Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: IfDm4ajzDcm1VQ450MIWojoY2hY9GeToDXQ/z4mnGBQ=
Subject key identifier: C6:E4:74:6F:3F:25:01:83:D5:F0:52:27:11:03:85:CD:69:C6:50:60
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019D28BBACD589E19177B787D07066422390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0FCE
Signing time: Thu 26 Mar 2026 06:01:21 +0000
Manifest this update: Thu 26 Mar 2026 06:01:21 +0000
Manifest next update: Fri 27 Mar 2026 06:01:21 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: ZHd8Nksdo/5v8MIaLdbjjsyFvgfCXLpduXiR4EqmLkg=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ac:d5:89:e1:91:77:b7:87:d0:70:66:42:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Mar 26 06:01:21 2026 GMT
Not After : Mar 27 06:01:21 2026 GMT
Subject: CN=c6e4746f3f250183d5f05227110385cd69c65060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:58:52:26:e5:b5:f5:60:ce:88:a0:0a:ca:
a4:5f:90:dd:ce:40:59:eb:e0:61:8d:cd:66:fc:97:
8f:79:11:4b:6c:e1:cb:4d:3a:19:3d:bf:86:d6:a6:
1b:bb:16:a9:70:43:81:30:0f:29:8b:50:13:8a:53:
bc:ee:af:66:38:4a:f5:4d:9a:ce:55:76:13:8f:7c:
bb:1d:bd:61:d5:92:9a:2c:68:67:5c:c0:d5:cc:8f:
7c:0c:ff:8c:98:33:8d:20:71:dc:95:ca:25:45:4f:
35:35:06:9e:3c:4e:cb:1c:83:66:22:14:78:8a:49:
43:0c:73:17:9b:50:f3:05:d5:25:62:b4:1d:96:1d:
d2:4a:e4:90:f9:55:d9:27:fd:09:6f:73:9c:1c:58:
a2:47:5e:70:39:8c:bb:90:af:35:18:0d:93:0d:54:
02:35:b8:b6:c0:08:ad:4e:f2:c9:60:d8:08:60:0e:
d7:bc:ac:9b:0b:bf:c8:ff:b1:de:f5:56:5b:b1:1d:
67:32:13:4f:5f:c5:3c:ab:00:92:e4:79:47:54:65:
14:bd:1f:0d:48:2c:44:f4:72:67:3c:01:24:a1:61:
43:e3:af:5d:ee:08:6c:8c:ee:62:17:cd:c8:2e:be:
0f:b0:ef:42:71:54:d7:da:1f:ee:c6:29:84:c5:d7:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E4:74:6F:3F:25:01:83:D5:F0:52:27:11:03:85:CD:69:C6:50:60
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:09:ba:dc:b2:ac:48:7b:5f:84:52:b8:e5:36:d8:5c:d8:
16:b7:fd:c4:31:ca:f6:c5:65:c5:53:9e:ac:c4:05:88:1e:05:
6d:21:2c:54:8b:52:c6:e6:d5:ab:26:c5:9c:e1:f0:b4:f8:e0:
76:9f:98:bd:ed:48:fe:b3:2e:b9:7f:43:c9:0a:b3:0a:cb:1b:
69:53:30:20:f1:d9:cc:13:63:2d:0b:eb:90:40:1c:1b:56:70:
30:20:e9:4f:75:ec:76:17:92:b3:60:be:ef:dd:b6:6d:e3:1a:
95:17:ee:01:e0:a9:eb:9b:ce:09:28:40:9e:d7:32:10:6c:d1:
14:cb:9e:a8:3d:10:12:78:a8:85:93:cb:ea:8c:34:20:44:53:
cb:d9:2a:41:a8:22:bb:58:f6:df:8c:07:2e:01:d5:0b:1c:5e:
20:f9:eb:12:a5:b6:9d:b8:67:43:69:2e:15:8e:84:a0:9b:33:
7d:ed:f4:32:bf:eb:79:4e:78:b7:20:4d:48:f0:94:a7:f0:a7:
20:1e:50:59:e4:f7:e0:d1:7d:3d:d7:c5:6c:65:d9:0f:70:5e:
63:c2:c7:23:7c:ec:e2:ea:6c:c8:16:40:0a:1f:b7:5c:4e:32:
6e:b3:cc:9a:f1:4b:51:4f:e6:96:1b:30:91:cd:82:5c:58:47:
b1:a2:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:25 2026 by rpki-client