Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: etQl734rzouq5TC01g6PLtxoqVCM3RafXz8q0sZ2iTs=
Subject key identifier: 14:AE:E8:6D:55:36:3A:B5:76:07:DD:F6:F2:E9:DB:91:5C:CB:65:EF
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019D28168FE8F5217A4216B121C88434F293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 0BAF
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 1QeTNjG1Dfkc8SWoA6hDqdCoE0M.roa (hash: TI7MVpkcT7thY/M8gEUna2Z6lXeVC6lOhkda9yw/ECs=)
2: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: 03XYE8jiVSelWTwlxhr1MopvNX4qxhE6jxZu7S5PYR8=)
3: 83i8inPN8cioUOUV0odmLvsgRjA.roa (hash: /ygI+B5yyCZ19+mmbGd9eyqCRVHl3RDiVcE9AZL8+EA=)
4: TuF1yyTgBJhW6oC5dwAW2GS084g.roa (hash: TcfD3AosMJkeleoYgBuUrwlWZpCWe+Rbnmh9egzYaWg=)
5: YvgUW8vlSYoSqJhA7O3nbFd0bJY.roa (hash: N4hhBNBcikInb4tPmaHKeGL864VkY1qTbkfnFOK42Zo=)
6: _PXhlZCjQvwPQ3-H5--9ECU2Un8.roa (hash: +OxXVp7CCvXwGvmdylv8hYCUGBTiCJtYUdC1nBHjCGU=)
7: fTPd9h70qbE4IDomqVhRl5Z6tXY.roa (hash: kJtRZt0jq1rkxlKv4aSYJNr1yYR0AREk7KSe3ox5v1s=)
8: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8f:e8:f5:21:7a:42:16:b1:21:c8:84:34:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=14aee86d55363ab57607ddf6f2e9db915ccb65ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:d3:46:fa:8f:a6:b1:77:29:9f:9b:e6:e0:
58:a5:89:a6:5c:77:0c:9c:75:c0:f3:fc:22:7b:31:
a9:6c:b6:3c:73:65:b5:63:65:84:96:34:ed:85:2a:
d5:4b:95:76:62:83:dc:d6:7d:8b:00:5a:cb:b9:20:
9b:4c:15:99:0e:b2:4f:30:fe:36:5c:1c:88:68:be:
d6:0c:88:1a:b5:e7:2f:74:66:dd:5d:82:fd:db:d3:
e2:c1:90:58:e9:0d:42:be:cb:52:be:fb:29:95:7a:
7b:b8:73:ba:73:02:5c:39:b5:d4:35:4b:47:ac:ea:
23:53:d8:4c:57:13:73:16:01:8e:ac:28:b0:fd:21:
54:23:a2:9c:fa:c2:51:aa:5b:5a:95:45:1f:e4:24:
90:1e:e6:28:c4:32:49:bc:ee:79:c2:7e:06:3f:3b:
48:0d:e0:af:67:a2:6b:0c:de:f2:43:a1:26:64:98:
5c:2b:06:08:24:80:dc:28:8e:5b:f8:fe:06:0c:8d:
be:8a:e0:9c:f6:ac:b7:a3:2f:a3:b6:0c:38:ed:96:
ce:f7:6c:67:1b:b7:c3:24:d4:48:6a:a9:c4:67:f9:
f0:18:2e:25:71:66:d6:e9:e6:0d:fd:95:45:9e:26:
2c:a4:b2:d5:b4:f8:e8:d9:1d:aa:78:01:0b:92:32:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:E8:6D:55:36:3A:B5:76:07:DD:F6:F2:E9:DB:91:5C:CB:65:EF
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:20:0b:be:44:e2:63:3d:5b:92:0f:36:d2:cf:4c:2b:cd:
b3:40:6a:64:20:93:14:f0:a6:00:66:7e:7c:7b:1d:1f:20:18:
ad:e4:25:40:5a:c7:97:f2:0a:9c:8d:ec:66:57:57:bf:af:96:
9c:11:14:89:68:67:05:55:c2:e6:e2:41:a1:2f:75:49:6e:84:
49:b3:32:1f:85:40:13:5a:62:5a:e6:3a:2b:54:d7:60:a9:01:
d1:ae:67:d4:2e:f4:70:f6:4f:cc:aa:3e:57:63:98:33:a0:2c:
58:eb:8c:23:ac:43:14:42:3d:3f:ab:76:39:b5:39:82:2e:dd:
37:91:43:18:6d:00:26:01:a1:9b:1d:63:7b:3a:8f:e5:7d:88:
6a:57:a7:06:2a:ba:64:51:fe:25:ee:4b:78:1a:3c:20:58:4c:
5b:1c:06:eb:0a:97:75:7e:ed:ef:9a:72:a9:95:03:e3:5e:08:
f4:7d:9d:59:09:e5:0f:d9:1c:bc:70:3c:39:3d:2c:f7:bf:a2:
7b:07:eb:23:d5:07:87:41:8c:36:6d:46:b6:84:1d:d9:2b:69:
7a:b2:11:91:f0:36:4a:24:02:4b:3d:e4:af:8f:ea:93:c4:e1:
86:f4:19:97:37:9f:87:86:ee:51:69:64:80:1d:18:fb:67:68:
ca:b3:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:35 2026 by rpki-client