Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
File: 2fGfBczyIhOYRpwL6N3ATOFOE1o.mft (raw, json)
Hash identifier: ehpOqkZIlAncmLVkWxCc36CiY/5RmSTGMVdR602/QqQ=
Subject key identifier: 94:36:6B:06:48:89:DA:6F:9D:CC:8C:43:E0:91:01:4F:F7:E3:4C:63
Authority key identifier: D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
Certificate issuer: /CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Certificate serial: 019D2884D447057D16CB7E604C3C45475EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
Manifest number: 1455
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: 2fGfBczyIhOYRpwL6N3ATOFOE1o.crl (hash: IP1d4I1mtlIFwyUwWzxN1q3Z6qfRusPgc5jHwf8+Dp8=)
2: D5r66qCGlpT6UM1S2JZDnwLEq_g.roa (hash: AsE96zhoWPvQynJOqug2jdhORzzqgKtcCYsyjnQ29Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d4:47:05:7d:16:cb:7e:60:4c:3c:45:47:5e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=94366b064889da6f9dcc8c43e091014ff7e34c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:99:58:26:53:e5:b4:7c:e5:f0:6d:8b:d0:
6c:66:9d:67:e9:72:e1:68:5b:89:fd:a0:20:a0:3d:
f5:62:5b:0a:0c:a6:2f:73:a4:35:32:33:49:90:0e:
36:63:bb:1e:d9:c1:db:e4:74:21:e4:86:0b:71:e1:
fb:d6:43:e7:fc:b5:c5:1a:36:86:f9:d8:ab:5d:6b:
cc:aa:25:80:94:4b:1f:41:1e:f1:bb:81:28:c0:39:
ef:7f:92:03:a0:34:60:d0:2c:a7:65:49:bc:bc:4c:
4f:77:60:61:19:b3:cc:32:03:3e:a9:e0:07:3e:f6:
8f:ac:2b:06:30:5f:9c:66:6f:3e:d9:e4:0e:f4:0f:
a1:72:0c:60:15:0b:ff:af:81:4a:3a:ad:e3:b9:27:
b1:e6:29:f9:79:68:1f:1b:6b:25:9b:5b:91:72:62:
bc:58:08:e0:3c:b6:0c:70:ee:95:9e:0f:44:a6:02:
23:2c:93:4b:9a:37:11:a7:8f:63:76:f2:81:58:3e:
d9:d8:02:b9:e8:78:f5:2a:31:b7:eb:d1:04:72:1a:
07:3c:64:87:f4:b5:9c:9e:2b:4f:0c:7e:24:b2:ea:
24:20:89:19:c3:c9:46:0a:aa:66:54:ba:fa:8c:1c:
14:28:be:0a:1f:cf:dd:8e:e4:4e:ae:f6:5a:e0:9e:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:6B:06:48:89:DA:6F:9D:CC:8C:43:E0:91:01:4F:F7:E3:4C:63
X509v3 Authority Key Identifier:
keyid:D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a5:bd:0f:c0:3a:d3:58:01:0e:1f:6c:78:ad:8c:d7:59:49:
eb:00:07:3b:78:04:c5:62:cb:54:2f:54:19:ee:6d:ed:73:e0:
b5:ac:7f:ce:0c:44:b6:75:78:07:a2:a4:54:71:44:42:24:ad:
ed:3f:f3:bb:a6:80:7c:86:ca:8e:a2:a5:0b:c8:52:f6:ae:d4:
42:e0:1d:cc:f0:24:23:96:cf:76:28:80:60:7a:9c:96:aa:5b:
ba:19:46:ce:69:d4:d6:6c:ac:68:a6:b4:6e:4b:84:61:fd:27:
e6:42:51:17:0f:5d:de:71:27:f3:8d:cc:1a:0f:a0:7d:20:45:
5a:bd:62:de:45:d7:67:0b:11:2e:6c:96:2e:5c:72:4f:d5:f5:
b3:8c:9d:3d:f1:91:1e:ed:34:46:58:81:67:8a:a3:e0:80:b8:
33:21:6d:47:54:c5:a9:6e:09:0c:aa:a9:80:21:0a:71:c6:5d:
7a:ff:5c:ff:0f:f3:80:d2:ea:e5:28:94:07:6d:5d:10:cd:1b:
08:68:b9:6a:30:4e:92:8e:86:72:2b:cf:bf:db:d1:59:0d:73:
5b:4e:c9:a9:de:3d:b6:95:a3:b4:f6:1b:e3:39:e1:e1:d4:f2:
8e:58:8d:5a:04:f5:fe:7b:e2:69:bb:78:0c:c5:91:87:87:d8:
78:7b:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:17 2026 by rpki-client