Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: xkCmP7HKPL/Jbc/bqGMlHmIdrHKh4M+fTqK+BVrcAsc=
Subject key identifier: 63:54:61:69:D6:73:10:5E:73:92:B4:B4:E5:80:4F:1E:14:E0:43:D7
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019D27E082C76EA77A84338E919F047EA541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 09E6
Signing time: Thu 26 Mar 2026 02:01:57 +0000
Manifest this update: Thu 26 Mar 2026 02:01:57 +0000
Manifest next update: Fri 27 Mar 2026 02:01:57 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: PYo/pMyXi1rlhYTGj5LyiPFtGxVElaUBBz4y/QoH0gM=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:82:c7:6e:a7:7a:84:33:8e:91:9f:04:7e:a5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Mar 26 02:01:57 2026 GMT
Not After : Mar 27 02:01:57 2026 GMT
Subject: CN=63546169d673105e7392b4b4e5804f1e14e043d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:2b:ea:67:74:62:1b:ed:d4:80:ce:76:51:
53:fc:ce:fe:22:66:72:8b:90:8b:db:76:86:86:97:
e8:65:fd:07:87:8a:51:1e:f2:1a:0a:8c:11:c6:3e:
6e:43:55:21:5f:ac:a5:f4:6e:05:7f:cc:8f:b2:ed:
69:9b:12:02:79:f1:93:d5:f2:9b:db:0e:84:89:97:
a0:d7:c3:5b:88:4e:87:d5:56:6c:34:47:a5:5a:a3:
40:6c:e3:93:c9:56:d9:63:ed:3e:f8:3e:7a:46:1f:
58:aa:54:04:7b:26:f9:1f:e6:7f:c8:31:d8:90:4b:
88:73:e5:1a:dc:3e:59:c2:7b:21:cd:98:0c:bd:e0:
c5:3e:32:12:68:20:4d:3b:b5:92:9a:3e:80:5c:1f:
c7:50:82:07:63:b0:94:c5:73:ec:33:1c:d5:ee:77:
ea:4b:ba:ef:1f:53:ca:ce:bb:68:c0:9b:c1:95:eb:
16:cb:90:12:b0:a5:92:95:7d:67:6c:17:63:4e:7f:
24:22:a6:08:90:5d:ed:e2:e6:9b:ae:98:48:67:8b:
40:f5:5e:b5:4f:f3:2e:11:b9:11:43:9a:67:f1:c3:
0a:a8:b1:c0:64:b4:72:87:ac:88:bc:5e:15:c2:44:
f0:01:4e:ad:a4:ce:18:43:4b:d0:7b:e8:2b:ed:4a:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:61:69:D6:73:10:5E:73:92:B4:B4:E5:80:4F:1E:14:E0:43:D7
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2b:c6:c2:22:62:5d:81:4c:1e:38:8b:d8:44:78:78:de:9a:
20:66:c9:52:2a:95:81:a8:b6:92:fe:87:56:9d:fd:3c:ab:2c:
db:03:27:3d:22:3e:7c:95:13:40:33:cc:9e:e6:f9:6f:a8:c5:
9f:f7:a0:21:0d:ad:e5:d9:43:af:55:59:62:f9:ec:24:05:21:
1d:f6:e5:d7:ea:1d:be:f5:ef:f3:42:ee:d9:f1:03:85:64:ed:
fd:5f:0d:28:94:b4:0b:db:00:e2:64:33:55:45:f8:ef:06:b5:
e2:ac:7b:14:d5:ac:14:b9:f1:e6:86:eb:4a:95:b9:a2:28:96:
65:f6:37:01:9f:47:ce:7c:e5:f0:26:52:ae:ca:d2:18:49:29:
7c:47:4e:8e:6a:4b:f5:7a:e9:db:c8:c7:09:3c:e7:ba:93:09:
70:88:87:d2:af:b0:3e:9a:c3:9f:fe:11:84:2b:d4:68:90:87:
86:8d:f8:dd:98:85:26:ac:56:c4:13:1f:aa:05:19:c3:ec:71:
03:4e:4f:c1:5d:76:4e:88:d3:68:a3:54:e2:65:b9:b7:e5:07:
30:ed:5e:ca:2c:22:5c:cd:da:12:a2:97:c1:3c:e2:e4:33:b8:
b9:c4:d6:e0:a9:36:ff:1a:0d:02:23:c0:2d:df:e7:6b:f0:1a:
1e:90:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:34 2026 by rpki-client