Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: tgZu6JxcKD89e7Jn91y7myXT22zfXW11G1zmMykYggI=
Subject key identifier: 4D:ED:BF:B7:20:62:CA:73:0A:BD:8F:CB:8F:97:FA:C3:A5:EC:76:4C
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019D2703A66F6EE8A600AF15760F203C32E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 103A
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: AVzk6N7kwLT6TalZEt+Eh61Cl95bZgqTxbcQQUBsFj8=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a6:6f:6e:e8:a6:00:af:15:76:0f:20:3c:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=4dedbfb72062ca730abd8fcb8f97fac3a5ec764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:5d:7e:73:07:f6:ff:38:32:31:77:0a:1f:
2d:f7:f3:1a:0c:7a:11:cb:74:e3:bb:ba:2b:36:6e:
b9:b2:14:93:b0:81:5a:c6:1b:2e:8d:5a:54:9b:cb:
8a:ef:d3:1c:93:b0:57:f7:1b:4d:e7:61:a7:c6:da:
5a:4e:db:b8:41:6b:09:91:87:6e:3b:ae:0d:c8:fb:
0f:98:eb:45:25:8f:54:53:aa:87:65:87:69:92:bb:
7b:fb:7c:18:7a:88:d8:49:40:ac:f1:4c:55:40:96:
a8:1d:45:80:8c:70:dd:08:2a:fd:12:dc:d0:c2:66:
d4:18:35:b3:e5:19:77:a0:1e:46:e8:db:57:c5:f6:
00:43:79:b2:cd:fd:24:cf:01:69:60:c3:86:9b:14:
ff:5a:77:9d:f6:83:0f:b6:cc:83:13:3a:5b:ef:fd:
04:da:e3:8a:f2:38:ee:06:e9:44:e6:1f:ca:fd:de:
c2:34:e9:2e:95:af:a5:75:61:76:cc:e8:ae:d8:e9:
e2:9f:6f:12:d3:d8:2c:0f:69:0b:d3:9c:12:c5:81:
52:f6:4d:95:96:08:08:25:b9:3b:b9:e0:96:78:9f:
37:24:00:58:aa:92:ec:b7:82:74:23:5e:b7:41:eb:
20:5a:0d:2a:13:50:17:c0:cb:aa:53:50:3b:da:a7:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:BF:B7:20:62:CA:73:0A:BD:8F:CB:8F:97:FA:C3:A5:EC:76:4C
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:8d:d5:5a:10:b6:9c:58:d3:ec:23:8c:3d:66:a4:c1:8d:
d3:7a:3b:ea:b5:e7:61:a6:1b:2c:42:13:5d:f0:fc:3e:bd:14:
a7:e9:e9:47:77:0b:df:d3:99:1e:0e:bd:14:ac:06:55:aa:aa:
cb:4f:92:48:6c:6c:fb:00:d1:51:68:cf:49:aa:53:aa:c3:16:
4c:66:ef:dd:61:46:ae:b5:00:fd:5d:8e:94:73:53:1b:b4:b5:
4e:95:98:ae:2d:c4:41:37:55:7a:96:46:f3:c3:6a:02:ad:da:
78:55:22:03:16:48:31:35:01:71:86:db:68:fe:c9:81:f0:db:
3a:6b:e3:3b:a7:75:5a:f1:bd:48:21:91:9d:bc:9e:bb:aa:a9:
31:2e:a6:8d:b5:85:f9:68:57:13:64:ac:ce:82:59:de:27:d9:
ad:cc:2d:4a:65:33:a9:3d:40:28:bc:fe:c0:e0:76:ef:a3:fc:
c0:60:82:3a:d5:3b:a0:1e:66:8c:d2:a1:fb:b4:ad:3b:3e:89:
f9:8e:1e:8b:5b:ef:98:43:3a:38:f2:14:3c:a2:f7:56:e6:1b:
a0:da:08:b7:94:3b:ce:78:d9:83:53:73:c9:03:49:6c:c8:8e:
06:dd:ff:8c:36:86:02:c6:39:12:a6:f8:5f:24:7a:d5:f8:11:
c6:7b:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:12 2026 by rpki-client