Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: zbW/HTQ/0PyOSXx5FBU/tppunUsevPJvBgMIqXukGng=
Subject key identifier: 06:77:CB:E5:94:02:F3:31:B2:C9:BF:2A:60:0A:70:48:97:E7:B1:97
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019D28BB68BE2509FE6D5B1A2183D177F7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 0222
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: wju869JoaaK9b325MItndJp1qxbB6LIVTySboOMWIhg=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:68:be:25:09:fe:6d:5b:1a:21:83:d1:77:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=0677cbe59402f331b2c9bf2a600a704897e7b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:96:f6:6d:8e:6a:0d:5f:c8:a9:3f:c8:fb:
aa:e6:17:9d:54:09:5b:9a:2c:5b:49:f1:49:f0:70:
ee:7b:81:5e:a4:25:05:2a:86:06:f4:3c:e4:38:7f:
97:4d:53:aa:4b:ab:57:dd:6e:84:1a:8a:0c:b9:93:
75:7c:5f:f0:69:2e:e4:57:b3:dd:ff:1b:90:6a:7e:
9d:48:eb:aa:73:f5:3f:39:7c:5f:a2:7a:d8:ad:22:
3f:c1:b4:b8:f0:41:93:b0:4a:10:74:f7:91:69:36:
97:ee:8b:56:2c:df:89:7d:8e:a6:a4:bc:97:d3:20:
9a:5b:14:9c:81:e7:38:e7:72:8d:29:b6:b0:93:9e:
de:92:32:86:f9:09:6a:40:5a:69:b8:22:e7:1c:23:
ba:68:7a:99:bf:76:7a:15:74:fa:f6:28:51:5b:69:
95:9c:7b:36:bc:d2:d9:47:3a:1c:b7:bd:b2:3b:97:
5c:1c:7b:80:15:08:75:9d:04:e5:22:47:c0:c0:73:
ba:f0:34:80:23:92:50:c7:83:79:5b:55:59:03:1e:
0d:22:b8:c4:7a:34:74:54:a0:e8:fe:41:b8:5b:85:
07:fa:73:e6:de:8d:21:75:82:05:b1:25:15:19:1f:
e1:91:b4:8c:9c:a4:ff:a1:e6:67:73:36:44:a6:08:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:77:CB:E5:94:02:F3:31:B2:C9:BF:2A:60:0A:70:48:97:E7:B1:97
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d7:83:52:12:dd:ad:b5:2f:7b:a8:48:9c:bb:5f:6e:97:76:
33:2e:00:eb:f4:d6:45:2c:32:39:dc:e4:1c:8e:06:e1:81:e7:
68:63:8d:9d:f0:d6:7b:3c:a5:33:61:f0:36:78:aa:a5:70:77:
2e:94:03:7d:ce:b1:1d:a0:44:f8:77:3e:c2:6b:21:59:fb:65:
59:5e:72:ef:2a:91:5c:04:f7:ce:b9:25:82:ea:0a:8e:6f:30:
79:8c:72:a1:b9:eb:d5:68:a8:85:e8:33:ff:6e:af:e1:48:fb:
80:45:07:5d:da:d3:f4:b3:77:d6:e3:71:4a:3e:2e:4c:b0:f7:
6c:1c:31:5e:84:c8:1c:39:fc:33:f9:ca:28:f9:bc:2b:94:b8:
d7:c4:3c:24:10:3b:12:84:b8:53:43:c1:5f:4a:b1:86:3c:fc:
94:2e:72:6b:ac:ad:8f:d7:76:c4:b3:b3:b3:78:99:ea:f0:93:
97:78:81:7d:a0:23:5d:a8:2f:c1:80:24:a2:bc:88:25:79:6f:
0d:ea:ab:3f:9a:86:76:25:fb:80:2d:85:bf:e4:77:ca:95:d3:
4c:b3:e9:53:5c:0e:60:af:fc:d2:1e:70:5b:32:68:42:5c:09:
e4:f5:17:bb:1a:ca:e5:83:04:d1:a6:de:9c:07:bd:2d:8e:5f:
19:bb:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:36 2026 by rpki-client