Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: UjXT3H8UcuV2hHWjkRVh+5ofCJi7CHZHp3rkLMwLjEw=
Subject key identifier: 1D:6C:8A:56:05:DC:0B:2B:D4:3F:08:A9:82:72:C1:54:FB:51:3A:2B
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 019D25F0FA92417245DBD9E5ECA9D9EE3EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 1649
Signing time: Wed 25 Mar 2026 17:00:42 +0000
Manifest this update: Wed 25 Mar 2026 17:00:42 +0000
Manifest next update: Thu 26 Mar 2026 17:00:42 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: kfVTXRQdLcaDutSBAjOl6RYrn2iiZU9iFVpeY/dtvnE=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fa:92:41:72:45:db:d9:e5:ec:a9:d9:ee:3e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Mar 25 17:00:42 2026 GMT
Not After : Mar 26 17:00:42 2026 GMT
Subject: CN=1d6c8a5605dc0b2bd43f08a98272c154fb513a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:11:ca:f8:2b:85:c2:3c:09:3c:36:cc:15:
c1:ab:ad:07:b3:8b:89:58:a5:bb:1b:3d:c9:d7:39:
85:3c:7b:59:c4:78:cd:92:e0:77:f6:1a:e8:24:e6:
f8:3f:9c:9d:75:60:d7:ac:db:e7:a8:db:7d:ea:ba:
d9:81:06:ab:b7:26:d9:d6:01:06:c1:85:c4:56:28:
9d:88:a8:c1:ab:02:fd:95:96:36:a0:38:18:75:76:
f8:11:8c:cf:90:92:ed:3d:73:de:4e:7e:ee:99:ee:
bd:bb:07:b1:05:77:ed:4c:86:58:a3:59:7d:67:95:
43:e0:12:5f:ec:86:b8:99:9a:37:12:1d:14:2d:bf:
1a:60:41:48:d9:de:17:fa:f5:d3:62:bc:c9:77:11:
d6:42:18:5d:2d:19:79:55:35:e9:21:90:0a:34:f0:
58:a3:23:fd:bc:de:eb:70:ba:79:61:18:4f:80:20:
29:c5:ba:65:e9:de:66:70:a7:23:14:99:20:96:3a:
31:5a:8c:b8:74:3e:1b:c5:cd:79:c6:0d:cd:bd:95:
59:a0:a3:14:3b:40:22:63:88:1c:e4:33:d6:43:0d:
d4:f9:50:ea:13:b3:b9:a6:8e:7b:5c:14:25:77:5a:
c2:36:11:e5:00:97:9d:bb:8b:cd:39:b5:ed:76:17:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6C:8A:56:05:DC:0B:2B:D4:3F:08:A9:82:72:C1:54:FB:51:3A:2B
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c6:8a:68:d4:87:f3:83:b9:88:08:75:65:ee:93:1e:e9:53:
4d:80:80:80:e8:f4:b7:66:cc:f3:31:51:53:25:05:56:22:ee:
78:3e:06:5d:18:d5:0f:15:86:f2:d3:03:de:d7:e5:8b:98:a0:
bf:5d:16:db:2c:b0:b5:6f:f1:ae:72:91:e1:7d:57:b7:1c:5e:
35:ef:d6:9a:f9:60:b0:08:bf:a0:d4:d4:1e:09:3c:28:19:3e:
18:68:3f:74:5e:0a:c5:1e:2d:c9:ac:1b:fb:45:b5:7f:57:05:
b5:b8:7c:2b:5f:33:18:15:ab:7a:a7:c0:b6:c7:a8:5a:68:a9:
11:8b:a6:bc:b9:4b:f5:47:ba:93:7b:8f:7c:84:35:60:40:b3:
b2:55:b1:cf:6c:b4:95:47:77:0b:0f:52:79:89:ed:92:b6:f2:
99:f9:8b:14:c9:ee:0b:2a:d6:9d:6c:a9:68:cc:e2:2d:32:a3:
af:22:17:01:27:99:09:d9:97:78:e8:fd:15:b3:30:22:5c:82:
96:c2:d3:bd:2a:33:78:23:d2:d3:ea:85:02:79:b3:96:40:a3:
50:50:0d:65:67:39:ef:3f:5a:ee:e0:1e:27:29:c2:59:4f:27:
6c:04:6f:c7:c6:61:4b:35:50:5a:c3:49:68:57:6f:1c:7d:bc:
7c:0c:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:37 2026 by rpki-client