Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: 3HTW/tM/IeeaqfQilYwEKOBA7XFYJ4Grc024hmSqxmI=
Subject key identifier: A0:60:8E:47:8E:08:FF:E0:6A:E1:3E:02:1F:AC:FE:88:87:5B:48:1A
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 019D2A04F0981E7F50A10EAF9D278C7F2BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 14EF
Signing time: Thu 26 Mar 2026 12:00:59 +0000
Manifest this update: Thu 26 Mar 2026 12:00:59 +0000
Manifest next update: Fri 27 Mar 2026 12:00:59 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: zhns7d5h67ACQQWSBlxDh/0ZtO5fRMRyPBgF1aPMAUo=)
2: Mvg3Mo5WSYjcX-Icj2bidj2_crQ.roa (hash: vVq/Mz8wGpzyBjkk9cQ+W/VRqd2BvaRyhDgc817bfY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f0:98:1e:7f:50:a1:0e:af:9d:27:8c:7f:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Mar 26 12:00:59 2026 GMT
Not After : Mar 27 12:00:59 2026 GMT
Subject: CN=a0608e478e08ffe06ae13e021facfe88875b481a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:65:93:85:4a:be:fe:93:8e:ab:a6:d7:9c:
4f:1b:93:b6:5f:74:ff:eb:4a:cc:3d:7f:bd:80:fe:
55:ad:d2:41:73:86:55:43:42:28:8b:bb:f4:fb:00:
5d:84:89:8b:c3:04:55:74:53:27:c0:3f:d2:18:cf:
f6:6f:d8:34:0e:a8:2c:2d:b1:71:cd:0d:73:23:f3:
d5:01:0e:0d:fd:89:73:e4:e2:d7:12:2f:b2:3e:fe:
af:86:0f:79:e2:e3:23:8f:25:3b:65:dc:c4:9f:76:
47:06:8d:48:9c:e0:8b:e1:2f:25:61:53:05:6a:d4:
3c:fd:81:6a:a0:23:f7:f1:60:cf:dc:ee:87:86:1d:
9d:6c:82:d2:15:ec:b2:32:7e:bf:2c:80:b1:6b:40:
61:1b:b4:18:2d:c9:02:30:0c:2c:82:36:ee:3e:1a:
61:08:b7:62:f0:c0:01:a9:de:d8:b3:94:03:3c:6f:
50:93:b8:f8:4b:21:1f:34:7e:b0:e4:8a:41:4b:6e:
c9:c1:c0:b7:82:39:99:4c:3f:3b:1d:48:10:7b:43:
3c:04:cd:d4:f3:84:9d:27:84:f1:29:8e:05:c9:9a:
a7:ef:62:3e:84:91:f6:11:40:d8:ba:a4:c6:ef:60:
aa:0b:02:b9:11:7e:90:22:ef:19:b7:06:14:ad:66:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:8E:47:8E:08:FF:E0:6A:E1:3E:02:1F:AC:FE:88:87:5B:48:1A
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:23:63:3c:e8:cc:c9:c9:58:ba:4e:09:d3:2b:27:00:d1:
ae:42:66:1c:aa:ea:a6:8f:34:79:d6:09:d1:83:a0:02:4c:4f:
64:81:03:fc:d0:6d:e4:e5:3c:50:a9:30:df:73:a3:19:98:49:
51:55:9d:1c:42:ed:d1:cb:98:0a:cc:02:06:33:bb:1f:46:8b:
8c:4e:fe:3a:c9:ae:60:ef:28:be:4b:9c:9f:54:4f:cb:9d:eb:
c2:0b:bf:7a:8c:78:25:d6:28:c9:f9:f7:3d:e6:1c:82:4d:57:
38:77:ed:b1:26:ca:3f:87:ad:2b:5a:00:f0:84:d1:5a:8d:4d:
62:51:cc:62:70:24:ca:d3:5e:b2:87:c9:fb:54:07:45:12:31:
52:ec:80:4b:8b:ce:ed:43:c3:36:df:14:22:b4:22:54:b8:ca:
f2:58:10:85:80:ab:d6:b2:67:7f:a0:a4:7e:c7:67:6a:28:66:
66:fe:55:f5:20:c2:5a:ef:e7:b1:9e:93:b2:ea:cd:a1:a4:33:
9c:b0:d8:dc:af:b8:7c:93:59:f2:b9:fa:ed:3d:86:56:29:04:
59:5a:36:08:83:ef:59:3a:37:46:8e:20:0b:14:8f:c5:f3:e9:
10:da:68:7b:4d:e7:08:04:c4:b3:fd:8c:9a:45:45:3e:49:e9:
e6:28:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:22 2026 by rpki-client