Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: M6ROn8pRahlXzzM9uXhy2gRQCYXikoOpEgWV2fVvtX4=
Subject key identifier: A8:FA:86:0A:89:CB:E0:13:B4:A5:9E:96:99:7C:BC:F8:54:9A:55:3F
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019D2772C152FACD08824272B8EBEA7AC0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0A8C
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: SyRPfkY8A5jYE1fGNeSbeo0WxwGZN3suI09vXdXDzBQ=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c1:52:fa:cd:08:82:42:72:b8:eb:ea:7a:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=a8fa860a89cbe013b4a59e96997cbcf8549a553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:30:bc:17:dc:5f:e0:e5:b1:de:e6:88:54:
f7:8d:81:a9:7d:7e:c6:6e:11:ac:d2:c0:35:7d:f1:
86:67:14:31:53:b0:60:d8:e7:aa:26:62:82:f5:89:
39:b9:31:5e:fe:a8:28:a1:2d:06:99:01:e5:73:e8:
a7:ee:79:e9:5a:43:9f:09:39:88:c3:f4:c4:f7:03:
68:49:f3:9c:73:63:db:c4:93:c4:77:2d:cb:92:13:
68:d6:97:17:86:e1:51:e5:01:fb:0d:f4:0f:20:69:
5f:db:16:2a:7a:de:41:d7:b1:82:34:43:f5:88:33:
0d:ba:28:61:b9:9d:23:cf:86:9e:1d:64:42:de:e6:
21:a3:e3:f0:df:d9:2c:ec:96:e1:41:f5:83:35:21:
25:23:79:5b:84:6b:65:65:27:ca:4b:5a:d7:93:de:
51:b0:be:e3:3e:79:e0:b4:1a:75:cb:07:5a:0f:02:
ae:e3:c4:3c:b7:dd:e6:8d:bf:b2:53:03:d7:b7:ff:
a4:32:ca:f8:86:c8:7d:b1:ff:79:fe:54:ea:f8:37:
ab:e7:ca:05:5d:e9:ec:47:42:ef:bb:0c:ad:72:97:
66:50:29:bd:30:61:2c:d1:d7:34:2c:23:70:1c:18:
57:64:1c:d3:7e:bc:39:2d:4c:ce:dc:83:68:fb:72:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:86:0A:89:CB:E0:13:B4:A5:9E:96:99:7C:BC:F8:54:9A:55:3F
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a8:1c:6f:43:4e:0c:e9:43:5f:dd:79:91:2b:fb:96:6a:ea:
9b:62:4a:34:6c:9f:ba:48:88:eb:6a:cb:d5:b1:c9:fb:ff:de:
76:21:fe:8f:ec:88:b8:01:57:44:23:13:12:11:90:e3:30:88:
6c:94:0b:15:89:77:1b:f1:b4:30:c4:98:16:60:cf:a9:a4:5b:
83:d3:31:ae:81:32:16:b1:04:e8:d2:20:0e:5c:20:54:0d:8e:
c8:80:1f:2f:29:c5:bb:76:8c:b1:0e:a6:d0:be:a0:d1:e8:50:
9f:0a:3b:46:a1:43:b1:8c:ad:32:15:52:98:a8:3a:5d:52:3e:
43:e9:fa:9d:08:49:ef:11:47:a9:8c:8e:9c:f6:0d:b5:ee:2a:
c3:82:a2:19:48:42:e5:f5:4a:88:f8:d6:d6:d3:ea:b8:1b:98:
d4:d9:6b:86:d5:a8:1e:b2:79:ee:2a:55:a8:bb:3c:94:3f:ac:
71:b5:51:ad:77:23:da:75:df:3e:cd:89:37:43:e8:79:84:2d:
c9:15:2b:82:08:60:bb:dc:3a:c5:db:8a:0a:1d:45:ec:93:9c:
6d:c8:ee:2d:08:0f:24:64:9c:22:c4:0f:84:83:7f:56:24:b3:
6e:da:71:55:7f:e6:e4:be:7d:ec:3d:d3:0d:ee:bc:58:63:73:
0a:32:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:16 2026 by rpki-client