Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: tsTb1ZVPAJKIi3uBjiIhzxBy+LibcPirYrIbuGSd6ww=
Subject key identifier: CE:7C:C4:06:39:CC:20:86:BF:40:AF:11:76:FA:57:03:21:C0:22:A4
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019D25F1EF748D8FFB97F7C4754D78DF143B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 04AB
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: 7fhNBwAoJw/asi8UPV1hyGpNLCC0hNqsdsnDbF7KjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ef:74:8d:8f:fb:97:f7:c4:75:4d:78:df:14:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=ce7cc40639cc2086bf40af1176fa570321c022a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:4b:d6:00:b4:b6:fc:ab:46:b9:62:f0:a9:
b9:3f:24:d5:2d:47:a1:9e:b6:84:f8:ac:3a:3e:72:
38:4d:97:be:96:92:71:4d:71:cb:c9:67:97:64:bd:
98:8a:73:29:2b:ea:39:06:49:dd:8a:a6:ff:d6:38:
aa:e5:e7:b3:27:e6:33:09:2f:1f:02:96:4d:6a:0c:
f3:c1:ac:83:87:6a:d5:1f:99:ef:75:f8:e9:4d:8d:
c1:90:33:5f:cc:2b:92:f2:25:42:a2:c3:94:b4:ec:
fe:80:52:34:03:df:3c:c7:1f:89:22:66:22:d2:9f:
3c:1d:7a:9a:08:68:f4:03:2c:d7:f4:f9:b7:4c:29:
3a:ad:98:20:85:cf:c7:73:ca:be:cc:ff:43:5d:ed:
34:2d:a0:3e:0d:52:d8:ac:e6:53:0d:55:25:4b:d1:
f8:df:2d:f9:6e:55:27:d5:ac:dd:c4:c3:c3:78:a4:
64:7e:11:33:de:b2:7d:75:b8:db:ca:9e:d0:64:5b:
cc:1a:d5:33:20:d0:8e:db:83:f0:ab:05:3e:ce:da:
db:1d:1b:25:f6:29:ce:12:6b:42:b0:d8:34:18:c1:
40:0d:f7:79:53:ef:3a:ec:37:a9:82:8c:d0:4d:6f:
00:5a:dc:d2:3b:25:ed:93:be:f9:6b:1e:31:4e:5b:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7C:C4:06:39:CC:20:86:BF:40:AF:11:76:FA:57:03:21:C0:22:A4
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:7c:84:a6:3f:e7:a6:74:7a:e6:76:9b:82:76:db:79:9d:
36:19:52:1f:d3:ab:0e:15:aa:57:92:21:75:45:51:5f:20:49:
0b:99:b5:91:64:e0:3e:26:9a:a0:8a:9f:da:0e:27:9a:3b:c0:
ec:a2:df:91:05:5b:db:eb:98:31:68:dd:ff:aa:05:3e:5e:90:
7f:a0:ad:75:d6:6f:36:42:bb:8c:b1:59:28:6e:81:40:b0:f0:
b7:2a:19:28:11:f6:50:79:f9:0b:24:f5:2e:b9:21:86:6c:36:
90:f9:d7:d8:82:bd:e4:8b:69:83:c5:43:bc:40:25:7b:b9:c3:
eb:16:24:71:87:d0:23:9b:f9:65:56:08:43:c2:fb:75:02:d9:
79:09:47:3b:a0:67:a1:87:bf:8a:6f:63:5b:75:7e:db:aa:24:
fc:27:ec:bb:51:df:7e:7c:a0:56:41:f8:8e:68:b1:f2:6a:0f:
d0:13:5c:7a:4b:ca:31:a6:28:5a:16:5c:8d:97:b3:51:dc:69:
1d:49:ca:01:1b:26:4a:41:47:36:e6:3a:cc:25:23:eb:10:a3:
9d:79:07:d9:80:dc:45:45:1a:ef:d6:da:56:94:02:ef:49:81:
3f:53:78:81:22:09:44:38:7e:a5:94:13:dc:a3:cc:95:23:2b:
c2:67:46:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8e90jY/7l/fEdU143xQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmY2MWQ1YzU4ZTZlYTZlYzVjZjdlZTZjZjM1M2E2NjNi
MWIzYTgwHhcNMjYwMzI1MTcwMTQ1WhcNMjYwMzI2MTcwMTQ1WjAzMTEwLwYDVQQD
EyhjZTdjYzQwNjM5Y2MyMDg2YmY0MGFmMTE3NmZhNTcwMzIxYzAyMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRpL1gC0tvyrRrli8Km5PyTVLUeh
nraE+Kw6PnI4TZe+lpJxTXHLyWeXZL2YinMpK+o5Bkndiqb/1jiq5eezJ+YzCS8f
ApZNagzzwayDh2rVH5nvdfjpTY3BkDNfzCuS8iVCosOUtOz+gFI0A988xx+JImYi
0p88HXqaCGj0AyzX9Pm3TCk6rZgghc/Hc8q+zP9DXe00LaA+DVLYrOZTDVUlS9H4
3y35blUn1azdxMPDeKRkfhEz3rJ9dbjbyp7QZFvMGtUzINCO24PwqwU+ztrbHRsl
9inOEmtCsNg0GMFADfd5U+867DepgozQTW8AWtzSOyXtk775ax4xTltfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM58xAY5zCCGv0CvEXb6VwMhwCKkMB8GA1UdIwQY
MBaAFNv/YdXFjm6m7Fz37mzzU6ZjsbOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMt
YjhiMzZmODk1NmI3LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMtYjhiMzZmODk1NmI3
LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2d8hKY/
56Z0euZ2m4J223mdNhlSH9OrDhWqV5IhdUVRXyBJC5m1kWTgPiaaoIqf2g4nmjvA
7KLfkQVb2+uYMWjd/6oFPl6Qf6CtddZvNkK7jLFZKG6BQLDwtyoZKBH2UHn5CyT1
Lrkhhmw2kPnX2IK95Itpg8VDvEAle7nD6xYkcYfQI5v5ZVYIQ8L7dQLZeQlHO6Bn
oYe/im9jW3V+26ok/Cfsu1HffnygVkH4jmix8moP0BNcekvKMaYoWhZcjZezUdxp
HUnKARsmSkFHNuY6zCUj6xCjnXkH2YDcRUUa79baVpQC70mBP1N4gSIJRDh+pZQT
3KPMlSMrwmdGMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:11 2026 by rpki-client