Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: +vg3qgAImfr/dU9eSS2HZXQDF6SyvOzbJyHUBc3AHBk=
Subject key identifier: F2:6B:98:A5:B9:51:48:D9:64:EB:9B:3F:53:42:5B:7C:65:7E:9B:7D
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 019D258348E43971AA014FDF9D79E4684DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 046A
Signing time: Wed 25 Mar 2026 15:00:54 +0000
Manifest this update: Wed 25 Mar 2026 15:00:54 +0000
Manifest next update: Thu 26 Mar 2026 15:00:54 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: TPhruEWCMq444FHT2Z5RnMa4meWjPC4le0oAOqJgh+0=)
2: oPgMAi_-EmiOlppJM0s65xmeflo.roa (hash: AY2dJHoY3JrtcePk6obcHFCfyE5blcFF6JMAQBSwLWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:48:e4:39:71:aa:01:4f:df:9d:79:e4:68:4d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Mar 25 15:00:54 2026 GMT
Not After : Mar 26 15:00:54 2026 GMT
Subject: CN=f26b98a5b95148d964eb9b3f53425b7c657e9b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:df:71:ee:a7:98:c1:28:f1:18:c9:80:8b:
b7:1e:31:49:e7:cf:e5:53:97:ce:8c:57:3e:32:70:
96:55:ae:cc:84:96:e2:8d:5d:82:d8:bb:c9:3d:cb:
98:07:dd:33:dc:c7:d2:d3:fd:14:8b:49:51:0a:88:
57:34:65:81:ef:69:85:2e:0e:1c:23:2d:3d:51:d4:
e2:9d:a9:bd:5d:ec:a8:09:c1:e7:f0:ec:97:e5:82:
be:ef:f6:31:8a:d7:1e:5f:60:13:60:a0:2e:bf:f7:
f3:02:92:55:27:d6:b0:63:35:0f:12:eb:3a:64:f1:
f1:71:75:a0:cf:54:07:49:1b:ac:d4:b0:5c:c1:26:
0f:12:0c:18:70:a8:b2:4b:4d:98:21:dc:9e:13:2d:
8b:76:cd:28:6c:45:51:a9:ba:7d:6d:af:60:16:ce:
b3:03:c7:f4:78:3b:1a:6a:52:3b:3e:2f:87:49:3e:
48:83:da:c2:16:32:a1:c9:d3:5e:7d:e7:1b:92:4a:
cc:d2:9e:3e:c4:b5:2d:c6:11:d0:c3:88:1d:54:06:
9d:f7:e0:9c:59:91:3b:8e:91:8f:6a:93:8b:9e:d7:
ed:a3:2f:79:a0:08:af:70:c7:1c:74:25:f7:f3:00:
d1:48:4a:d4:4a:4d:ee:eb:89:5c:2f:a1:b5:bd:57:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6B:98:A5:B9:51:48:D9:64:EB:9B:3F:53:42:5B:7C:65:7E:9B:7D
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2b:d9:ac:8c:16:0c:8e:5c:d6:32:0a:eb:0d:f9:66:12:d9:
58:4e:c6:a5:ab:9d:38:50:20:9d:dd:e2:3d:19:09:5b:fa:a4:
af:e5:5a:22:e7:0d:4d:c6:48:65:64:b6:18:08:da:cd:db:76:
da:c1:3e:11:a8:6e:bd:95:2d:3a:cd:44:d9:8a:d1:a2:67:ca:
e3:81:bd:f9:1b:ff:4f:03:d4:b7:ca:bf:e2:35:b7:df:f4:77:
9e:44:36:b3:59:a2:d0:8e:dd:d0:dd:25:d7:a1:30:db:94:73:
e3:d1:0f:82:ef:1b:10:2b:f9:c0:4f:c6:cf:bd:15:b3:66:94:
41:28:4e:26:19:e1:f6:62:bf:c8:78:21:3c:2b:29:26:7b:4c:
d5:a5:d4:03:f6:63:84:e0:44:da:1e:dd:7e:fc:f0:9c:13:09:
0e:6d:7d:54:3b:c2:75:a2:08:e5:fc:fd:2b:67:12:f5:d2:e5:
cb:7b:65:ed:3c:97:af:ea:0a:d2:59:90:0b:d7:e2:aa:2f:77:
5b:30:69:fb:fd:9a:d9:d9:a2:d0:94:d7:2e:2e:bc:33:3b:02:
00:c0:de:6a:ce:f0:6d:10:bf:a2:30:82:45:85:1a:92:dc:ed:
12:64:95:3f:0b:c4:14:ae:35:5c:9c:49:c3:c0:63:e2:df:de:
a9:5e:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:45 2026 by rpki-client