Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: S5d6btBxzFemx337rKqWT3NahaOzlZ8Y5rm4EFlqAYE=
Subject key identifier: CF:CF:CE:B5:A5:4C:B2:3B:B1:26:E3:CC:7E:D4:19:71:D5:25:F5:0C
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 019D284DEBEC092C7D3A5C400E0C9E94AB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0847
Signing time: Thu 26 Mar 2026 04:01:28 +0000
Manifest this update: Thu 26 Mar 2026 04:01:28 +0000
Manifest next update: Fri 27 Mar 2026 04:01:28 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: y0CeMFOM9NbfBZ2XeMlRUCLFfKO0+a1FYM3nMWYEaWQ=)
2: yAvipSzqrRMIwGb_dYX551oEf3c.roa (hash: PTrrr2bY67mRScuYX9mwm1OfW9eCtFbaYeGSBUpSsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:eb:ec:09:2c:7d:3a:5c:40:0e:0c:9e:94:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Mar 26 04:01:28 2026 GMT
Not After : Mar 27 04:01:28 2026 GMT
Subject: CN=cfcfceb5a54cb23bb126e3cc7ed41971d525f50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:05:7f:91:5c:a1:55:02:a9:b4:ae:78:6b:
a2:46:15:58:3c:89:2c:42:e8:60:a8:55:31:26:4f:
e7:b5:80:38:7a:f3:47:34:1c:b4:1c:6c:fb:3c:51:
1b:eb:b7:d8:83:7f:2a:c0:5b:ea:73:e7:df:b4:50:
c6:2b:ed:da:71:35:46:60:e1:7e:5e:7e:eb:d6:c0:
4b:03:ab:b9:d8:85:da:7c:7e:f2:a5:8b:47:28:ca:
68:0b:84:2a:37:f4:c3:66:34:4a:02:2b:a3:a0:10:
ff:f7:1e:60:4a:a3:08:ab:3a:d4:d2:0c:2f:b4:0e:
1e:c7:b0:d3:c0:e6:65:40:6e:ca:46:e6:2e:b9:a4:
03:d6:bb:c9:21:13:45:24:fc:2d:9c:c9:8d:d9:e1:
d8:25:14:5d:0d:00:66:03:92:99:70:16:86:02:bb:
b9:0c:49:8f:b8:39:74:52:e6:80:a0:46:de:8f:b2:
3d:35:1e:59:59:5f:ec:ac:16:b2:74:79:3c:2f:61:
c4:e8:4b:9c:ec:e5:19:76:1d:77:5c:af:ec:0a:3f:
6a:82:a0:ae:f5:f0:f4:90:0b:95:58:42:76:93:49:
66:45:82:9e:4a:76:28:d8:80:58:cc:fb:30:6c:64:
aa:32:6c:77:09:7e:b9:d4:83:6b:f6:1b:ac:d9:17:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:CE:B5:A5:4C:B2:3B:B1:26:E3:CC:7E:D4:19:71:D5:25:F5:0C
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ba:67:dc:e8:dc:96:05:cc:db:be:75:30:08:a3:fb:b6:d1:
9f:34:99:3c:6f:3e:df:99:3d:32:c7:89:ec:cb:4d:f4:0e:3d:
f1:35:85:7d:21:8b:7a:b7:87:a3:b5:78:bb:4d:e7:58:53:0f:
f2:c2:67:fc:c5:62:77:03:c4:f4:bb:fe:85:cc:2c:39:43:34:
7c:3d:db:07:fb:bb:ff:f2:f4:03:a6:02:42:06:9d:9c:a1:03:
39:01:dc:e8:41:90:a0:3e:6c:42:dc:a9:f4:c9:6b:03:72:6a:
ee:0c:60:f6:69:3a:f6:bb:c7:5c:66:cf:50:10:1e:75:00:f1:
82:51:e3:43:37:2f:58:cb:36:65:b6:d6:36:19:12:2d:7c:1f:
11:86:9b:d7:bc:84:b2:a1:d7:11:59:a9:d3:84:8f:b0:07:7e:
29:0a:f4:9f:59:30:91:a6:1c:39:fc:81:50:ca:95:be:11:dd:
0f:fc:45:44:c6:07:7f:04:25:c1:0a:43:a8:f4:12:98:93:61:
59:c7:10:1d:5b:62:ab:5f:13:67:d7:a5:4a:e3:eb:59:87:5e:
38:10:ba:2b:e0:9d:37:96:18:55:d8:d7:dd:bf:c0:58:49:dd:
8f:5c:96:c7:fb:a5:b8:e3:4b:1c:d6:08:54:50:84:70:14:aa:
86:1b:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:58 2026 by rpki-client