Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: v/wUdDqY8u+69DT6LjA6SIX7MlAqxh5ubhaecl1mDL8=
Subject key identifier: 28:73:58:97:1C:F9:46:FB:7E:F1:68:BD:24:27:52:55:7E:3B:E7:60
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019D25F155C81F88D123E5112C91D02DF2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 75
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: sf7sdFthTaLSSHYcCI6RVWwOieaSBqYwSjMlt3alUdA=)
2: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:55:c8:1f:88:d1:23:e5:11:2c:91:d0:2d:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=287358971cf946fb7ef168bd242752557e3be760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:6a:c3:1c:b9:d3:bd:1f:33:41:9a:be:91:
7a:d8:ea:2d:50:0f:d3:7d:49:a0:ec:63:fd:be:52:
60:30:20:68:48:95:1c:70:c2:48:a6:93:4b:52:a1:
57:bd:42:86:53:1d:95:00:01:b9:6b:f7:4c:06:0d:
c0:50:7b:41:d9:cd:81:56:a9:e5:ed:c7:38:c1:4e:
94:4a:01:66:e5:31:84:ad:4c:d7:34:81:88:26:71:
26:27:c1:c0:eb:57:cd:ae:d8:77:84:4d:28:b2:69:
00:33:5c:4a:c7:06:64:c2:06:34:f4:08:79:e7:fe:
d6:46:d6:a3:0f:57:9f:be:27:ce:43:22:52:9a:f5:
dc:ec:64:4c:6b:80:a0:00:a9:5f:cf:95:92:49:b3:
f8:b3:3f:b0:61:91:10:fb:b1:51:43:aa:21:25:03:
23:f6:63:e8:dc:02:3a:60:38:41:6c:5a:23:b4:e1:
c4:f2:de:02:d0:db:a2:70:1b:1d:81:37:4c:9c:4f:
cf:20:d2:42:1c:66:e9:09:32:7a:e8:c4:08:44:85:
e9:33:c7:81:17:47:6b:12:3e:d3:26:74:b5:a3:8d:
2f:f2:df:93:7b:20:d4:61:b2:dd:23:e4:0c:54:65:
e3:c7:cb:90:f2:3e:b1:48:5f:5f:f7:3a:cb:17:4d:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:73:58:97:1C:F9:46:FB:7E:F1:68:BD:24:27:52:55:7E:3B:E7:60
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:79:84:fd:ef:4e:67:da:2d:8d:0d:aa:c9:83:cc:e1:a6:
fb:53:1b:22:c8:a3:78:ec:a5:01:fc:96:df:98:84:c5:b7:2b:
90:45:15:c2:76:75:79:f9:1e:54:41:6e:a7:2b:c2:18:6e:e1:
43:e4:1c:4c:ac:bf:5c:27:51:e6:5e:84:2e:92:50:0e:33:c3:
4d:ab:f8:c4:d4:eb:5b:e9:3a:fc:3f:6f:49:4a:f5:77:24:9d:
2e:6e:c8:92:5a:1d:29:b6:26:27:7a:e3:f9:6b:5a:e2:24:9c:
8d:76:fc:ed:27:7b:4c:85:39:44:da:90:b4:a8:0b:f5:60:6e:
8c:97:27:dc:5e:3d:93:a2:53:69:19:e4:a9:aa:03:7e:c4:62:
f4:b0:d3:2b:c9:80:c8:88:80:b6:67:94:42:5c:ee:53:82:21:
e5:b1:3b:30:5e:7b:a9:58:9d:e3:50:1e:a6:90:33:7d:40:4c:
b1:b9:18:fb:bd:83:f2:cb:4c:d4:1b:21:fa:0c:91:83:af:5c:
f0:d6:2c:88:60:4c:cb:c1:55:e5:a7:2e:d8:5e:11:0e:7f:77:
2e:91:fd:53:18:1a:ef:8f:51:f8:b5:03:f6:d7:23:66:18:8a:
47:f2:cb:02:fe:ed:ad:2b:0c:c8:71:3a:73:27:d4:f0:3b:0b:
b0:90:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:01 2026 by rpki-client