Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File: 2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier: fQhXb0Zl3A5DGdVjFLcwaZ7lIYVbzn+Kkzuw4UbLObg=
Subject key identifier: 72:5E:72:03:AF:92:80:1A:39:9A:D9:B4:0D:F2:CD:02:2D:DD:E6:EA
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial: 019D284D49A0F647BD1575DC6F84130BCE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number: 025D
Signing time: Thu 26 Mar 2026 04:00:46 +0000
Manifest this update: Thu 26 Mar 2026 04:00:46 +0000
Manifest next update: Fri 27 Mar 2026 04:00:46 +0000
Files and hashes: 1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: +PhmfCqcJHICUhFcFR0wHGypH1fx5uSAIB3YegjUMiQ=)
2: 3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa (hash: t4uGj4/wTSstzpMGs7YKMuCqSdG4+YDmS+F49g2Xx/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:49:a0:f6:47:bd:15:75:dc:6f:84:13:0b:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Validity
Not Before: Mar 26 04:00:46 2026 GMT
Not After : Mar 27 04:00:46 2026 GMT
Subject: CN=725e7203af92801a399ad9b40df2cd022ddde6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:d9:eb:7d:22:68:c0:7c:7b:c2:af:f9:f7:
00:cb:df:9b:e7:fc:3c:6b:84:74:54:4e:64:e1:8a:
20:4b:3d:14:e4:81:d9:b4:4d:eb:eb:b0:65:93:98:
6d:4a:55:e3:75:3a:08:09:cd:40:bf:97:84:9b:a6:
41:30:d3:76:30:3f:60:22:9e:c3:2d:e7:cf:67:6d:
ca:45:4e:82:e5:6e:fe:6e:db:d7:02:b8:c1:22:95:
e6:a5:2c:8d:14:98:e5:0f:ff:f4:47:cd:6c:0c:07:
70:46:65:35:b3:c2:6a:f4:10:0e:1c:44:9c:e0:40:
2a:1b:6c:ee:a9:1a:d9:64:d7:e3:8b:1b:0e:fe:9b:
93:7b:ca:d9:83:f9:7d:e5:d9:ee:69:74:e6:3c:40:
28:82:1c:58:30:7d:5c:59:75:ea:1d:78:ac:37:8a:
5f:2d:f4:28:5e:a5:a5:96:86:a8:66:a3:13:2a:52:
e4:f0:0b:cf:e9:39:02:1e:c6:3f:f7:dc:51:d0:7d:
12:4f:32:cf:41:62:fd:01:86:7a:0e:e4:46:8a:bf:
71:67:e1:6d:53:49:6e:21:1f:82:59:2e:e0:47:f7:
f1:51:8f:d2:a5:10:e6:65:46:6b:75:f8:69:a0:ab:
b1:b7:f3:36:fe:c5:01:8f:c4:ee:0f:9d:40:7d:e9:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:72:03:AF:92:80:1A:39:9A:D9:B4:0D:F2:CD:02:2D:DD:E6:EA
X509v3 Authority Key Identifier:
keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:9e:26:66:ef:0d:ff:0a:1a:bd:c8:cb:7b:69:a2:37:33:
7e:06:47:48:94:67:f7:b6:c6:4b:cf:94:38:a5:01:0e:1e:fd:
bc:93:8b:8d:42:a1:7f:1a:a9:bb:81:a5:cb:75:5f:ba:fa:aa:
eb:44:a2:42:10:a8:62:22:63:e3:ed:ea:ea:9c:ff:89:a2:1c:
86:9d:4f:dc:91:e6:fa:fe:cb:3e:a3:15:26:e5:c7:57:e1:ea:
d6:40:23:62:51:ca:9d:ef:02:8a:97:2a:e5:07:6d:13:8a:63:
fe:ae:af:be:00:f4:3d:72:c0:53:f6:ee:64:50:1c:6f:31:12:
23:1f:bc:a2:f0:22:8e:6a:e0:48:bd:26:f0:40:0c:a8:0f:17:
21:7e:74:aa:ef:4e:89:1f:7c:a4:e1:76:20:b1:e1:f7:90:49:
77:7f:14:0a:80:f4:bf:72:44:4b:5e:e5:6d:b2:73:1f:82:6d:
44:7a:48:a5:ea:18:8c:02:62:37:41:57:a9:33:d7:ab:61:41:
99:02:5c:24:d0:a3:b6:16:61:8d:fc:6c:c2:56:36:04:d1:6e:
c3:74:67:c8:45:5f:6a:2d:af:62:f8:13:eb:1a:71:43:8a:55:
18:8e:87:2c:9b:8f:a6:3f:e8:17:bc:6c:fe:55:22:fb:99:f3:
b0:e2:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:28 2026 by rpki-client