Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: LkTXu5cvgusvi0ye+moBq2Ft22WJ1YWa6UY8O0+N2xM=
Subject key identifier: B0:42:66:86:06:55:CB:50:C4:B2:43:AD:67:FC:C5:03:1E:CE:3B:69
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019D265EC828C8114BAD540C3DEF72C79B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 0A21
Signing time: Wed 25 Mar 2026 19:00:38 +0000
Manifest this update: Wed 25 Mar 2026 19:00:38 +0000
Manifest next update: Thu 26 Mar 2026 19:00:38 +0000
Files and hashes: 1: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: 5H7plk8QsYGCzoNPqBvJw3YY/36R6V84MhM0bSy7rIc=)
2: qi2McZp71fHBoWBI2ZHbtQCvE4o.roa (hash: i0mtBmOyDYgRrM3+GxWl4R2NJ84ChiPy81fprThNQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c8:28:c8:11:4b:ad:54:0c:3d:ef:72:c7:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Mar 25 19:00:38 2026 GMT
Not After : Mar 26 19:00:38 2026 GMT
Subject: CN=b04266860655cb50c4b243ad67fcc5031ece3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:97:7f:6f:c4:c5:2c:3f:a5:a2:a4:d2:99:
07:bd:9a:cd:af:97:2e:32:22:42:15:cb:c3:4a:25:
78:ed:75:ea:ad:6e:13:67:43:e5:19:e3:1f:c7:2f:
97:ff:62:29:c3:03:63:f0:92:54:90:bd:3b:f6:1e:
31:d9:22:23:d7:da:6d:0a:19:47:5a:28:64:db:98:
33:e9:21:a9:7a:cf:6c:57:c4:1d:e4:58:77:ec:4b:
b1:62:91:c9:37:b5:23:fb:53:a1:6a:73:0a:0b:a0:
48:bd:0b:ba:9b:ac:c4:f3:03:65:da:d8:e1:ee:39:
1b:1a:be:85:25:42:33:f9:48:fd:55:ca:20:92:5c:
16:9b:46:80:f8:77:e5:4f:fd:b9:6b:80:64:85:fe:
a8:32:f1:66:4d:8f:7e:f3:d8:7a:c1:0c:af:3f:d5:
a0:10:33:40:d6:73:75:24:3b:40:ac:09:66:a3:74:
4d:ea:4f:cd:28:89:c1:55:f3:af:15:5f:de:99:4b:
a5:4d:38:95:75:ed:cb:0f:79:bd:45:29:04:a8:42:
c1:33:17:41:9e:7a:71:e5:57:ed:bb:22:12:9b:98:
46:af:57:69:43:2d:43:75:e1:35:e2:71:74:d7:1a:
e2:10:f0:05:cd:39:8b:8b:62:f3:46:ca:34:fe:22:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:66:86:06:55:CB:50:C4:B2:43:AD:67:FC:C5:03:1E:CE:3B:69
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:81:82:d4:bc:35:c9:ef:ad:9c:07:f8:74:5a:a3:34:db:
99:72:98:df:7f:79:4c:f5:0e:24:86:c7:84:3b:2e:35:1d:ba:
2f:17:99:14:50:66:e9:77:a9:b4:3b:e4:e3:ee:ea:b0:62:08:
f7:b3:e4:95:c2:f0:0e:dd:87:0c:e7:32:67:aa:30:8f:34:b5:
7f:60:f3:55:00:1f:98:76:75:d7:e1:59:fd:a1:3f:12:3e:17:
4a:13:c4:f1:bc:ae:a7:6e:b9:28:c2:9a:60:09:a8:49:da:0f:
96:18:a6:a4:13:a3:23:65:3e:0d:cd:2d:4e:cd:cd:e3:a6:d6:
ca:d5:2b:c9:38:57:fa:f7:b9:4c:93:4b:b9:00:58:df:a2:85:
72:fd:50:ce:55:4c:31:c9:8a:73:ef:2d:a3:b8:6c:c6:51:d0:
f5:d0:17:10:63:e9:69:bd:b8:f8:08:2d:16:d6:bb:ab:c8:3a:
da:02:e4:ff:44:45:ec:66:de:28:f7:bc:38:90:82:6c:de:65:
86:0b:d8:20:fe:d9:4d:fa:b4:d4:96:52:9c:c7:f4:a6:67:97:
83:25:01:19:aa:a9:6b:2b:91:59:44:35:88:25:c3:0a:ef:b2:
e9:5c:78:1b:29:b7:d2:fc:46:51:6a:08:fe:eb:07:1c:1b:cf:
dc:9d:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:22 2026 by rpki-client