Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: mFXY27Ky4LiQASJPZWeZ7ISaahNf8TIr5jGjCNrrG34=
Subject key identifier: C3:FD:7B:C2:73:5E:FA:23:23:35:CD:BD:00:F3:6F:4F:E9:D3:0E:6E
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 019D27A91300D284EA94FDE9D02358CEC886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 12E4
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: XyUo3zYOxBOkK0oSrO9mSPsjAJtNwaR+Ta39OfiBsf4=)
2: 7ozQf2Lgf43OlxMxJfVXI46HKEE.roa (hash: 2WRxX71MqlNLXAV8Z7Z41sZwXZzoqEFDU3UWBkUqAn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:13:00:d2:84:ea:94:fd:e9:d0:23:58:ce:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=c3fd7bc2735efa232335cdbd00f36f4fe9d30e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:63:2f:3b:9f:d7:44:d7:05:6e:37:c1:b8:
e9:10:4f:93:94:67:f2:e8:89:92:6f:4c:5e:c2:b3:
c1:38:a3:1f:7f:4d:1e:22:41:0e:dd:31:46:5f:ef:
3d:16:dc:79:e3:ed:ee:0a:75:b0:c5:17:88:ec:9d:
6f:3b:f9:5b:dd:77:83:7c:72:cb:a5:9e:bf:c1:d8:
87:46:56:3e:f1:48:ba:91:fa:88:dc:30:de:04:a8:
11:a4:67:82:a1:1c:b8:d8:7b:ec:2f:d6:d8:e4:53:
43:1b:f6:60:e2:29:9d:a4:6c:23:f5:6a:7a:24:6e:
3e:d4:49:27:ed:e3:eb:99:87:0c:19:03:e6:96:f1:
36:d2:e1:d4:1d:cb:5a:55:52:0c:91:a2:ac:f0:0e:
2b:e8:63:96:d5:e3:0d:21:75:32:67:9f:8b:8d:2c:
58:73:13:6e:77:b7:07:75:7f:30:9e:3c:82:6c:4c:
42:18:29:87:95:68:65:53:4a:a2:9a:4a:91:2d:4c:
1d:b6:eb:fb:16:38:3b:87:da:33:90:ef:74:54:29:
a7:8d:9a:0d:28:c2:fd:f6:6c:b3:c0:5f:a4:ac:e8:
b7:24:77:7e:6e:00:0f:82:fc:67:4d:53:ea:a7:c2:
3b:54:af:1a:ca:48:ef:d1:d3:aa:a6:64:0e:7e:84:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:7B:C2:73:5E:FA:23:23:35:CD:BD:00:F3:6F:4F:E9:D3:0E:6E
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fe:bc:5a:5c:b3:de:a2:df:5d:a7:9e:1e:46:ae:72:20:6c:
dc:f1:d2:69:e4:66:a6:2a:83:62:70:37:c2:35:1b:95:8a:c7:
75:81:bb:3d:8c:47:75:4b:1f:42:48:83:b5:e8:c5:cb:f2:e4:
a2:8f:59:14:e4:58:ff:07:38:0a:c7:19:ac:16:92:d2:8a:ad:
81:8d:c5:5e:4c:6a:2e:d9:81:08:f5:e6:20:f4:15:e5:80:da:
38:81:6d:10:b1:8e:51:16:d5:ff:ff:9d:ff:cd:fd:2f:d0:58:
0a:91:04:2f:de:3f:74:f0:03:42:6c:1a:48:5b:ef:9e:eb:e6:
70:4e:ce:88:7c:8f:99:25:3c:79:6c:63:d2:de:f1:45:ee:9c:
e5:10:a7:91:04:35:50:13:80:ef:7f:4a:3b:05:4e:09:5b:63:
34:9b:b1:f8:b0:19:a2:c0:80:26:e5:2a:ff:84:4a:26:c6:38:
78:75:31:1b:26:61:80:9d:8b:e4:2f:31:2c:99:5a:d9:a9:3c:
a7:24:d7:57:c4:81:0f:46:b4:12:63:10:59:9d:ef:d1:87:18:
e7:80:9e:79:6c:ba:23:c2:76:4c:6f:d2:fe:3e:f5:b7:dc:43:
06:a1:cd:02:f3:55:45:27:4a:e8:85:73:a4:8c:13:81:ef:77:
30:45:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:05 2026 by rpki-client