Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: SJIjLF31GxfSPgNZ78HFpV/khtrakQXrsv7DUqMqZR0=
Subject key identifier: 6E:CB:1F:20:C8:57:2A:D7:10:15:02:36:9B:8D:72:5A:50:0D:98:CB
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 019D299723D34530F59443A38E6FC5C25D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 06C6
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: pBN7cMZmVAIsaP2Ev/YlYG5zo/F4NTlZvXGPAKaVKro=)
2: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (hash: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:23:d3:45:30:f5:94:43:a3:8e:6f:c5:c2:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=6ecb1f20c8572ad7101502369b8d725a500d98cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:e6:6f:63:4b:87:74:92:8d:36:db:bd:b6:
f0:40:a0:bb:7a:d2:e1:8f:7f:76:70:a9:ee:42:c6:
a7:e3:be:cf:40:b9:62:7b:ee:bf:02:e6:0e:d0:50:
84:34:9f:cf:22:c2:7f:29:9d:37:1c:43:6b:4a:cc:
d4:e3:a8:2c:76:82:a4:34:94:3a:6f:81:ad:9e:0f:
b5:ba:b7:eb:a0:e2:ab:ee:0e:34:39:01:2b:40:f2:
46:82:6e:22:af:37:3d:88:27:31:20:a7:02:74:f1:
ea:f6:65:d4:3b:66:0c:8c:31:d8:d7:74:15:9f:5c:
8c:0c:f7:23:ae:b9:7f:a1:b6:97:38:9e:31:2e:77:
e0:a1:a2:ec:6f:57:d7:8e:cc:4d:33:a3:f8:9c:8c:
4b:7d:b3:07:c1:8f:f2:5d:ff:bd:01:45:8e:46:86:
04:25:4e:68:9e:39:cc:e1:a5:5f:d5:38:92:57:dd:
28:73:1e:a8:f8:1d:38:59:88:f3:fa:dd:74:60:0d:
c4:7b:2f:f9:4c:69:95:9d:58:2c:80:bc:40:af:33:
c3:71:25:79:01:f5:4c:24:e8:4c:14:f3:67:25:bd:
27:42:a1:d2:2b:bf:0d:ec:35:67:4c:93:e9:44:a9:
4e:fd:08:d6:fc:16:3a:81:36:6f:c9:e1:9f:00:b4:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:1F:20:C8:57:2A:D7:10:15:02:36:9B:8D:72:5A:50:0D:98:CB
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:b7:75:e1:a5:62:70:b7:06:62:02:17:16:00:a1:ad:93:
4c:9e:ac:7c:0d:54:4c:f5:19:f1:62:98:de:c5:cc:78:b6:1b:
d2:cb:03:71:9c:cf:1a:89:4e:50:03:d7:77:a5:9f:31:0c:04:
ee:cb:5b:2c:7a:ed:c5:e0:fa:9d:36:b0:15:e4:5c:cc:9e:90:
ca:a3:b9:6a:c7:e4:03:6d:3f:ea:7b:8f:c5:87:43:8a:a9:3a:
6a:9a:81:3b:b4:61:76:90:09:07:8b:53:24:d3:ce:bb:4a:4d:
1b:dc:21:1c:6a:63:ea:9a:22:54:82:ad:a0:43:f2:16:c5:70:
c1:82:7f:72:6a:8f:75:dc:a0:17:bf:f8:d3:9e:d2:2d:5c:e1:
fd:4c:f4:fc:e7:a4:b1:77:45:ae:a0:88:d9:ba:1e:f5:a0:43:
eb:a7:2c:92:2a:e1:a0:8f:5a:57:dc:47:47:a9:37:9a:96:cf:
7b:05:c3:65:d6:c9:e6:c3:91:db:95:42:71:f0:b6:2e:ca:74:
0e:f2:db:af:51:4e:a4:17:43:1f:24:6a:57:18:f9:92:2e:00:
3b:a2:bb:fb:6c:a4:8c:c1:74:ce:96:62:ab:fd:7c:91:ef:c2:
c4:52:46:96:69:87:c0:5d:7e:5a:be:d1:55:c0:69:a0:45:fa:
28:f9:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:37 2026 by rpki-client