Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: MmhrtHzqdd9oDK8ggblCqwACAXlhGNj9Pfuc6gdCd9s=
Subject key identifier: 67:48:4E:77:72:DB:39:F5:27:31:E1:D3:A0:F2:2E:B2:12:4A:AF:9E
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019D284DB5950E1F13B0C2F1FAC389A8F802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 101C
Signing time: Thu 26 Mar 2026 04:01:14 +0000
Manifest this update: Thu 26 Mar 2026 04:01:14 +0000
Manifest next update: Fri 27 Mar 2026 04:01:14 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: eIibxEX3D3wXDwzncYjKiCJ8u9EFnnEd9Z5bc9T0UZQ=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b5:95:0e:1f:13:b0:c2:f1:fa:c3:89:a8:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Mar 26 04:01:14 2026 GMT
Not After : Mar 27 04:01:14 2026 GMT
Subject: CN=67484e7772db39f52731e1d3a0f22eb2124aaf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:e8:6e:38:ab:2e:1d:18:c4:e5:93:d0:b4:
a9:a1:44:c5:32:cf:34:26:8c:47:de:28:83:f7:b6:
08:a7:24:fa:72:02:2d:67:9d:5e:6b:6e:15:ef:dc:
b9:3e:e5:bb:e1:78:87:7c:4c:0a:95:5e:f9:c1:96:
26:d7:b9:f9:dd:33:97:1e:24:dd:b5:c4:45:43:6a:
c7:58:f2:d9:6c:95:55:25:1e:4a:eb:be:5c:b1:a2:
5b:ae:6c:ed:d7:9f:ed:9e:9f:8e:8f:bb:a1:7a:aa:
fa:19:55:5a:33:3b:4b:a2:b5:34:a6:23:af:86:f2:
44:a7:1b:d7:c7:3e:b8:80:f6:52:30:70:ec:0d:e0:
53:1f:47:bd:aa:b0:e5:5b:9c:2f:c5:20:4d:d1:46:
4a:30:1f:be:e3:25:50:56:46:cd:d4:e1:9b:8d:56:
bd:48:09:da:3b:df:a6:68:7e:d0:89:60:e5:64:d3:
e8:70:d4:74:6d:e3:b7:8d:66:15:5d:28:55:26:35:
24:fd:19:cd:5b:0c:8f:30:f1:8f:32:53:5b:f3:db:
5c:e2:13:43:8b:92:e2:ee:5c:e0:69:59:54:d6:50:
1f:8f:61:b7:f1:fe:fa:c8:9f:a9:86:3a:78:76:2f:
a2:cf:8c:73:82:66:28:1a:bf:f9:8d:50:c0:e1:92:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:48:4E:77:72:DB:39:F5:27:31:E1:D3:A0:F2:2E:B2:12:4A:AF:9E
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9c:19:06:d6:8a:c0:f7:b5:e3:34:5a:aa:f9:0c:23:54:e4:
45:21:41:86:c2:d3:22:a2:02:52:00:62:a1:c6:62:97:4a:0f:
64:7f:88:fa:ea:52:4a:f5:c0:10:8b:5a:bd:f6:23:b3:5a:56:
e0:f0:7d:5c:fd:09:31:18:75:74:a9:55:4f:e9:21:24:33:8b:
0d:8c:94:6f:be:0c:04:bb:b9:6d:55:51:4d:75:96:e8:ce:01:
bf:5e:bc:a3:d6:8b:65:50:f6:8b:2a:15:ba:66:3e:59:3f:71:
c6:de:1f:3f:b3:e9:6d:64:ee:25:69:be:55:d4:11:14:08:92:
a4:23:ed:44:46:c8:32:76:fb:48:6d:47:48:46:0b:f8:fd:27:
c8:d7:e0:08:a8:8e:c5:88:f2:83:9c:6a:c5:9e:24:59:2f:52:
2c:24:6c:29:0b:f0:8d:32:c4:ed:1a:43:53:88:64:17:98:25:
01:9d:b1:65:5f:83:09:48:f3:5c:34:6c:d5:d3:76:9a:dd:52:
52:15:f2:76:87:c7:da:47:c8:26:39:49:0b:1d:cd:dd:ff:d9:
c1:ed:78:c9:44:af:77:99:52:7f:2a:00:84:e9:7f:89:b0:c5:
ed:68:ee:18:53:98:79:50:60:32:60:0a:e3:fd:65:1b:98:d4:
71:f6:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:10 2026 by rpki-client