Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: U7aKz6lo0qrS8RrvrQKETIr3LVHZBTVymvKyk2Chm6Y=
Subject key identifier: 3E:59:E2:4E:EF:53:32:2D:2A:11:DC:95:59:68:83:C5:B9:38:58:B7
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019D27E07D62F2536F064EFA05E43D3B98F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 062B
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: 1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa (hash: PVKqYKVsrFFdzBy/HzOODB+3DNbkSFcoEgOpBYpqHGA=)
2: CqH1FECBpIHfp2xhFgzsj89DsXQ.roa (hash: FwLSU2137U6zawDtXqOxsfLW/s4zSGCVB1UE9CXia1Y=)
3: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: GF8AXh56H0xspW2Lp60RRgmtJzA79QgUBqeskhCUVW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7d:62:f2:53:6f:06:4e:fa:05:e4:3d:3b:98:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=3e59e24eef53322d2a11dc95596883c5b93858b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:0a:94:90:38:98:a7:55:d6:c4:e6:6b:28:
43:c9:76:24:e4:c8:26:0c:1b:fa:57:a3:b4:b1:fb:
35:e0:e4:2c:33:18:d8:ca:b5:34:29:99:7e:a8:af:
63:23:89:13:f0:91:69:d8:01:1b:cb:49:79:19:50:
2f:17:9d:cd:bd:db:e5:86:c4:9d:ae:59:e7:87:87:
84:13:e1:62:9b:f2:c1:fe:fa:cc:99:e8:e2:81:5d:
22:61:a4:10:24:bf:d5:52:1f:a5:47:f2:90:13:af:
d9:0a:76:d3:87:35:53:52:65:f2:7a:9c:55:9b:1b:
1d:c7:9d:87:2a:34:27:ae:19:34:8f:bf:a0:a4:90:
24:58:7c:9b:94:0a:93:3e:68:cd:f9:27:20:23:45:
8a:61:c8:4c:b1:f4:7d:c7:a3:98:78:7b:17:3e:81:
5b:39:fc:11:24:87:3e:24:60:c0:99:c0:d8:83:df:
5f:a5:b0:7b:8e:93:15:08:1c:47:0b:4c:88:bb:7b:
d1:bf:5d:e1:2a:fe:80:d8:e3:ee:95:47:db:43:40:
bd:9b:3d:c5:d0:02:01:12:be:3d:dc:3d:81:0a:8f:
fa:0a:14:59:24:eb:69:14:b3:17:3a:36:6b:f7:39:
41:e6:45:c6:63:bf:19:85:6b:fb:e8:95:49:c4:f3:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:59:E2:4E:EF:53:32:2D:2A:11:DC:95:59:68:83:C5:B9:38:58:B7
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:8c:8e:b9:d3:e2:a4:67:03:c1:9c:4f:74:da:8e:96:44:
ec:e2:8d:67:be:0f:75:f4:69:65:2b:7f:0f:f4:24:76:05:5c:
f7:db:ac:c3:2c:4b:b7:5c:df:c4:46:41:d8:b1:26:46:57:79:
21:88:5b:e6:b2:4a:cf:f3:3a:62:71:d3:7e:58:12:c6:ea:1b:
00:dc:5a:df:5e:85:76:6a:a3:7a:82:5f:97:1e:81:8a:62:f7:
be:9a:f6:b9:71:e5:7d:86:9a:f6:12:6e:62:6a:f9:39:5c:51:
98:25:81:32:d6:20:33:42:e6:3c:97:0c:5c:f1:8a:ff:7e:8b:
a6:26:cb:53:de:a4:b1:b2:8e:ed:e4:a8:4e:75:83:b7:71:bd:
8a:3f:42:ee:16:d3:1d:c7:ea:e2:08:7b:54:1f:37:a6:07:e8:
1f:05:48:ff:a2:8c:0d:b8:48:5b:07:09:5f:d8:f7:ac:a2:97:
78:3c:76:11:62:08:f6:01:fe:71:d7:bf:47:76:ea:66:77:12:
d6:f1:6b:69:63:52:1a:90:80:bb:6f:7a:79:36:83:21:ca:d9:
04:db:f4:42:a6:70:63:25:4c:4c:ee:ed:17:26:5b:78:14:e0:
07:53:51:a5:61:8d:ae:d9:42:da:30:d3:7b:21:1b:6a:94:08:
49:78:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:15 2026 by rpki-client