Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: tk6K2CJr7SaywKFncj6Myg26sQYJscens5uCmLdq5XM=
Subject key identifier: DE:72:9B:93:DB:A1:25:32:61:D1:8D:2C:70:87:B0:2D:27:DF:99:71
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 019D27A8610FCC6D24810BB3C38A69A395F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0F6E
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: lfBtvsHJtoqVWnNdSTjkB8IKC/27igv2aLlYRqijfKc=)
2: kPCV9Z9GO0MBuXeU-WIy78ikMug.roa (hash: 0NQx9iiXvgvHENMrWY26SmRkGT/goJQ6m2yue/PuWAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:61:0f:cc:6d:24:81:0b:b3:c3:8a:69:a3:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=de729b93dba1253261d18d2c7087b02d27df9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:ac:9f:67:e2:80:3e:db:b6:02:af:da:8e:
e0:dd:09:93:94:4a:ac:33:78:30:23:3f:29:d3:e9:
f8:ed:81:ed:49:20:28:ae:ae:70:e4:79:ee:96:a1:
08:93:ba:31:2d:b3:81:cd:fb:ea:7c:ea:e1:78:ac:
66:fa:7b:cd:7c:4c:47:2f:34:23:89:3e:7d:73:cd:
62:43:3a:7d:0a:6a:ab:62:86:47:33:e2:e2:2b:0a:
54:86:70:22:0a:64:9a:97:5a:39:7b:45:10:ae:0a:
81:06:12:11:fe:01:b2:0f:ef:f3:a8:ae:79:47:cf:
34:a7:17:96:2f:6c:4f:a9:99:1f:8f:ed:92:04:74:
ac:0d:9a:ff:d0:33:ad:e2:58:45:06:9d:e7:f1:45:
67:49:21:e7:0a:5e:8e:ba:d9:fb:6e:4f:0c:6a:ad:
32:77:9a:47:01:43:4b:a2:92:45:fd:69:61:75:02:
5d:51:74:50:b6:05:d7:55:eb:b8:9e:99:8b:25:03:
98:c8:1e:fe:08:8c:9a:b9:b3:5c:7c:aa:f7:55:75:
76:ee:5d:b7:f6:32:af:46:7e:ce:7c:5a:6c:c1:cf:
d3:60:70:4b:88:02:7e:e0:8b:7f:fc:01:f5:56:ba:
aa:52:e0:b5:bb:c8:47:01:da:bf:ff:03:86:af:e4:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:9B:93:DB:A1:25:32:61:D1:8D:2C:70:87:B0:2D:27:DF:99:71
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:33:99:63:22:6b:29:17:d3:1d:d9:89:bc:76:aa:f5:6f:d0:
32:cd:b2:c0:26:5a:e3:64:de:28:06:bc:ef:c2:a4:23:28:4f:
9c:b4:48:eb:80:d4:18:34:ef:3f:b5:8f:a4:c2:3f:7f:e7:10:
d5:b7:e7:92:3e:09:fd:9c:84:1c:2d:d7:79:84:1d:5c:cf:eb:
73:55:c7:32:5f:40:8f:f7:ee:87:3d:ee:b5:8b:dd:a4:4a:61:
21:f6:f1:cf:1e:17:3c:0b:bb:ed:18:53:ef:04:a2:26:fb:98:
9c:3f:f7:a4:77:e4:0c:ca:d1:fc:c5:51:f4:02:33:d1:8c:8e:
a1:ad:61:5d:0d:db:4e:25:22:7a:48:f8:57:cc:a1:36:58:1a:
4f:5b:01:c9:1d:08:82:96:ed:82:25:ae:eb:39:54:3e:d6:d7:
97:3d:04:9b:11:d0:a0:4b:f9:ea:08:42:bb:05:44:79:3d:5b:
57:e5:6b:f0:dd:40:26:f6:b5:5e:d9:8e:90:24:c9:16:98:af:
03:a8:0f:b8:38:93:81:9d:fc:cd:44:ce:af:0a:50:72:e2:5c:
25:5e:7f:c6:9f:2a:de:32:94:d0:67:c8:7b:30:6c:73:22:6d:
73:f9:d9:50:05:2e:47:dc:1d:34:ab:55:4f:c1:bb:14:88:ca:
f7:d8:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:08 2026 by rpki-client