Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
File: 2DmRJrYFJVLagB0O5HosfDLnzbw.mft (raw, json)
Hash identifier: Q/m8m2wzgbyCAJw1QKDwGTBwYWscr4F8g4jG3TwmHpg=
Subject key identifier: 48:A7:A5:A6:4E:09:9C:6E:C6:F1:0B:91:87:98:60:A0:84:2E:D1:55
Authority key identifier: D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
Certificate issuer: /CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Certificate serial: 019D33E3B87972A01772E58F9D9E3E4FE13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
Manifest number: DA
Signing time: Sat 28 Mar 2026 10:00:54 +0000
Manifest this update: Sat 28 Mar 2026 10:00:54 +0000
Manifest next update: Sun 29 Mar 2026 10:00:54 +0000
Files and hashes: 1: 0zE3UfEHUEziOBAn5MV-3cMOfAI.roa (hash: C69mVu54AG+KnNmbROi8pSxGo/q1kcnt7UFnI0LaEzc=)
2: 2DmRJrYFJVLagB0O5HosfDLnzbw.crl (hash: aSrzlAY2pDwBBb74CIQK+UeRjVuUs3tWnRGgzN/LLtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:b8:79:72:a0:17:72:e5:8f:9d:9e:3e:4f:e1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Validity
Not Before: Mar 28 10:00:54 2026 GMT
Not After : Mar 29 10:00:54 2026 GMT
Subject: CN=48a7a5a64e099c6ec6f10b91879860a0842ed155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:cd:1e:78:97:2a:48:02:2c:54:f8:43:66:
c1:18:15:d2:fb:e6:24:be:4a:11:a6:1a:bf:4c:4d:
e8:af:fd:6c:9f:de:97:49:62:e3:b5:5f:34:15:f6:
3a:34:d1:a6:fb:45:9e:0a:4b:77:10:6f:ab:40:48:
0e:f5:d7:b5:2d:30:1e:a4:4c:bd:57:c2:38:88:61:
48:c4:30:0d:38:f5:86:bf:71:51:95:fc:e2:f3:b7:
c3:a6:c7:91:99:af:f9:80:4e:86:4f:fc:4b:8b:40:
86:c0:38:dc:b3:59:0e:e3:ba:49:7b:84:7c:b8:5c:
b0:ff:6b:4e:76:60:d4:6e:00:ca:d4:9c:c0:c0:b6:
f9:b5:8f:9b:d3:92:ca:49:00:66:8b:36:13:0a:4d:
4b:0d:c1:d4:66:f5:fc:c8:de:d0:77:34:fe:d2:3c:
aa:51:66:40:56:08:fa:91:bf:08:93:e8:d3:f9:e4:
90:3a:27:7d:70:6a:0d:0c:d1:7d:3f:ac:ba:b3:05:
23:72:58:bb:4a:88:58:65:6c:9e:a7:9c:ea:ea:ca:
83:7d:c1:ce:07:99:30:88:5f:35:6f:15:8b:74:7e:
30:d3:85:11:24:56:11:83:71:18:a5:cc:8e:85:13:
2b:2b:89:cd:96:d1:c2:4e:0f:0a:3a:a2:e6:8e:a9:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:A5:A6:4E:09:9C:6E:C6:F1:0B:91:87:98:60:A0:84:2E:D1:55
X509v3 Authority Key Identifier:
keyid:D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ad:1c:93:46:d8:e0:8c:6a:ec:a7:ea:67:71:a7:8f:e8:d2:
89:5f:34:2f:62:5e:dd:b8:f5:86:71:c5:35:11:da:e7:9b:e5:
94:ba:70:6b:f4:34:d2:ed:87:ee:ce:98:20:45:50:60:47:14:
15:2f:6d:24:bb:99:5e:ee:87:0f:29:b0:2c:7c:aa:fd:f1:0b:
3e:29:b0:53:15:ba:b0:0a:2a:40:5c:83:71:02:42:97:5b:4e:
82:8b:bb:29:eb:9e:0b:32:14:5b:94:9a:8a:11:ea:8c:cc:a1:
cd:65:5b:b4:e0:87:6a:96:bb:8a:db:43:07:62:91:3d:47:2a:
ce:9c:c3:89:b4:87:cb:e4:cd:e0:29:d1:5a:5c:6b:7f:18:1d:
58:ef:06:82:9f:cc:db:10:61:ed:46:d9:a1:e0:49:57:1d:75:
1c:72:c1:cc:07:d0:90:90:d6:f5:9f:7d:05:6f:2c:dd:91:21:
6c:09:1d:ad:c6:e1:0b:d1:03:c0:88:77:01:b3:4c:a1:d6:2d:
ee:fc:96:cd:32:e6:e2:39:98:eb:cd:d5:1c:d3:04:1f:41:46:
1f:fa:5a:56:0d:2e:70:87:dc:78:2c:21:e5:4f:91:9e:16:a1:
bf:1c:58:6e:56:02:c6:fe:53:cd:83:d0:78:ad:be:c1:b2:ce:
f0:38:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:03 2026 by rpki-client