Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: W7smC6IGxJoGGhsBwGxKp332UMcmMn3rhBonXjY2q6o=
Subject key identifier: 63:9A:1D:1A:26:23:D2:1A:7E:94:EC:E5:D3:31:C9:F9:9D:E5:D0:0B
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019D25F171DA81FDCE7F591CAA1B18B3E233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0E5F
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: 3/Cb/TJLWYE2D4TgYrZMuWYgBR519Z4A1+wO9lSkAXQ=)
2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:71:da:81:fd:ce:7f:59:1c:aa:1b:18:b3:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=639a1d1a2623d21a7e94ece5d331c9f99de5d00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:9c:88:84:47:0c:c2:29:10:0a:1c:b7:c3:
76:ac:03:9b:15:7e:b7:6e:74:c3:ed:a9:0f:5a:88:
d3:5f:82:bd:fa:f5:d5:93:03:dd:b8:db:16:76:cb:
58:5e:fc:2f:f1:e0:99:05:00:36:ba:b5:dc:50:5a:
3a:af:92:60:95:59:db:61:41:dc:aa:2d:53:e6:f2:
fa:fb:c8:7d:6d:bf:e8:bf:f9:74:2c:dd:88:0d:4c:
af:dc:6e:d5:ad:47:98:3c:5c:93:64:18:95:47:05:
83:f6:ff:07:6b:1c:cb:7c:9c:b8:d5:e3:06:3e:07:
3b:6e:70:d4:94:68:35:a2:d3:e6:6b:c3:eb:2b:6b:
0b:0c:c3:e4:9f:44:ff:ef:f7:1f:f5:30:e6:a8:a2:
b0:44:9d:53:a0:99:6f:fa:41:c4:72:98:f6:ce:60:
e1:7f:88:3a:6a:3d:03:c0:c7:d1:ca:67:ac:38:07:
49:a6:db:e4:27:27:bd:a0:30:34:b9:29:f5:5f:58:
6c:9a:49:1b:78:de:77:16:92:2a:85:a7:c7:df:d2:
82:85:fa:bc:d9:3e:07:65:4f:1f:c3:e5:59:12:b5:
62:10:0c:9a:4a:27:02:ef:43:eb:64:94:e1:26:7e:
60:61:b2:ea:c7:00:4f:9e:34:74:de:88:8a:63:82:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:1D:1A:26:23:D2:1A:7E:94:EC:E5:D3:31:C9:F9:9D:E5:D0:0B
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:4d:38:dd:97:04:45:db:a9:cd:a7:fe:86:ee:cd:4f:01:
63:2c:58:a5:96:9c:d8:e9:41:3c:f4:c1:7e:0b:4d:78:29:c6:
63:a6:8b:90:8b:eb:82:65:db:16:fd:6a:2e:17:5b:07:f7:7b:
55:7e:3c:2e:d6:c3:53:39:59:00:7b:25:ad:f9:4a:56:cb:56:
1b:8e:8e:30:1b:30:c1:10:2d:f9:27:5e:84:2a:a4:c7:10:fb:
96:48:d6:66:bd:41:39:5d:d6:c3:8d:0c:5b:37:db:37:ac:57:
ec:82:74:ff:37:ce:f6:86:ec:80:ae:b3:e5:05:f6:92:47:f1:
25:4a:f6:29:74:86:39:be:7d:24:a4:2d:45:46:0a:bb:1d:b9:
49:df:17:c7:a4:29:e4:e8:33:78:f8:9a:4b:b8:62:76:0a:a1:
55:3f:f7:27:48:72:90:cf:34:bd:83:4e:cf:6a:99:5e:f8:ef:
fd:d6:2f:4b:2b:af:58:4b:00:c1:3b:f9:fb:9b:af:74:7c:3c:
80:84:13:b1:ef:3b:ba:a2:2b:3a:6c:ab:19:d0:16:be:d2:24:
11:52:eb:0f:61:a8:4f:72:ac:a9:0d:19:7e:9e:1c:30:dc:39:
d8:76:8d:a4:50:f0:36:ba:45:87:1d:62:ea:8d:e2:85:f5:0c:
40:26:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:44 2026 by rpki-client