Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: vPeFobrvQiqdU98CEueF/MAhFe2z/llX4Wx78Z6l8Rw=
Subject key identifier: FF:AB:0D:2B:D6:8E:B0:2B:1A:8B:13:11:77:C1:71:9E:78:53:23:C9
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019D2816E7227399E578B5E65394E9508696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0C0A
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: kX9SfESP5D6bYnkuqlV2eXWwJ3csY/Q+iIiFBvaQqnE=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e7:22:73:99:e5:78:b5:e6:53:94:e9:50:86:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=ffab0d2bd68eb02b1a8b131177c1719e785323c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:1a:67:b1:75:8b:ab:d6:68:0a:25:87:2d:
a4:b9:b0:42:0c:7d:12:e6:56:b8:74:5f:05:36:a2:
85:b1:e9:f7:0c:31:61:f2:0b:e7:75:c3:04:65:56:
ea:20:3a:20:92:99:f1:62:36:37:f6:e3:02:0e:d6:
c4:f0:1c:58:f2:bd:9d:e4:f9:e3:e1:95:29:2a:c2:
f0:46:f8:d8:01:91:39:2c:9e:75:92:aa:93:a8:e5:
37:1c:18:8d:e1:45:6c:3a:b2:9b:31:57:a9:aa:49:
5a:a8:c7:6f:50:7a:85:39:64:2c:b5:e8:a4:99:b0:
17:95:77:ee:45:29:e1:60:41:d1:eb:fe:5f:1a:de:
a7:fa:8a:c1:b4:f8:b9:30:0d:7f:de:3d:6e:80:7a:
38:8f:83:86:50:64:b0:21:5c:f3:c2:c3:d3:52:00:
bb:22:81:ae:de:62:20:66:ae:30:7e:c9:d1:09:ba:
5b:6b:ee:b6:59:6e:fc:c4:84:4c:86:0b:ab:78:d7:
a8:b5:e9:62:f5:17:dc:7f:2c:4b:ab:42:ac:af:8a:
fb:2d:5c:fa:3a:10:4d:5a:b6:d4:53:85:87:b7:67:
ae:00:66:f9:da:09:47:0a:9a:8f:84:1a:9d:89:67:
04:4b:fd:77:4a:eb:13:1a:f7:d0:a3:4f:11:90:a5:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:0D:2B:D6:8E:B0:2B:1A:8B:13:11:77:C1:71:9E:78:53:23:C9
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b2:48:e6:df:3c:7f:ea:89:21:fd:30:86:f7:39:4b:92:cf:
10:be:97:49:70:77:c2:02:4d:3d:88:65:3d:dc:34:e2:d5:35:
01:2a:45:40:6b:ca:34:da:35:05:a8:cf:20:19:de:f6:e4:1b:
21:27:23:4e:7d:93:fe:c4:6e:be:bb:81:2a:e0:6a:c9:48:be:
7a:f2:01:2e:10:26:89:f1:f8:58:62:b9:0f:11:bb:3d:c1:8e:
d0:1f:b0:ca:3f:a3:1a:59:af:b7:e5:f7:4d:ab:4d:2d:d1:85:
15:72:db:7a:99:ef:33:b6:be:2a:e0:02:3b:fe:ea:19:63:18:
2b:da:49:f4:ea:6d:08:1f:91:ba:52:bd:23:33:47:8e:09:98:
12:7e:d0:e0:99:ca:2b:64:cf:9f:d5:8f:f2:48:bf:ff:5c:16:
1b:b4:8d:14:02:9a:aa:3e:14:9d:53:cb:33:55:4a:59:6e:a0:
20:66:35:5e:79:22:a4:97:c4:9d:d0:aa:cf:57:c7:a6:ff:b2:
84:1c:68:79:34:3b:ae:ae:8c:98:de:07:0b:47:a0:df:2f:a8:
84:08:58:db:85:b3:33:a7:63:92:d7:28:61:8f:f1:06:bf:60:
92:43:c8:34:a2:f1:b0:16:30:82:da:e7:4b:50:4f:a9:ef:a1:
e2:01:5f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:59 2026 by rpki-client