Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: hAeY/OEXCSXYft7TpMA58Uso42AC4fQD9cVamFr4eg4=
Subject key identifier: A9:20:2A:03:F8:6D:D1:F3:B8:5A:1D:1C:22:AB:E6:AE:FF:D7:DC:73
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019D296134848FCAA050F147F7C77315FE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 1503
Signing time: Thu 26 Mar 2026 09:02:09 +0000
Manifest this update: Thu 26 Mar 2026 09:02:09 +0000
Manifest next update: Fri 27 Mar 2026 09:02:09 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: CAGbgbk7JQj51e/HFiNyHm10LwNPYszFMM1ixzLOPXM=)
2: B858kg8THjaSoEIim6530sspUXs.roa (hash: HCD5tBX+9y/cDnZBRIi513FjVWEfPLJ8ux8RH4V8Dpk=)
3: GRivXpYp4CuhiN76JDUjX3oocvQ.roa (hash: INwnsmHYjS772AhOCOKo1mO3+hjHZod9QoImR0vqNKc=)
4: PCyrz_7gQySJ-l_QlnLaYZdnukM.roa (hash: 8qLUqfkbCxjZKisO86t69Q/KwJjfGVGdDtnDpf4H3cE=)
5: dOKAlcT195hvrnl94GECXypnUw4.roa (hash: uCgRu9pSvcyUSoOdBM4Z/JT81zNcZoR+ge8afkxI5PA=)
6: kuAZ8COOrRF7D7fGL9v85feX7sY.roa (hash: MeqT2suPhasDZh73lRt2kV/r/fxAtR5VksxEngVFI8Q=)
7: x8_4aac4Nz-MFK0_jVyanCY1Njs.roa (hash: W//4mpSYdJPZzB2svcIDaGv0bAnhUuw6rNgGJNlJgIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:34:84:8f:ca:a0:50:f1:47:f7:c7:73:15:fe:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Mar 26 09:02:09 2026 GMT
Not After : Mar 27 09:02:09 2026 GMT
Subject: CN=a9202a03f86dd1f3b85a1d1c22abe6aeffd7dc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:d4:43:27:6d:86:ce:9e:f3:f4:5e:29:28:
be:2a:18:4a:09:70:1d:1f:e9:e5:83:4f:57:be:7b:
1e:98:1e:3a:15:57:08:3d:d9:37:5f:c5:bd:3f:60:
b3:4b:24:96:23:fc:18:e9:c6:2a:93:1b:6c:1a:33:
9f:da:a3:f3:f0:7e:c9:dd:a9:ed:ae:dc:1b:d1:de:
a0:68:a6:00:92:24:b5:52:25:93:1a:a9:0e:2d:9d:
36:44:e5:d8:4c:ba:75:20:1e:cb:ce:3c:fc:b7:c4:
d3:fd:60:0b:59:f4:38:7e:73:66:f5:4e:6d:27:7f:
07:01:17:b4:b0:e0:2f:0f:40:e8:13:fd:87:41:2e:
c7:10:7d:ff:84:63:19:6d:2d:69:4c:2b:29:80:71:
00:49:80:91:af:7d:5c:37:cf:54:69:1f:f6:59:a6:
b0:db:e6:b1:22:05:30:64:ac:6f:53:7e:a6:19:dd:
f7:8e:27:0d:a9:fe:2b:c0:9a:82:9d:32:6d:4e:78:
09:aa:05:38:b5:ac:21:b2:29:af:a2:3f:90:6e:ec:
83:51:94:63:99:67:bc:f0:a7:2b:4a:d8:3b:ba:64:
76:b3:85:be:f2:b4:d3:e5:84:75:82:87:a2:53:af:
b0:e8:61:92:94:51:69:2c:6f:e3:2a:d5:6d:6d:f5:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:2A:03:F8:6D:D1:F3:B8:5A:1D:1C:22:AB:E6:AE:FF:D7:DC:73
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d2:9e:90:b1:30:77:c2:0a:68:ff:1e:21:ca:86:c3:18:f5:
ed:e0:18:de:3e:8c:98:01:0f:09:c9:61:4b:a3:93:eb:2e:05:
31:30:a9:1c:06:2e:39:b8:9e:f9:92:31:9c:c6:dd:95:b0:b3:
4b:a5:f9:ab:5b:34:26:46:7f:3e:de:b3:a9:8e:06:dd:f7:37:
51:3d:d6:ab:1d:23:35:81:30:8b:02:8c:8a:97:45:10:a0:97:
a7:4c:19:cd:71:01:e1:91:8f:7d:90:e0:b9:66:43:81:2e:f3:
fb:d9:bb:27:20:04:1f:ed:d1:ea:7a:f1:a0:2c:91:99:4c:b7:
f9:61:3b:6c:f8:a5:37:94:f6:13:e7:73:98:b6:0d:be:53:33:
19:d4:26:d1:14:bc:7c:56:e6:d5:97:1a:26:b0:20:9e:08:bf:
35:5c:7d:f9:51:cb:3d:b6:50:dc:44:b7:76:bc:44:16:31:94:
55:4b:61:14:1e:2f:3d:4e:79:d1:d2:34:72:9e:f1:66:9d:46:
f6:31:1f:c7:64:e2:b2:b6:93:19:ee:22:53:d5:f2:09:92:ad:
d4:1e:60:75:56:f5:1b:b5:3e:4b:42:4c:7a:77:f8:33:c6:39:
04:b7:74:20:ce:ab:82:86:25:b9:6d:d9:a6:cc:fa:32:86:67:
d8:3c:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:26 2026 by rpki-client