Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: mB4rfOz0K6/7Snq/LY9JxgzE2XBzTfVnUo0Pbjb3WEY=
Subject key identifier: 7A:96:AE:19:39:B4:B2:F9:E8:ED:AD:C6:C6:4D:AC:B7:CB:B5:3E:3C
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019D27E08A63CCF706CD86C97A2B076D219C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 122B
Signing time: Thu 26 Mar 2026 02:02:00 +0000
Manifest this update: Thu 26 Mar 2026 02:02:00 +0000
Manifest next update: Fri 27 Mar 2026 02:02:00 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: M0emrU94eyhuqjBiYdHtyxW6eWl3CB7lgiQCYtNdf38=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:8a:63:cc:f7:06:cd:86:c9:7a:2b:07:6d:21:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Mar 26 02:02:00 2026 GMT
Not After : Mar 27 02:02:00 2026 GMT
Subject: CN=7a96ae1939b4b2f9e8edadc6c64dacb7cbb53e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:32:39:65:1c:4d:df:b6:0f:3b:6f:15:2f:
a6:c2:0a:b9:1f:e7:4f:53:da:06:54:18:74:8a:ce:
d6:19:60:1f:d0:f4:0d:e7:1f:0f:b8:a7:1a:e4:af:
14:20:23:94:83:9c:7a:c3:41:3e:5f:ff:a5:b4:d3:
32:ad:22:1a:14:d5:22:b8:75:bf:1a:5f:f1:a0:8a:
d2:29:a9:84:42:cb:a4:16:c5:ef:e7:13:75:38:dd:
41:27:ee:4e:1f:88:1a:fb:86:54:ab:80:8d:55:f4:
21:37:7e:2b:61:ee:6d:e5:28:3b:65:25:b8:f4:e7:
46:d7:3d:b8:65:42:47:26:00:15:70:32:57:ad:48:
bb:de:44:8b:f7:fc:1e:26:6d:20:97:20:6f:69:4b:
fe:06:1f:fa:90:b4:9f:45:5a:f1:86:2d:50:dd:db:
ee:2a:55:52:8d:8f:34:05:3b:cb:e6:3d:9e:b6:0d:
22:88:52:c2:9c:cf:8d:d4:da:f2:6c:f7:ce:30:26:
f4:27:50:f0:79:b6:d0:ba:2b:c6:91:db:6a:f7:30:
45:09:f8:74:74:d4:bd:b6:40:53:28:9d:5e:e7:36:
7a:19:52:54:87:e7:dc:a9:97:08:6a:0a:6e:88:6c:
23:8a:da:f0:01:99:19:04:a4:fd:2e:9b:5b:ac:d2:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:AE:19:39:B4:B2:F9:E8:ED:AD:C6:C6:4D:AC:B7:CB:B5:3E:3C
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:59:18:69:b3:f6:6d:29:97:8b:ab:34:6e:a0:ef:a0:61:3e:
cb:d3:61:e0:5b:c1:76:5a:89:30:7e:20:84:89:81:75:b3:88:
18:c3:2b:c6:9f:ed:b5:6b:62:62:3f:00:b7:25:af:b2:f2:50:
13:9b:94:68:85:a9:b6:97:56:f2:ef:fc:f3:ff:3e:77:b2:e6:
2c:7f:76:af:bf:79:1f:6e:bb:a1:37:69:ee:43:09:a5:94:45:
46:77:f5:aa:e5:5f:04:b7:d9:01:22:6e:60:1b:21:1d:6c:97:
01:b1:c3:dd:0b:e1:89:de:34:f6:02:b7:b3:87:43:0d:3b:f4:
4d:3d:8f:66:94:5b:6a:fb:09:00:88:eb:28:a0:69:f7:5a:c4:
b6:05:7c:cc:a7:5e:1f:99:6f:f7:e7:f1:8b:35:b1:c3:70:e2:
8f:f7:79:c4:cb:41:f2:d1:ba:10:7d:9c:15:30:83:2b:4a:c4:
3a:aa:54:c7:93:af:8f:dc:cb:6c:3c:c2:f2:77:58:5c:55:21:
c9:13:86:20:ec:67:9c:0a:1a:2b:12:90:92:83:ac:9c:8c:89:
f8:b3:19:45:fb:8e:8e:41:26:6e:20:33:be:d7:e2:37:0f:f3:
98:79:02:05:15:22:2f:95:a2:c3:c6:15:c1:3e:a9:b2:7f:47:
3e:d7:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:34 2026 by rpki-client