Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: kk6DGDvbwOinA6b2400HtDA4gf+iTms2yLXIkQsvKJc=
Subject key identifier: F4:15:BB:1A:35:0B:CD:15:3F:CA:19:88:93:00:92:E6:4B:72:D3:A2
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 019D2997A0FAC263EA2C544BB66D42A99DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 1201
Signing time: Thu 26 Mar 2026 10:01:36 +0000
Manifest this update: Thu 26 Mar 2026 10:01:36 +0000
Manifest next update: Fri 27 Mar 2026 10:01:36 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: F1Sn0EKuZvsHvaNFsT/WqmdUpHg0B4P3UD0CFbo9L8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a0:fa:c2:63:ea:2c:54:4b:b6:6d:42:a9:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Mar 26 10:01:36 2026 GMT
Not After : Mar 27 10:01:36 2026 GMT
Subject: CN=f415bb1a350bcd153fca1988930092e64b72d3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:fb:ba:da:da:8b:17:48:d8:be:ab:ee:a5:
75:36:53:e9:36:6c:54:b2:b5:c2:a1:3d:6c:0f:95:
c3:d7:b6:a1:17:29:70:38:f5:64:71:39:3e:3f:32:
e3:ae:33:9f:f4:34:26:af:bf:45:7d:c5:ee:e0:f7:
41:b6:2a:9a:68:dd:1e:de:12:17:00:b1:b4:99:92:
ca:46:b2:ad:67:e5:33:1c:e8:8f:fb:9f:00:1d:d5:
d7:95:76:7f:5e:92:a3:1c:3c:f0:72:04:df:98:1b:
38:c8:bf:65:6d:0e:44:9d:ae:f2:b8:89:b0:ff:bf:
59:50:7c:97:a3:40:85:bf:9e:15:3e:94:ae:da:ec:
5f:26:cc:f7:ae:49:8c:30:81:8a:9d:bd:67:33:40:
2f:65:45:45:50:e9:6d:83:d7:e9:c3:73:a7:cf:f5:
96:03:12:09:03:6e:6c:95:07:3c:d0:12:17:8b:2e:
31:a2:8b:2d:36:52:f4:61:c8:e2:b9:ac:6a:73:2f:
59:92:bd:f5:19:66:2c:a9:e9:b6:1e:0f:55:0e:8b:
13:3a:b7:2d:00:a5:3f:ee:aa:3a:6f:32:fd:7d:6d:
e6:e3:4e:73:34:21:a2:60:24:64:3c:07:9a:48:5d:
5d:9f:0d:10:4c:da:a0:ee:3b:13:6b:67:3a:94:d2:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:15:BB:1A:35:0B:CD:15:3F:CA:19:88:93:00:92:E6:4B:72:D3:A2
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:3c:d6:d4:f6:51:d4:68:e3:6a:83:3e:6d:72:00:99:89:
ae:4a:8c:f7:85:79:1e:b4:5f:5b:99:c2:1d:68:f1:d7:7e:62:
4c:e5:ca:90:41:47:b8:1a:80:b2:82:bd:e3:34:04:84:2d:1f:
aa:7d:c5:74:ac:75:35:0b:f4:e4:ee:03:e3:63:be:6d:09:28:
60:cd:45:03:09:a6:3a:c9:0d:23:16:58:9a:2e:ad:1b:81:01:
4d:04:7d:9d:1a:94:30:6b:54:a7:84:14:60:00:9d:2d:22:8b:
6b:35:00:6d:76:f5:7a:ef:06:57:75:7f:2e:81:50:bd:89:45:
98:b0:31:66:a1:f0:c7:b8:18:93:53:d3:c2:53:a0:33:62:bf:
c3:59:04:0e:3c:94:23:0e:fc:e3:9a:19:4e:d5:63:fd:54:25:
d4:58:9a:3f:7a:fd:28:3a:f0:60:66:14:00:fd:a2:6d:b0:35:
93:b9:bc:0f:c1:dc:a2:aa:3a:13:a7:67:9a:3e:94:d1:82:ba:
db:36:c3:1b:c9:a8:6e:a0:3c:29:13:f6:d1:05:f5:c6:07:17:
d9:42:f7:66:c1:54:a7:fc:a1:09:8a:91:2f:10:9a:a7:ef:b6:
89:97:3a:27:93:72:b9:19:88:23:8b:89:71:61:05:a3:14:1b:
a3:82:14:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:38 2026 by rpki-client