Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: I8Uzk0hIPMXd02qr8/3RrD86VIFJxUd6FuW7I/ycLoU=
Subject key identifier: 07:A0:1F:20:6E:E3:AB:14:AF:F6:6D:BA:0A:21:66:EA:9B:24:B3:2E
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019D29618FE69F986B8A12CE8947EE71998F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:32 +0000
Manifest this update: Thu 26 Mar 2026 09:02:32 +0000
Manifest next update: Fri 27 Mar 2026 09:02:32 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: lTCdB77LCJVXwftzPyj35OH72fobrceONHV7JnQapMU=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:8f:e6:9f:98:6b:8a:12:ce:89:47:ee:71:99:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Mar 26 09:02:32 2026 GMT
Not After : Mar 27 09:02:32 2026 GMT
Subject: CN=07a01f206ee3ab14aff66dba0a2166ea9b24b32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:9a:30:5f:32:1c:d0:27:53:bb:aa:23:23:
49:20:c6:97:98:d3:4b:97:23:a2:d8:d8:60:4a:3f:
cb:5c:de:11:9f:c7:30:7b:e3:07:db:fc:a9:b5:c4:
91:3a:e0:09:02:87:fa:9f:6c:39:59:d1:de:0f:9e:
5c:02:dd:4b:6a:6b:1a:22:63:02:b4:b6:40:be:54:
a2:22:db:c9:be:57:85:d9:f8:ca:a8:5b:20:8d:ce:
b8:ed:e8:72:8d:15:99:74:55:23:93:11:ce:61:e1:
7b:79:62:b5:ee:d4:01:20:6f:23:2c:fe:24:55:ee:
48:f4:11:32:41:a3:0d:cc:3a:98:bb:a7:ee:c3:f9:
34:70:6b:4c:5a:1a:3c:85:5e:e1:2c:70:66:75:20:
18:ef:f0:f6:2a:f7:d5:e5:1d:ea:aa:16:e6:44:db:
5c:b5:d5:6a:cf:2e:df:b5:f5:c9:ee:1b:0c:ab:1e:
68:1d:0e:64:30:cf:82:4f:b5:47:f2:d6:ac:ae:0e:
cb:be:a3:a1:b6:99:7d:bf:c0:71:e9:15:25:45:e1:
34:4f:c5:61:f6:9d:81:fb:cf:91:4b:d1:05:92:fd:
c9:dc:dc:4b:70:08:91:c3:c2:5a:73:36:39:9b:5b:
4c:ae:b0:86:37:1d:a7:13:86:65:36:de:43:fa:47:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A0:1F:20:6E:E3:AB:14:AF:F6:6D:BA:0A:21:66:EA:9B:24:B3:2E
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b6:01:4f:96:8b:96:7d:80:d7:51:5f:ce:a0:5d:3f:18:45:
72:00:8a:68:ba:b9:cb:05:72:1a:13:22:5d:90:f4:68:bc:5b:
4d:3c:ce:c4:aa:e0:b2:f7:d2:5f:a1:76:00:13:37:03:95:39:
f0:d5:b3:56:57:fb:7d:4e:ff:ee:d5:b4:85:c4:3d:5b:54:a7:
64:8a:4c:e5:ce:c1:97:52:87:7c:9d:1c:8e:98:c2:03:68:c2:
2d:18:9f:ec:43:70:cc:72:7b:44:21:e8:0c:9c:47:d3:7f:ca:
9b:4f:3d:f8:c3:58:50:20:3b:d9:e7:fd:92:3a:4e:27:17:1e:
5f:b8:f9:15:86:e0:57:16:7d:24:65:7d:86:39:a1:da:32:0f:
a7:fe:09:0f:f5:8e:81:3e:a2:e0:4a:68:65:52:29:7f:24:01:
ac:88:8f:a8:7f:38:b5:a6:ce:85:42:af:eb:cc:22:b4:48:52:
04:68:e8:b9:27:b0:c9:3f:83:9a:72:c4:68:1f:7d:08:0d:da:
e1:d0:fc:64:94:c4:fb:df:2d:4d:c1:dc:6d:06:e8:64:ed:85:
07:20:00:b2:80:7c:cb:50:ec:53:fa:14:1f:b0:18:3a:ca:7a:
83:68:69:44:16:f6:8a:ef:68:d2:b1:69:f4:6b:3a:1d:10:4f:
23:95:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:57 2026 by rpki-client