Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: AQdcxU4ZtuqBix/cu4iOH+ZE/kA2rzczgAgI5Q2YW+A=
Subject key identifier: 64:48:72:8B:68:91:8B:E3:51:98:03:B0:4E:0B:80:62:EE:46:9E:08
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019D31BE339B222736C58191D0AF8960F867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 18A0
Signing time: Sat 28 Mar 2026 00:00:41 +0000
Manifest this update: Sat 28 Mar 2026 00:00:41 +0000
Manifest next update: Sun 29 Mar 2026 00:00:41 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: mqUEGASE0C7mP4/FmPBTHZ5kjgZq6xLcb84HvN2m+m0=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:33:9b:22:27:36:c5:81:91:d0:af:89:60:f8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Mar 28 00:00:41 2026 GMT
Not After : Mar 29 00:00:41 2026 GMT
Subject: CN=6448728b68918be3519803b04e0b8062ee469e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:08:79:4b:1d:dc:fa:1a:70:30:cd:64:66:
b8:8f:e0:2b:fb:a6:33:94:07:6c:52:61:fa:7a:88:
f3:be:3f:55:fc:6f:94:c3:3a:37:54:7f:75:24:59:
ba:6d:01:86:fa:81:86:c0:cd:06:20:ee:93:89:a6:
7f:92:af:5a:60:48:4b:bc:66:1d:c0:10:c0:2a:bf:
d0:d3:e1:21:1e:e8:c6:79:46:b6:02:e5:a9:e2:0b:
8e:51:c1:89:c9:06:7a:17:95:6b:42:7c:c7:20:3c:
5a:3d:80:5a:88:b3:34:72:2b:d9:00:21:73:37:b0:
f4:a7:94:23:c0:20:1c:66:88:26:5c:eb:9e:ff:49:
58:90:65:1c:c8:ac:22:be:cc:69:43:11:b5:03:dc:
8e:db:dc:c0:6b:73:4b:73:4b:bb:bf:88:b4:2a:65:
93:19:fa:e6:ff:5c:c5:a3:fc:e6:32:ae:92:a6:1d:
7c:9b:5b:35:3d:16:5c:22:17:94:a5:db:b8:3a:72:
1c:26:1b:b9:72:99:ad:95:5e:66:e5:f6:ff:ce:74:
32:34:b0:eb:88:77:f8:24:1d:b2:ab:4f:cb:28:57:
8b:25:9b:23:ed:db:dc:b3:87:5a:61:24:83:b9:b8:
99:51:94:e5:cb:38:11:bb:4b:90:e9:4b:8e:39:ff:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:72:8B:68:91:8B:E3:51:98:03:B0:4E:0B:80:62:EE:46:9E:08
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:7e:36:7a:18:e9:ee:b0:49:d0:45:75:56:8d:e5:4d:14:
8d:0a:e7:36:c4:61:7d:2c:24:91:c2:2e:05:be:c7:8c:4a:95:
e4:26:d2:0c:90:4f:2a:9b:17:e5:c7:53:88:08:11:23:f4:e1:
fa:4d:72:bc:e0:f1:1e:99:f4:8c:72:e5:fe:ec:77:22:5a:01:
fa:8c:1c:70:f7:8a:3d:da:b7:b8:ca:78:af:e5:e3:24:3f:1f:
e8:86:98:e9:95:c0:84:1f:24:85:f4:70:52:a7:f5:5b:4c:de:
95:40:7d:41:9d:ab:93:6d:ba:61:eb:e8:af:b5:1f:f4:3d:a6:
37:d9:0d:29:ac:6e:12:55:8a:a3:1c:25:a5:87:5f:f1:62:6d:
d8:a6:36:cc:08:67:51:7d:e6:35:20:e5:fe:82:65:e4:d3:ae:
5b:09:63:89:99:93:64:eb:3b:9c:d2:e2:43:08:d3:01:8e:c8:
15:fc:76:d1:20:51:05:9e:cf:95:37:82:23:a0:b6:51:15:4c:
a7:51:12:99:38:b6:af:d1:bc:44:a1:21:71:cb:40:2f:e1:8b:
be:57:b8:02:bc:cc:cc:e4:ae:3d:71:a1:68:75:ac:23:99:43:
eb:8b:3e:0b:51:0b:68:e6:13:ab:fa:96:62:66:1e:59:da:fe:
61:ad:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:10 2026 by rpki-client