Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: TcovyqT7UqYNSqcLlbXIUPMiF1y0M8ICqRAmngIhk5w=
Subject key identifier: 3C:A5:F0:D4:6F:8E:25:BE:68:22:2C:42:CB:C3:AF:0D:CC:2A:EB:C4
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019D27E029754BEFD0EAA09059BD7A6D860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 02:01:35 +0000
Manifest this update: Thu 26 Mar 2026 02:01:35 +0000
Manifest next update: Fri 27 Mar 2026 02:01:35 +0000
Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 7tCpsMK/HdmzE2bPYQdDSh/5oUU8AOnStTWJizD11oY=)
3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
8: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
9: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:29:75:4b:ef:d0:ea:a0:90:59:bd:7a:6d:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Mar 26 02:01:35 2026 GMT
Not After : Mar 27 02:01:35 2026 GMT
Subject: CN=3ca5f0d46f8e25be68222c42cbc3af0dcc2aebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:ce:2d:03:ca:23:3b:c2:8a:9d:b9:9e:6d:
f3:88:b7:1a:d8:4c:d0:eb:db:40:c0:8c:4f:c4:4e:
d1:1f:d9:94:bb:fe:ab:48:13:5e:8a:f1:d3:cc:39:
cc:f3:d2:35:19:74:6a:c3:85:b6:3b:c0:e5:69:1d:
8a:4b:ca:5d:c2:88:cb:f9:f6:ac:05:07:16:4f:ca:
0a:71:15:2d:84:fd:da:c1:c2:6e:42:43:dc:08:72:
4e:f9:1a:2a:b8:93:18:b6:6d:3e:8c:23:63:63:38:
05:b3:8d:d2:71:22:9b:b9:3b:5f:0c:34:7f:63:b5:
d2:1e:0a:a4:04:ee:9e:b7:29:e0:1f:5d:99:52:63:
51:35:96:6f:61:22:a6:ec:02:48:21:c6:92:69:25:
65:42:99:4e:f3:9e:d9:b3:14:e5:2c:93:bd:0f:44:
7e:9c:7d:27:83:cd:a0:0b:13:e8:a8:2f:fa:f4:d5:
ad:a7:b0:0d:2b:89:f8:d1:e6:93:c9:f8:62:c8:d3:
d0:4c:f2:ea:7a:8b:64:a3:4f:0f:05:9f:0e:b6:29:
d0:b4:05:2e:f9:d5:cf:ae:2c:52:2a:0e:9f:0c:4b:
32:d4:d4:0b:e1:f9:a8:82:93:0a:91:a5:93:80:ae:
17:68:3b:e5:cf:3e:79:0d:b5:55:c5:ed:28:d6:1b:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:F0:D4:6F:8E:25:BE:68:22:2C:42:CB:C3:AF:0D:CC:2A:EB:C4
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:9b:19:11:db:a7:a2:7a:f3:47:5b:0c:5d:27:6f:2b:e4:
67:a0:48:45:dd:b0:43:88:42:1b:31:af:d4:2c:c0:92:23:5a:
b4:c5:b8:13:2c:26:9a:7b:b5:1d:93:04:cb:98:5f:53:8d:c9:
96:db:81:bf:17:dd:bc:f8:db:15:88:4a:ed:60:f3:42:ae:39:
a7:a0:f5:d7:c8:7d:ff:a3:4a:f2:a3:1b:3d:b4:c9:6c:0c:84:
d3:c7:71:cc:a4:72:6f:2c:3b:9e:ec:8f:17:1a:72:70:f7:bb:
86:0e:6a:cc:12:84:9e:a0:ab:ff:b2:9b:5d:a5:f4:36:45:b7:
d5:ff:96:23:2d:a7:82:df:87:d8:ca:15:b4:51:8a:34:22:c9:
a4:e1:cc:ba:0f:4a:f6:83:03:cd:ae:16:d5:36:91:04:d6:75:
44:ca:e1:8b:8b:28:d4:c1:f4:c4:55:a2:36:d5:ca:ca:4a:d5:
84:58:4c:9e:90:19:11:40:d8:e9:19:2a:05:c2:b6:16:da:bf:
b3:aa:87:9f:d5:86:ba:b5:f6:8e:8f:aa:62:59:20:e8:03:57:
29:af:03:1c:d0:9e:b5:be:fd:f6:7a:6f:8e:de:6c:15:65:87:
d2:51:ae:b5:14:64:91:85:4a:bb:5c:f2:95:ad:42:7c:6e:65:
4d:1d:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:20 2026 by rpki-client