Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: ODoL+VJb8X05VLmeh/hrWaE1Q3BfrkYSI7q4xnPj9ds=
Subject key identifier: BF:69:46:46:E7:93:5F:D7:9E:A4:3B:70:CA:F1:C7:8F:E5:46:69:4F
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 019D284DDD1446F5DB2CCC8818E339CD8626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 147A
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: BTLNp9X88+ehM9I8BkFykaYqqLbFvngG1x4AqEBG0S8=)
2: URzbRc-qYA-jqGN2INzPGr3qGIs.roa (hash: pdWeMvzH737tn0fqVYH1dvD9WQjSjaeJBSWYN+4lA3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:dd:14:46:f5:db:2c:cc:88:18:e3:39:cd:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=bf694646e7935fd79ea43b70caf1c78fe546694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:a8:50:01:56:c6:3a:f1:28:e7:02:53:cf:
e8:2c:cd:05:e3:e9:2e:d0:b7:f6:a6:a8:7d:3f:75:
e5:1e:4a:cf:a9:9d:6c:39:d6:df:45:fc:f9:85:30:
95:4d:37:a5:42:56:53:2b:d3:72:0f:b1:44:74:d3:
22:04:0f:97:7f:2d:7a:01:9e:5d:08:98:79:f6:6f:
bb:a5:b4:b8:29:75:06:85:53:5d:1f:e4:54:cb:b3:
44:df:e7:16:78:6b:11:6c:7e:bc:50:74:55:43:63:
80:ef:18:47:a4:8b:de:11:65:06:d0:5c:03:80:c8:
21:db:36:11:a4:39:48:3d:18:21:00:3e:f7:cd:01:
e5:6a:6c:c9:8e:a8:bd:5c:22:8f:0b:c0:07:d0:3e:
8f:48:f1:49:f3:ee:cf:41:1f:d1:22:89:41:49:24:
9f:05:62:f4:53:99:68:12:f3:0b:44:39:5d:37:2f:
8e:a6:03:8d:30:be:90:a3:ca:d9:82:45:01:d6:4d:
c8:5d:f5:15:d7:68:24:c9:b3:7b:a9:46:14:86:05:
fd:ca:72:4b:81:5b:9c:05:05:c0:b7:8e:c4:47:7b:
6b:2b:75:9e:b3:e4:85:c8:28:73:70:fe:2e:4d:28:
ba:0f:2f:47:14:df:8e:2d:4f:29:c7:fb:41:75:e4:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:46:46:E7:93:5F:D7:9E:A4:3B:70:CA:F1:C7:8F:E5:46:69:4F
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2b:42:25:bc:77:99:d4:68:b5:99:de:cf:62:3a:d9:72:1e:
fc:43:44:14:c6:d1:60:04:fc:88:e4:64:f7:0f:d4:db:89:a6:
76:61:5b:ec:c7:ea:44:be:bb:57:d7:16:1b:48:cb:6e:ba:40:
1a:8c:6a:4f:b2:f6:56:71:ef:83:d2:76:f3:e4:81:6f:0d:32:
15:33:97:ec:68:f0:93:2a:64:f0:fa:3b:9e:d8:eb:be:16:2e:
a8:11:24:1e:2d:7c:59:c9:51:aa:fd:06:9b:ee:c0:e2:cf:fd:
de:ad:a0:b0:ae:53:af:66:3e:89:e5:9c:5f:b6:76:1c:23:ba:
ed:cf:53:bd:26:b3:f5:0e:59:54:d5:7d:9e:24:1f:78:f7:ab:
2e:a1:60:4b:08:13:41:f3:1d:30:4a:05:3e:48:e3:f1:31:47:
9a:5d:1c:e6:63:93:ce:16:73:d5:a3:34:d7:21:7b:61:0f:ec:
d4:35:b0:83:9c:e0:0e:0b:41:4c:1f:71:00:60:77:30:b0:15:
1f:75:e4:05:23:e8:5e:d4:78:21:df:54:4d:97:33:87:f0:92:
a5:0d:64:ea:42:15:0c:af:3e:5e:f9:47:01:4f:df:5f:b8:82:
07:ab:c9:45:ed:ab:3c:43:02:99:16:8e:20:dd:75:f3:b1:38:
79:4a:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:24 2026 by rpki-client