Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
File: 2UivxK9I3Sso6FSZZFe04qhDTWE.mft (raw, json)
Hash identifier: 3z2KekmeQrHw5IB6LFgOPWILcsCLGR+G0wqAC1KYeUo=
Subject key identifier: 47:30:AA:09:A9:D8:D3:35:B4:8A:26:9F:99:30:1D:20:1D:57:BD:3A
Authority key identifier: D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
Certificate issuer: /CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Certificate serial: 019D3C42499AD5EF63A6A9F0C68D8A1AF44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
Manifest number: 1E
Signing time: Mon 30 Mar 2026 01:01:10 +0000
Manifest this update: Mon 30 Mar 2026 01:01:10 +0000
Manifest next update: Tue 31 Mar 2026 01:01:10 +0000
Files and hashes: 1: 2UivxK9I3Sso6FSZZFe04qhDTWE.crl (hash: DFPodNWLTArWA9LSBSYMXUDWUzxYMY4QkyyDbe9gPaI=)
2: UO5esvuscm_Muh0KmfgSRLz3jvA.roa (hash: Eg2xdzCBLccjbkg/73TIkrnL2S4mi3j1eD98e/h7Rpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:42:49:9a:d5:ef:63:a6:a9:f0:c6:8d:8a:1a:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Validity
Not Before: Mar 30 01:01:10 2026 GMT
Not After : Mar 31 01:01:10 2026 GMT
Subject: CN=4730aa09a9d8d335b48a269f99301d201d57bd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:e2:9a:10:0a:61:cc:9f:83:21:a5:7e:94:
f7:b9:63:64:57:80:79:db:e2:99:c4:29:c9:1a:35:
72:1b:c8:bd:46:d1:b6:91:73:82:19:54:37:2b:0e:
4a:1b:96:83:65:65:7b:1a:9d:9b:b0:39:59:2a:a2:
7a:3c:ba:b1:ae:98:2e:65:03:75:ec:cb:e5:35:5c:
ef:e8:c9:81:f2:cf:07:c5:10:bc:5c:09:8a:d1:f2:
0e:37:4b:c7:ce:ab:82:06:05:43:ef:02:a0:7d:42:
71:2d:e5:f3:31:99:e3:e9:35:9b:09:5c:34:84:0a:
54:09:cb:d5:6e:86:65:ae:1c:46:64:16:85:91:7a:
58:ff:70:90:23:bf:20:4b:be:18:d1:d4:c7:b4:53:
d8:b3:b0:da:5d:b7:0d:7b:7b:c1:dd:f9:cb:c9:aa:
19:0a:66:35:c9:0a:8c:26:96:54:9d:d4:2c:87:47:
15:c4:f5:8a:23:7d:e7:aa:f1:2f:65:ad:f6:1a:b0:
a1:ce:ba:f4:16:6e:4c:29:97:6a:cb:f0:66:3c:a8:
a7:6d:17:7b:d5:18:46:6c:a9:b7:85:3f:49:01:ce:
cf:c9:4c:40:2e:20:4d:8b:da:ad:70:fd:d5:2d:cb:
81:f9:ea:f3:af:82:73:c6:6f:57:9c:f6:d2:64:be:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:AA:09:A9:D8:D3:35:B4:8A:26:9F:99:30:1D:20:1D:57:BD:3A
X509v3 Authority Key Identifier:
keyid:D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:d0:94:7c:ee:8d:14:29:4f:be:4f:26:24:cd:58:e8:ac:
fc:9e:1d:11:96:79:44:23:e3:02:47:3a:87:e4:ab:d9:7c:39:
52:54:c2:29:0d:f6:d6:ef:9f:63:ba:a9:91:2d:9b:58:2e:d6:
c7:2c:de:5a:97:02:fc:65:6c:0b:0c:01:66:07:3b:b4:04:8a:
29:d7:af:41:e3:76:31:a6:03:87:c8:d0:6f:ae:5c:a7:25:5b:
f0:be:be:e9:10:67:28:cf:c6:dc:52:0f:a4:54:cb:31:7d:dc:
9c:f4:cb:65:8c:1c:10:19:8d:6e:2e:df:72:48:e7:a6:79:9b:
ee:e2:2c:b2:1c:81:58:df:97:0b:c5:dd:31:8a:8c:61:a2:03:
1b:a6:58:c4:bc:03:37:f0:a7:a9:08:2b:6a:ef:e3:4e:94:9f:
16:36:bc:2a:a2:e2:08:14:5c:92:51:b4:b5:f4:19:af:7f:ce:
b3:9d:27:85:02:71:4e:01:a5:04:5b:64:75:47:34:59:03:87:
38:f2:81:0a:5b:80:cc:b2:d3:82:fe:0c:0b:fc:b6:1d:c1:98:
d4:0c:ca:4f:29:b4:97:6c:b2:96:df:cc:ff:dc:d4:b8:e0:27:
38:ad:e9:8a:0e:78:87:ae:16:91:6b:6b:da:d7:08:b5:d0:23:
d9:c4:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:33:53 2026 by rpki-client