Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: JAbOhZhuqRhiL6Yllpwvsxv4A4vfmGMDxEhXyyVh2yQ=
Subject key identifier: 56:17:FE:6E:1D:1F:47:79:CA:4E:F4:FB:32:B8:C3:62:31:B7:D3:2B
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019D284D491A04D96E4F1EAFD895E7499880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:00:46 +0000
Manifest this update: Thu 26 Mar 2026 04:00:46 +0000
Manifest next update: Fri 27 Mar 2026 04:00:46 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: 2tcL7jA0sYniPXfnTkynamMOfv4bTe2pkExDT2CVjYU=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:49:1a:04:d9:6e:4f:1e:af:d8:95:e7:49:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Mar 26 04:00:46 2026 GMT
Not After : Mar 27 04:00:46 2026 GMT
Subject: CN=5617fe6e1d1f4779ca4ef4fb32b8c36231b7d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:5c:c0:01:f1:5f:15:aa:03:24:ff:db:f2:
49:f7:8f:f7:80:11:70:a1:32:6a:0b:3d:e9:ec:b8:
b3:72:c1:43:26:2c:51:aa:ff:50:61:d0:b6:ca:6d:
b2:d5:91:14:4d:86:a4:07:05:ae:74:9c:ad:be:fa:
8f:67:e8:e7:6e:14:f6:a7:94:f4:a8:ef:b1:b7:db:
b8:72:7f:45:d2:a5:74:1e:6d:93:79:0d:14:3b:69:
a7:cc:29:4e:f0:31:72:e8:17:a5:65:fb:23:64:45:
40:dd:4e:0a:63:ef:4a:c4:8d:1b:1a:41:5a:4c:65:
3e:53:c9:e6:db:5d:50:e1:e8:08:24:04:85:ee:17:
35:d0:2a:90:e8:b8:4e:1f:fb:3d:a5:3d:97:bc:6c:
a8:7d:52:e1:39:b6:a2:45:5e:29:7b:6a:63:83:8a:
ad:f5:e3:de:24:c2:23:5c:94:fe:dd:ff:bd:45:1c:
3d:dc:8f:b0:21:24:39:f8:a2:3a:7d:6d:1e:a3:6f:
aa:f4:f3:db:1a:3c:41:83:5c:4b:f1:c4:b5:7f:0a:
2b:bf:11:3b:04:8a:a8:10:86:b0:b5:78:2a:86:d1:
3b:2b:ad:9a:ee:6a:f1:38:3d:7a:25:76:9a:85:c2:
19:fa:ba:a6:c7:95:22:b1:98:48:04:72:31:ee:14:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:FE:6E:1D:1F:47:79:CA:4E:F4:FB:32:B8:C3:62:31:B7:D3:2B
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:08:88:36:51:e0:e8:ab:c4:54:d5:5f:2d:83:3f:17:8e:
d8:7d:4b:ff:4f:5f:c2:e8:f2:2d:6c:69:62:92:bf:bc:33:2d:
0c:ea:b8:8d:f0:e4:a9:cc:44:b2:07:7b:5c:e4:41:4c:54:72:
6a:00:f8:56:bd:bb:23:13:fd:34:60:cd:29:1c:72:a1:41:8f:
69:a5:99:37:9f:77:de:53:7c:99:26:5a:7f:2a:bf:90:2d:b8:
60:d5:91:87:f8:24:7f:a2:ae:e7:cf:23:c5:e9:68:23:6e:18:
2a:42:47:75:a9:66:a8:24:20:87:8c:41:1d:dd:17:a2:14:5a:
0c:9b:70:23:18:d4:06:20:28:c7:c1:e4:be:7f:67:7d:fb:ff:
51:a3:0b:f0:de:3b:99:e0:4e:b6:c4:ae:8a:f2:93:ce:9f:ef:
07:d0:5e:66:54:91:10:d0:df:06:bb:b3:bc:b7:50:79:13:09:
2e:6e:71:6e:08:61:8f:71:dd:e2:6a:95:51:2a:81:a7:34:dc:
63:0b:96:09:db:d7:66:8e:56:79:53:5f:71:0b:bd:68:fd:4b:
cc:83:00:54:57:6a:d1:14:27:d3:57:7c:b4:aa:99:03:4f:0e:
c3:26:67:69:a4:1b:26:26:d5:0f:b4:4b:00:93:13:1e:6b:cf:
f4:21:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:24 2026 by rpki-client