Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: jz9oEbBeuEZbqAb1YmLipDTW9aw+ZSIFIS2e+QC8Dzk=
Subject key identifier: C4:87:39:17:AE:C9:A8:57:4C:13:DB:B9:35:32:D1:CA:2B:2C:7B:3D
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 019D27728DCB1E3F84275CA221C33C523003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0AD5
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: rD8oJU7QIAtLgPPQi1GRMxlNH9VaBZBddA32InlSY/M=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8d:cb:1e:3f:84:27:5c:a2:21:c3:3c:52:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=c4873917aec9a8574c13dbb93532d1ca2b2c7b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:c8:49:8a:ae:24:80:07:c6:94:65:01:c0:
c3:17:70:1c:34:d1:8a:d4:57:52:a1:07:c7:c3:df:
46:79:60:8f:4d:6f:a0:f3:3e:80:14:ef:24:97:0b:
67:e9:95:85:b5:76:47:6c:ac:cf:cf:18:41:75:00:
49:70:95:d0:b0:d6:e8:9a:1f:6b:75:fc:63:41:d7:
2b:ac:51:ff:a5:a1:16:11:b8:74:1e:9a:ad:fb:52:
f6:b7:0c:79:1b:95:17:a8:4f:86:c0:a8:b2:a0:c5:
23:bb:d7:62:6b:8c:25:47:7c:df:c4:d6:2e:8f:0d:
17:83:32:f1:6d:99:c9:d2:76:e2:5a:51:ad:b6:1e:
89:5e:e8:e0:90:0b:ad:0c:6e:41:8d:8b:76:f7:27:
3e:c6:8e:8b:9f:e6:2b:06:59:10:83:9a:6b:de:24:
53:32:e6:96:43:97:4b:89:1c:bd:9e:3f:f4:a2:c9:
0b:b3:c0:d6:98:8e:2c:11:e7:76:ba:4e:8e:77:68:
bb:df:66:44:70:11:20:f5:20:ac:b6:ec:99:69:a9:
6f:f9:dd:68:bf:68:b8:d4:e2:86:dc:1c:97:0b:2b:
fd:00:23:3a:90:d0:1a:9b:5e:57:6d:3d:21:c6:b1:
00:5f:b5:46:01:d9:97:a0:0d:a3:9c:04:07:20:bb:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:39:17:AE:C9:A8:57:4C:13:DB:B9:35:32:D1:CA:2B:2C:7B:3D
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:86:83:7b:cc:20:a1:e0:8f:b9:fc:8c:1b:d5:74:5b:e9:8c:
a5:e1:7c:e3:d4:62:ca:f1:24:77:f3:0c:a8:bc:d8:a1:16:98:
9a:de:9f:b1:14:d8:9b:32:04:d9:75:d2:e8:06:18:84:13:65:
96:45:46:bc:f0:d3:a2:b9:37:ab:16:a4:a5:cc:38:42:c3:60:
2f:07:90:6c:d0:b0:26:2a:7e:fc:7d:26:0f:81:ca:43:37:39:
e1:5a:fa:f6:db:78:79:d0:b9:f1:1b:31:78:e5:bd:04:12:d8:
94:c9:31:87:ff:62:c7:4e:18:aa:11:91:26:55:1d:31:1f:c5:
51:84:af:20:02:a0:2c:65:53:56:92:f3:c7:ac:f0:7c:dd:d7:
12:94:b8:5e:4e:1e:dc:e6:80:e9:72:7c:88:51:5f:b9:40:46:
8a:e5:e8:42:42:b7:7a:83:92:d3:f3:3e:59:49:04:b2:94:d3:
b3:89:2d:48:20:7c:01:1f:ec:c3:47:b9:c7:b2:14:d4:da:0b:
30:ad:b6:d7:96:81:fb:b4:31:60:8c:8a:3a:a5:d6:80:f2:dc:
ae:14:2f:33:00:32:87:d9:cf:d8:33:6d:df:ff:2a:28:56:f6:
39:e9:b7:e1:81:21:9f:ed:f0:dd:91:4c:a0:b3:40:f1:64:da:
2a:d1:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:27 2026 by rpki-client