Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: TFwK0+o4j+tE4Xcy4mdc0kmqPR2HWV5zp5LONG3DthE=
Subject key identifier: 15:DE:25:37:F7:B5:B2:87:FE:90:48:CA:7A:16:1A:87:5F:CD:B4:60
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019D33755CDA24DFFF6C2A68293EA500EC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 12FE
Signing time: Sat 28 Mar 2026 08:00:22 +0000
Manifest this update: Sat 28 Mar 2026 08:00:22 +0000
Manifest next update: Sun 29 Mar 2026 08:00:22 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: 0il3N6yHN8ee1h3WUOz9B+sC8dwPLmt2ax/6S3v0uLw=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:5c:da:24:df:ff:6c:2a:68:29:3e:a5:00:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Mar 28 08:00:22 2026 GMT
Not After : Mar 29 08:00:22 2026 GMT
Subject: CN=15de2537f7b5b287fe9048ca7a161a875fcdb460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:50:42:cf:e4:0a:e0:23:01:99:f5:2e:e0:
6a:5d:84:89:c0:41:79:a8:c0:0f:6c:ef:0f:57:bc:
d5:a7:22:24:96:9f:f0:15:a2:30:21:51:54:6e:47:
20:d8:c5:e6:0a:2f:63:87:76:95:89:88:49:3d:cc:
98:2a:33:be:88:ba:b8:34:ca:01:fa:e3:c1:cb:d4:
93:9e:3f:be:95:2c:72:62:38:5e:47:4d:80:45:4e:
ba:6d:f7:f8:c5:7a:6c:f0:6c:88:e3:ec:8e:1b:07:
ad:7a:6e:da:c9:d8:37:8a:80:1d:ff:0f:db:4e:40:
9b:91:2e:fc:62:65:99:c0:5a:c1:93:ef:a7:e7:86:
c7:67:91:cd:62:29:fe:22:1a:b5:69:cf:28:f0:94:
7c:f8:c9:5b:28:3b:f7:a3:8a:ce:ea:40:72:67:70:
1a:ce:03:b3:7f:46:b9:7e:94:06:3d:5b:c8:83:36:
e9:46:d2:fa:49:6b:b6:6a:70:8b:f7:ab:d2:d2:c1:
ca:62:ed:7d:6f:36:3f:95:63:ea:e5:bb:8a:13:18:
dd:d6:c6:2c:d4:e2:71:a9:1e:93:0f:94:c9:74:2c:
7d:a7:e4:50:e2:d9:16:ac:fb:83:d5:38:56:f4:ea:
63:9d:23:40:44:55:c1:9b:4f:27:2c:34:46:e4:f3:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:25:37:F7:B5:B2:87:FE:90:48:CA:7A:16:1A:87:5F:CD:B4:60
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e9:50:83:23:c2:0e:80:83:62:17:83:40:32:0d:a0:08:d3:
ff:d1:97:7b:c8:5d:50:1c:3e:64:f9:59:7d:ad:03:d9:0b:37:
d3:f0:45:ba:23:81:4a:5f:e1:ca:96:b5:4c:a8:64:7b:4f:56:
05:e7:25:2b:c4:b6:7b:42:a6:c3:01:e2:c3:af:dc:2f:43:d2:
a5:49:35:20:7c:9b:d1:0a:15:f3:b7:cb:72:43:7c:23:4b:90:
a4:5b:ae:d6:60:b6:28:da:b1:b3:a8:94:f2:64:84:6e:fb:69:
72:54:ca:01:d1:94:4d:6a:6c:a3:7a:55:5e:7e:d7:a4:3e:a9:
65:27:0b:85:80:70:05:5e:bf:48:9b:e6:1f:ff:9e:54:8d:bf:
64:90:f7:7d:b2:9a:53:57:4e:47:03:af:2d:ec:c5:56:2e:dc:
6f:8d:da:3e:f7:bb:5e:65:21:ef:55:3a:07:cb:f6:4c:ee:66:
65:dd:24:3a:ea:4e:5d:f0:9e:16:48:68:c4:c3:45:a4:29:80:
9c:38:f6:8f:83:92:56:69:a0:59:e7:78:f5:79:e6:9d:65:04:
f8:db:81:06:7c:a4:5a:95:c6:c1:2c:81:56:f1:98:d9:92:95:
e5:5f:3d:d2:b4:7f:fa:e5:46:6d:6d:bc:6e:87:8d:e4:4e:3e:
17:84:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:47 2026 by rpki-client