Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: hSmaBJlIuGP34TlcTGyYrflevTKNexOpSZ395A4Ny14=
Subject key identifier: 0E:67:56:96:F2:6E:06:1A:17:9A:14:AD:8D:61:11:58:5E:E4:2D:52
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019D27048CB7394E6BC711DFB5414FAFDDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 53
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: jCbE3qMJKcGA7GZgKWGjKd6EI+KrLAd9GlX1CASMLJs=)
2: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8c:b7:39:4e:6b:c7:11:df:b5:41:4f:af:dd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=0e675696f26e061a179a14ad8d6111585ee42d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:7e:bf:51:78:7e:31:27:d1:24:aa:c3:d7:
98:e9:c4:af:2e:f3:d0:04:b8:f8:81:cd:db:d5:85:
6f:95:76:b4:a9:b3:77:dc:b9:53:54:2c:7c:6a:c4:
62:b8:4d:0d:cd:cb:7a:1f:3d:42:dd:e6:84:3d:23:
10:0d:8e:c1:18:0a:49:6d:12:1b:0a:88:08:a3:d4:
a3:d5:6d:43:e8:06:b1:a2:33:45:99:6a:e4:8d:c8:
d8:88:a2:61:d8:05:fc:93:65:20:d6:b4:e0:b3:2d:
15:21:d1:32:3b:c2:3d:84:66:e1:e2:86:b7:b1:ac:
8a:da:0a:b6:a9:4d:24:85:51:80:0b:4b:c4:e2:08:
1d:82:c3:fc:48:73:03:ad:f5:eb:06:d9:60:7d:03:
67:7c:4c:56:39:62:fe:36:49:18:b9:67:65:50:94:
3c:3d:aa:c2:58:f0:61:a9:48:52:4f:71:23:90:b1:
55:dc:61:ae:55:ef:8a:37:e0:87:cd:60:81:b2:0c:
b1:96:0b:9c:f0:dc:e1:c5:29:10:19:51:3f:cb:a6:
e7:07:89:6c:b3:20:13:a2:e3:fb:bc:6a:75:61:c3:
8e:1d:e0:3a:12:d6:a0:86:bf:17:cb:6b:72:10:e3:
fb:66:f5:6d:c4:b6:00:ee:fd:a9:05:22:0b:1e:8d:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:56:96:F2:6E:06:1A:17:9A:14:AD:8D:61:11:58:5E:E4:2D:52
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:16:ae:6b:5a:4b:21:0e:b0:17:0e:21:c9:b8:63:86:e0:
63:d2:90:a3:21:a0:4c:98:12:71:57:26:a4:f7:e3:74:5d:6e:
72:86:d4:ee:f8:56:29:92:86:d5:37:c0:13:b6:ce:4a:d8:18:
82:7b:11:2a:5f:a8:4e:61:d9:18:d1:84:07:77:67:e2:fd:eb:
50:0a:d0:cd:2b:20:7b:27:0e:dc:c1:5f:f7:d3:cb:09:82:3b:
a4:33:95:c7:8f:a5:be:51:07:08:17:c4:85:9e:2f:3f:a2:cb:
6c:69:eb:38:cc:7e:13:28:b6:a6:b2:95:d5:db:1d:6a:25:2e:
4b:6d:a3:c0:67:fe:7a:7a:c5:c5:bd:b6:eb:d2:a0:82:44:24:
c2:51:b6:d6:67:2c:c3:62:6b:1b:e7:a4:e4:e6:31:61:7e:cc:
81:f7:d5:52:ff:18:2b:da:df:b6:a8:fb:66:27:e5:e6:d3:eb:
c9:80:7f:83:76:c2:02:c8:8a:c4:fa:4e:2e:07:71:24:91:b2:
7c:47:4e:81:ff:b7:a4:31:2c:c9:1a:38:dc:39:ae:f2:85:e5:
68:ed:07:74:4b:d8:e9:04:f9:7c:86:2c:28:cc:d2:dd:1a:2f:
26:c0:00:8d:ec:1d:7f:f5:9a:d8:b2:d9:22:08:16:5b:fd:be:
c8:13:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:20 2026 by rpki-client