:71:cf:fe:02:c2:fd:e6:f1:48:3c:d3:b5:f5:80:de:83:48:
69:f4:30:29:74:b1:32:4a:a4:01:43:74:5b:b3:14:48:0a:cf:
b1:7c:41:09:52:90:54:cc:b6:fc:5d:e3:a1:f9:35:13:57:8f:
9e:9b:c9:16:24:bb:b5:62:23:bd:87:54:42:59:cb:fa:0b:29:
38:ad:a6:af:7d:2b:72:22:57:33:1e:60:6f:2e:51:34:91:51:
ec:f0:fd:f0:b1:e4:d1:f3:d8:41:18:0d:fe:d6:bc:70:a0:f2:
c1:74:9e:e1:19:d6:f8:37:44:e0:dd:88:81:78:66:53:10:ed:
52:8a:cd:79:bc:27:8a:39:c5:f9:6c:d1:df:6d:24:9b:47:59:
a1:fe:91:94:ac:7e:78:26:dd:84:48:23:7d:6b:dd:b4:2a:47:
c8:16:89:19:75:c6:d6:c9:5e:c4:f3:3a:e0:19:c9:eb:d7:5c:
cc:54:6e:c3:00:46:52:5f:c8:43:20:70:9e:dd:40:94:7d:b6:
ca:e5:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:03 2026 by rpki-client