Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: aUu7wf7yf54kRxVF98WUPWbXM0KaGlPQfKBuuOoUp+g=
Subject key identifier: 83:06:AC:A0:3D:DA:D6:4C:A5:0A:96:B7:A1:00:3E:61:03:7A:56:63
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019D26284475225D90A96F833D9E658FEC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 1362
Signing time: Wed 25 Mar 2026 18:01:06 +0000
Manifest this update: Wed 25 Mar 2026 18:01:06 +0000
Manifest next update: Thu 26 Mar 2026 18:01:06 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: txXFE7aEV59kJKYGsTLNMbCB7n/VFU/h+dqHvUOEY38=)
2: OZMA82xPSJu-yBhBRmE2uQQQB7c.roa (hash: hd/p26xBT3/OwpQY6ul+XP0iSi+M0eAbCh1LP64Oo+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:44:75:22:5d:90:a9:6f:83:3d:9e:65:8f:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Mar 25 18:01:06 2026 GMT
Not After : Mar 26 18:01:06 2026 GMT
Subject: CN=8306aca03ddad64ca50a96b7a1003e61037a5663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:22:8a:06:cc:66:ff:38:82:45:2b:ee:99:
5b:28:fd:1c:ec:45:4d:a3:17:92:05:21:7a:3f:25:
ab:d6:dd:29:00:51:52:ca:0a:32:c0:e3:1c:c0:7a:
c3:88:40:31:a0:d5:4f:fe:b8:be:04:b5:cf:d3:27:
3f:eb:6e:68:2f:03:0c:03:e2:ff:71:19:50:bd:48:
9c:e0:31:b4:0d:67:24:82:39:a2:37:41:02:73:51:
60:74:59:aa:39:85:1a:31:50:94:97:ab:f4:5c:96:
a0:bf:73:1b:f1:31:b6:2b:38:64:da:1c:71:77:6e:
65:6c:c8:1f:aa:27:da:cb:92:f6:67:4d:a2:cd:38:
d3:67:ed:95:6d:79:b1:ef:b4:58:96:aa:b8:c2:51:
51:34:c6:9d:55:bf:78:82:ba:8d:30:96:35:f3:5e:
c7:11:36:90:f2:61:6f:82:c1:ff:55:12:c8:b0:4c:
df:89:2e:96:ef:f0:17:c8:af:b4:c6:96:c8:ed:5d:
d9:11:48:62:db:3f:13:d8:b7:da:ce:8b:57:48:f2:
19:f1:80:c5:d2:14:9f:44:ef:a3:f0:dc:ef:2e:a3:
b5:f0:15:48:bd:e2:c4:7b:42:39:2f:e6:8b:72:39:
0e:50:63:bb:c2:c4:a1:0a:b7:f0:76:e9:e4:df:2c:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:AC:A0:3D:DA:D6:4C:A5:0A:96:B7:A1:00:3E:61:03:7A:56:63
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:49:82:d7:05:5d:f4:2d:1c:e0:bc:d1:70:dd:50:bc:5c:03:
cc:ed:0a:60:5e:66:f0:00:2b:7b:fa:87:40:bc:16:22:24:fa:
50:3c:ee:9a:48:bb:f8:2f:b7:8d:8b:30:7f:fe:ac:c0:5d:07:
bd:ad:53:75:8b:0b:07:82:0e:0a:85:12:da:de:e6:ec:3b:7e:
ff:98:77:f7:4d:7a:4a:3d:ac:e1:34:1f:b1:d7:a4:16:f7:89:
35:e2:85:0c:0b:28:a7:16:36:a2:2c:21:c9:23:05:1d:c2:b1:
48:e7:d5:d6:27:7e:e2:4b:83:76:d5:84:12:43:8c:1e:01:d4:
87:46:1b:ee:69:1b:e1:5a:f3:82:e6:c6:71:25:e7:8f:38:d6:
ad:a2:bf:f6:dd:3b:ee:e7:c2:38:fd:5c:13:7c:68:ea:53:a0:
b6:9e:76:1c:d3:8f:44:5c:53:8e:a2:c8:c4:75:01:78:eb:11:
1e:23:f2:b6:71:e1:83:a6:c3:7a:0f:cb:32:67:26:67:bc:21:
fd:b5:98:d2:e7:7f:25:fc:28:6b:a1:b1:28:25:a4:8f:20:e2:
07:3e:1b:4c:6b:a6:4c:4f:e4:1b:a7:e0:a0:a8:ea:64:6a:02:
f5:0d:02:96:bc:c2:b3:f5:5f:84:26:46:c4:88:2b:c9:f9:f7:
89:a2:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:53 2026 by rpki-client