
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: xQB1zI0Z5xOsy/LGS3El0nbqPkNFLcV+5mX55+VguQ0=
Subject key identifier: 51:ED:9C:58:70:20:A7:F9:BB:8D:19:4E:80:A2:28:E4:7C:8A:FD:C9
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019D25831AE553F75A6E6A5CF7F93A8B893B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0C4F
Signing time: Wed 25 Mar 2026 15:00:42 +0000
Manifest this update: Wed 25 Mar 2026 15:00:42 +0000
Manifest next update: Thu 26 Mar 2026 15:00:42 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: T3OpeG9PXqBnuJ2yZDjY5FLCGHY5aYT61PuLOTwCGhY=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1a:e5:53:f7:5a:6e:6a:5c:f7:f9:3a:8b:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Mar 25 15:00:42 2026 GMT
Not After : Mar 26 15:00:42 2026 GMT
Subject: CN=51ed9c587020a7f9bb8d194e80a228e47c8afdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:84:45:f1:d3:b0:fb:c7:9c:f9:60:a2:f6:
44:73:e6:5b:27:8a:bc:1f:05:cf:ae:b4:a2:3d:90:
5d:be:23:3c:51:87:12:06:83:e2:a4:ba:08:4a:23:
e0:c1:cb:e9:d0:dc:c2:55:13:5d:44:92:07:63:e6:
5b:9d:84:b5:07:2c:d8:5e:30:2d:62:1f:d2:4d:ed:
a2:61:43:20:94:0c:27:85:3d:f4:2d:ae:a3:34:95:
9b:cd:02:2a:a1:57:43:59:98:73:74:8b:6c:5c:17:
2e:29:5b:17:d5:25:b0:46:6a:b5:72:36:55:58:36:
85:d8:76:2a:fb:4e:f1:19:19:56:73:ab:6d:b2:e4:
6b:2d:cc:27:10:a9:d9:98:22:ce:6b:75:0e:77:09:
48:43:a8:98:d3:ed:a6:15:a6:3d:34:1f:a8:63:c5:
35:28:e0:b6:92:4b:ab:d8:16:d3:82:1d:71:0a:04:
83:26:81:76:4c:5f:56:f6:c3:38:9a:50:4b:7a:fa:
4a:58:4e:ca:61:05:e6:cf:6a:38:d5:5b:d4:b4:11:
3b:29:a9:cd:f4:35:7f:38:2b:60:8c:96:3b:71:23:
5f:55:fb:13:14:80:76:c1:c0:d0:71:0a:74:30:61:
1f:53:4e:63:aa:00:dc:25:83:ca:fc:64:1a:fb:d7:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:9C:58:70:20:A7:F9:BB:8D:19:4E:80:A2:28:E4:7C:8A:FD:C9
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e2:f8:e9:87:03:4c:e9:2d:f0:42:c9:19:a0:e3:9a:26:eb:
26:a9:1e:20:83:25:ca:37:bf:ea:3a:34:d2:e9:74:a7:fd:b0:
09:fb:3e:75:55:10:15:fc:dd:bf:af:15:f8:be:b4:ef:e3:f1:
0b:e0:fd:11:7e:1a:5c:18:ef:29:b3:3f:62:61:c3:21:03:7d:
b2:8e:4d:6b:1d:38:c7:ef:32:33:f4:6d:97:4a:56:79:f9:97:
0e:22:87:c9:a7:5c:1e:fc:55:63:12:86:77:6b:cf:59:10:ab:
6a:cb:ad:6d:bf:95:df:6b:63:a3:e2:de:fb:d5:2e:f4:38:54:
6d:d5:df:72:3f:90:b5:f0:5d:a5:4c:1a:0f:89:a4:b1:40:5c:
91:3c:5f:fa:1a:62:f0:69:bd:ca:aa:75:cd:f6:5d:99:e5:2f:
bf:3c:d4:50:24:b1:9d:1e:77:40:93:4b:c2:b8:51:66:a3:ee:
a9:2b:65:0f:47:bf:b9:54:d7:5e:af:01:37:4f:c2:31:8f:65:
04:4c:05:c9:4f:28:28:8c:2f:59:a2:da:d6:8a:d9:b1:19:59:
7b:09:9b:68:71:6e:37:9c:9c:36:5c:5f:54:eb:1d:36:be:c3:
e5:c3:00:45:6b:7e:9a:dc:07:ce:69:5e:89:0f:e3:de:f7:cc:
2d:db:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:31 2026 by rpki-client