Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: QtQBtrswUkS/bIe2AjZgRS8SmVqQzDWRpS0qRDGfxa0=
Subject key identifier: 48:C7:44:B7:9F:9B:5A:94:A5:CE:A0:68:1C:3C:B9:1B:39:3C:53:42
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019D29CEC6F7749A9429D9D4FE475470E154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 122C
Signing time: Thu 26 Mar 2026 11:01:50 +0000
Manifest this update: Thu 26 Mar 2026 11:01:50 +0000
Manifest next update: Fri 27 Mar 2026 11:01:50 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: 2DgKiUCl1+0xlp6Iy7/aXxT1eIPwx7JXbxSbV5TowD8=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c6:f7:74:9a:94:29:d9:d4:fe:47:54:70:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Mar 26 11:01:50 2026 GMT
Not After : Mar 27 11:01:50 2026 GMT
Subject: CN=48c744b79f9b5a94a5cea0681c3cb91b393c5342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:25:3e:1e:5d:ed:59:f8:de:70:6a:89:9c:
9f:22:97:fd:79:e4:b8:8b:55:2f:47:f9:a9:ad:c1:
c6:4b:cb:e6:8f:74:a4:65:5f:1a:80:db:28:0a:88:
3e:48:e5:57:c8:46:3f:ef:6c:a4:48:04:88:34:6b:
b0:40:54:60:ec:cb:44:bb:13:e8:98:78:ce:c5:c5:
6c:90:e8:62:19:d0:30:69:11:3a:19:72:0d:0f:83:
98:8e:b4:6b:d9:4c:51:0a:32:26:3c:9b:92:e5:b9:
32:39:fd:5c:ea:9a:8e:7e:71:7b:1f:20:51:36:39:
ba:3e:6a:65:e8:0d:89:d1:43:64:9d:c5:e5:e0:1a:
9e:35:15:a3:1b:a3:12:84:f8:e0:96:33:24:60:fe:
23:0b:0d:ee:37:3a:c0:9d:b6:b7:e5:d2:f9:64:39:
34:90:0b:32:3f:59:76:ef:fe:83:f4:42:90:b7:43:
9f:bc:8c:7b:9b:19:4b:fa:c9:0a:89:1a:d2:1d:40:
a8:e3:3d:cd:e7:22:df:fc:42:e3:23:20:f0:b5:cd:
fb:94:5b:04:79:da:fc:7c:ea:03:f5:d7:57:e0:07:
11:15:50:85:d4:71:a4:1e:9a:09:67:99:03:13:73:
bd:61:cf:a3:aa:30:b6:d2:6b:a2:a1:3f:1f:28:e5:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:44:B7:9F:9B:5A:94:A5:CE:A0:68:1C:3C:B9:1B:39:3C:53:42
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7b:1e:2c:14:a1:53:65:ff:03:a7:20:dd:b0:69:a1:9c:43:
76:dc:57:f8:35:2a:6b:d4:23:2d:45:11:80:66:0d:84:ce:87:
bc:b3:c3:99:fb:24:50:ca:2f:8b:10:b5:fb:10:40:5b:b8:ad:
00:2c:29:14:6a:a3:1c:b6:e8:a2:86:57:66:94:2e:d7:8e:39:
18:f1:65:54:07:e4:e6:ca:71:f7:eb:e8:78:12:f5:f3:cc:68:
57:a9:56:59:e4:03:75:96:55:33:28:f6:a8:06:ce:78:86:20:
fe:ef:77:b1:9b:45:f3:86:7e:42:9f:bb:91:53:4e:2c:3b:f4:
e6:dd:d8:f2:fb:e3:64:03:0d:60:76:14:02:65:41:ee:2f:35:
f7:b4:38:a1:98:fb:96:ed:79:99:1f:86:b1:d4:6f:9d:41:75:
6b:6b:c0:8d:1d:41:c0:51:c0:86:80:9e:62:03:41:b8:fe:fd:
b1:7a:dc:a3:38:60:dc:54:13:bb:aa:8e:1a:9e:51:72:22:cc:
32:dd:a0:9c:bb:25:15:e1:e1:4f:c6:a3:28:b7:ba:20:17:5a:
6b:bf:0d:aa:8c:7b:44:a0:c3:d9:03:f9:1b:73:87:20:5a:10:
58:84:19:83:78:89:28:0b:2a:5f:9b:8a:f6:43:f2:9b:0b:6d:
93:d2:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:05 2026 by rpki-client