Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: jQsdpAm8y9KErFu4pO4CcU7kgsisTPOJ8MquH6CQt7Q=
Subject key identifier: 24:ED:BB:8F:7E:A6:F1:4F:EB:94:38:AE:15:2E:93:9F:7C:8F:82:D5
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 019D262847B02DEC6BF4A3D7D66BA96668A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 174F
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: pr30gfAkUIe/v4NyWBvF5fL9PH2v62wNVrXscg2zxqQ=)
2: xET4g9Q22br6M_aAIvnYf8vNiW4.roa (hash: Co0dW764z3RfUQJ68TAOxwF+Vuab9DVTLXdcNmyxXW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:47:b0:2d:ec:6b:f4:a3:d7:d6:6b:a9:66:68:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=24edbb8f7ea6f14feb9438ae152e939f7c8f82d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:bc:ab:57:8d:dc:cf:6f:d6:a9:30:a2:4c:
9a:0f:27:ed:1c:df:e0:33:91:86:87:37:4b:3c:6f:
08:a2:7e:92:52:c4:9d:82:8f:74:b6:01:a5:45:c5:
79:4f:2f:95:a3:05:ad:a9:3d:92:6d:b8:e3:3d:50:
1d:92:10:28:97:7c:2f:05:28:f2:ce:9f:3b:42:ec:
d6:5c:d4:48:87:df:ca:21:d6:26:1b:04:3d:92:05:
77:9a:e2:ec:c6:77:b0:d9:26:8a:19:95:d3:12:13:
ef:24:79:38:d7:8f:f8:54:cc:fd:d1:41:de:8c:c5:
6f:c3:e2:fa:45:36:2d:94:f9:a7:be:bd:9e:ef:45:
9f:5c:cc:28:b6:b5:0e:0d:06:11:48:91:9f:13:ed:
05:ad:ea:dd:5d:ea:05:b6:31:4e:56:ea:86:62:dc:
d0:a6:4c:6a:61:7d:39:f0:3a:1c:f9:91:83:6d:0d:
ff:c7:fb:fe:cc:b6:5c:39:95:48:71:8a:e7:e6:a7:
cb:a9:5b:b4:c5:d2:2e:5b:75:1f:9f:0a:16:4d:d2:
c6:a9:0d:da:4a:96:8e:63:8f:64:83:5a:e5:1e:d3:
d4:33:10:2f:70:2b:11:bf:fd:9e:87:29:aa:5f:c3:
81:0a:cb:87:eb:76:2e:06:da:96:68:4b:2d:af:08:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:BB:8F:7E:A6:F1:4F:EB:94:38:AE:15:2E:93:9F:7C:8F:82:D5
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:36:ec:9a:25:49:d8:5e:a0:20:5a:d5:b0:be:2d:30:98:d7:
1c:e6:9c:76:1d:42:49:48:20:0d:92:88:cc:06:dc:36:8f:fe:
c7:79:d8:b3:8b:df:45:f8:16:0a:0c:b3:3c:1a:64:da:f0:03:
43:90:7b:24:fa:da:c7:8d:34:6d:0a:cb:f0:62:da:87:a9:ff:
e0:1a:6f:c7:a3:dd:f2:66:5b:9c:e2:a2:c1:48:94:41:00:18:
95:fc:69:91:1d:a1:61:10:5f:2c:1d:4f:59:97:01:09:b7:cb:
4a:94:f3:d4:a8:e7:97:a9:29:a3:35:ee:70:3b:f6:a7:cb:97:
1a:ec:4a:99:bc:be:de:c9:ae:f9:a4:e3:d5:f7:db:d8:ae:c7:
78:a2:93:2b:39:b9:70:6f:69:01:05:f9:e2:aa:74:ec:d4:5b:
5e:a2:07:38:98:32:96:4f:e8:87:76:01:60:78:a5:82:ac:ee:
67:d3:f1:c1:66:2b:fb:94:5e:68:a0:0a:63:98:0d:6e:33:f3:
ae:19:bc:48:cc:d9:a7:fb:28:d4:c3:ba:1f:ac:08:3f:9e:ca:
d4:90:f7:22:6d:57:79:dc:85:75:3b:a1:c2:26:8e:85:c8:72:
61:4a:7a:07:ad:3d:2b:09:11:60:5d:6e:a6:3f:c1:3f:03:11:
17:da:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:34:58 2026 by rpki-client