Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: dUYEjzDVJFGbWXMf2g60X2LKV0ey/oAT0JpeR3IBOMk=
Subject key identifier: E6:7F:2E:30:24:A2:CF:C6:60:AC:6B:DE:A8:8F:F8:78:34:D7:5A:55
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 019D265FD19E467DE1249D5F150B5F2395C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: yGDS0sx2x3Ut9ohogfNkLm+aLX0ypgeGvGDw6qSsw9k=)
2: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (hash: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d1:9e:46:7d:e1:24:9d:5f:15:0b:5f:23:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=e67f2e3024a2cfc660ac6bdea88ff87834d75a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:66:ba:e7:75:f4:94:f0:77:08:f4:8b:37:
9b:54:34:ce:1a:2b:7c:22:25:df:9a:6d:26:31:b1:
5d:6e:91:f7:b5:10:4a:bb:d9:02:8c:3b:1d:3a:e3:
5f:fb:75:12:7c:53:9f:d0:ee:3e:47:7b:2b:73:8e:
c8:a2:e3:fb:75:d6:3b:3b:2d:32:f7:a8:55:e4:2a:
af:0e:09:f8:a0:70:3a:8d:30:22:c5:45:20:ba:fc:
21:b4:1d:c6:cd:29:0b:d7:33:90:f7:75:95:e3:ae:
a8:04:6b:34:f8:07:49:55:b9:a6:c0:c4:bf:2b:d5:
87:39:63:9c:86:e9:b4:16:94:43:69:1e:6b:f7:c2:
f1:5f:16:03:47:c9:5a:30:4b:8b:df:de:7a:51:e5:
1a:bc:62:2f:13:54:54:fb:3c:49:b2:80:99:c9:4d:
73:a3:39:4c:f1:22:b8:62:df:2a:1b:ad:99:3b:c0:
bc:5c:25:37:18:f0:ac:9f:c3:c8:04:8c:68:cc:b8:
d2:79:25:b6:36:5e:a8:81:d9:fc:5b:5c:fe:dc:78:
47:65:e2:1f:2b:3b:09:f9:5c:42:95:de:64:a9:bf:
38:b9:75:d6:f7:eb:07:a6:54:a9:67:8b:cc:a0:05:
fd:83:89:5a:22:f3:bb:fa:81:f1:91:a9:58:ba:42:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:2E:30:24:A2:CF:C6:60:AC:6B:DE:A8:8F:F8:78:34:D7:5A:55
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:27:af:d5:57:02:20:fa:38:90:db:8a:00:4d:93:af:b2:
91:13:01:86:33:26:3e:9b:ea:3a:4a:41:8e:24:23:c9:74:93:
4f:bd:93:56:3c:6d:44:f7:91:f8:60:eb:24:db:86:7c:fc:66:
dc:2d:79:d1:5b:e9:f3:ce:14:70:a8:68:dd:05:8f:23:64:f0:
fc:73:27:e7:62:2f:d9:78:70:3f:22:9a:31:35:b0:ed:7c:1c:
48:78:fe:53:22:f7:d8:37:20:ec:29:2b:f2:2d:18:8c:bc:07:
9b:f3:b1:6a:3b:94:29:e8:5d:63:d9:67:01:8f:86:87:88:d1:
a8:19:5c:fd:ed:08:54:b9:32:e1:70:38:e5:8f:21:83:6f:c2:
3b:99:86:28:8e:71:e4:d7:81:d9:a3:90:85:0c:26:bf:a4:c9:
f1:d2:56:73:ae:6c:cc:71:51:1b:f2:ce:32:67:66:40:1e:3b:
c3:c6:7a:e2:a3:5e:3a:7c:09:f7:05:91:47:63:a4:50:36:49:
55:4b:7e:b9:97:dc:3d:dd:f7:23:6a:35:40:6c:97:64:4b:05:
d9:d0:0a:9a:d1:fe:b2:ef:f8:79:cc:92:b3:4a:c6:e1:05:9c:
1b:de:2a:23:9f:90:30:d5:48:7c:91:8d:5a:cb:44:76:28:f6:
c2:d7:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:14 2026 by rpki-client