Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: 27VLY/QfQ2vnBHB2MTbQxM/9IqB4iPlU4wDxhNtK+j0=
Subject key identifier: 61:37:54:B1:A5:7C:01:5D:EC:FA:81:18:69:B4:38:C7:16:22:22:0A
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 019D2771EFBEA1886568C2FBC7FF10B057AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 1224
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: w0THANjGZGjkuZSfN5lL+I3eRM00nVqNe6+wJ1xV+yM=)
2: XKi2BlHneg8Maj6fOXu_OR3e41k.roa (hash: WCQe6/yJBNE4CdbDW2e1jgFjAOf+lrnuYR4ptmdnrnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ef:be:a1:88:65:68:c2:fb:c7:ff:10:b0:57:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=613754b1a57c015decfa811869b438c71622220a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:94:1e:30:59:5b:ed:64:ac:3b:80:cd:c4:ed:
f9:37:0c:46:28:e2:72:32:57:8a:e2:59:b7:0f:d0:
a3:43:5f:9e:2c:c8:bf:9d:87:e0:8a:7e:f2:1d:b2:
e3:d0:97:5b:db:78:be:21:d3:73:dc:25:61:3c:a6:
15:76:7f:42:2c:9d:85:ee:01:cf:11:d9:9e:64:78:
20:b2:e5:36:cb:d7:91:89:fe:9a:d8:9f:7b:ad:d4:
ed:13:f7:d8:d0:88:dc:bc:4c:1b:d9:27:76:f3:b7:
a0:0c:e5:16:2d:96:da:12:ba:29:c7:8f:3e:08:fd:
38:7d:72:ae:46:43:06:15:45:56:30:7d:b1:5f:2e:
b4:18:9b:2c:87:34:6b:9c:47:11:9b:64:77:41:7c:
da:83:d0:88:b0:b3:9f:74:fe:1e:7d:7f:c6:45:c5:
8f:a7:f9:4c:d5:ef:5b:99:f9:11:a5:23:ae:f1:e6:
75:f5:80:d3:6e:42:02:c8:27:3b:b8:5a:e7:3f:b8:
c4:f0:fb:c1:33:fb:0b:a6:8f:47:e1:bc:75:b1:5e:
78:77:c1:d1:df:41:02:93:c8:89:06:2f:40:13:b8:
91:dd:a7:5b:53:43:f4:05:af:f1:bf:1b:8d:4e:64:
cc:06:9d:c0:8c:b9:cb:cd:6a:17:4c:76:c9:08:ae:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:54:B1:A5:7C:01:5D:EC:FA:81:18:69:B4:38:C7:16:22:22:0A
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2a:c9:7d:50:cc:c4:96:19:6b:8a:d5:f8:27:85:d9:67:eb:
8b:dc:70:75:bb:96:eb:d3:04:bb:89:07:d4:31:b0:75:c9:ff:
8b:1a:8a:fc:37:59:77:0a:0e:fe:ec:74:d8:89:10:28:2f:66:
05:5d:e0:01:27:1c:51:4f:03:ec:58:04:8f:78:5a:51:b8:c8:
c5:59:f0:a2:3f:ba:22:9c:7a:ba:31:c8:89:43:57:e6:78:e7:
82:98:39:86:9b:25:b0:7b:99:0a:57:d9:18:c9:33:95:f3:19:
83:8f:49:1d:36:54:18:00:e3:8a:86:16:80:cf:7e:0c:93:5e:
c1:30:09:a9:82:ce:6a:e0:ad:ba:9c:38:43:29:02:4c:2b:87:
0b:a4:f0:1d:3d:7c:05:e3:7a:de:10:a3:f1:07:b5:2b:08:d8:
b9:ab:9e:07:e3:11:a4:8b:ac:fa:d4:6e:20:e0:7e:b8:84:4b:
d7:81:26:13:40:d9:45:6e:f6:1f:0f:cb:be:fa:64:42:9d:33:
0b:7a:71:d1:c6:a8:d1:90:4e:e7:be:d8:ef:d4:1c:d7:7c:10:
aa:4d:32:50:8f:68:5c:92:67:c7:99:b4:1b:01:a6:ff:5a:ca:
d7:6c:45:fe:1e:2a:15:ec:21:8b:c8:2e:01:de:15:ff:0d:b5:
f1:46:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:03 2026 by rpki-client