Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: EHxOv4ibulR7ucnjSnyNBdxVzNKK26Ty2J5f2uL5IBs=
Subject key identifier: 3F:DF:BE:43:3F:EB:DF:B3:23:12:E1:00:E3:C9:69:16:8C:D0:14:7F
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019D3865D8D615134108F5B79765DB2F03F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: 0SM85Q629jM4PMTxoKIctX1YKgVSnT5ZQy2ojISG94Y=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d8:d6:15:13:41:08:f5:b7:97:65:db:2f:03:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=3fdfbe433febdfb32312e100e3c969168cd0147f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:74:82:6c:96:dd:39:3e:67:d6:17:2c:74:
80:57:6d:be:7b:cc:f3:6d:7b:15:6e:e0:23:27:86:
89:98:3d:86:40:04:0b:c2:27:17:8a:85:58:6f:f5:
39:5b:df:51:2a:89:d9:d2:68:0c:7d:97:67:89:54:
1c:7d:55:b6:29:0f:57:c0:8f:75:26:ef:6e:47:9a:
41:ad:08:54:0d:67:62:ae:67:d1:64:d7:ca:38:02:
9a:34:73:77:5c:c0:cd:8e:63:b9:a4:99:e1:94:9f:
09:d5:84:3e:fc:e5:2b:dd:5c:8f:a6:b7:aa:59:48:
d5:5a:29:f9:25:1a:34:6b:7d:91:7f:94:d0:80:30:
3b:38:85:c3:b0:b4:31:10:56:47:01:39:0f:f5:da:
47:70:cc:2c:49:bd:ac:03:df:ba:02:05:65:d6:81:
90:89:1a:b1:23:1f:0e:f2:8a:56:a1:30:7f:dc:d5:
16:95:54:77:df:5e:69:70:1c:63:b0:3d:3b:85:3d:
ab:f5:9c:5b:4a:c2:f4:2d:58:10:71:8c:9b:3d:2e:
e4:da:95:1b:25:0b:38:00:85:39:85:ef:3c:2f:d4:
cf:f2:4e:e1:11:45:50:8a:f0:d7:ff:7c:96:f8:ec:
1a:1d:52:eb:1d:d7:db:d0:6d:92:1d:5e:44:6b:36:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:BE:43:3F:EB:DF:B3:23:12:E1:00:E3:C9:69:16:8C:D0:14:7F
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b6:29:ad:b2:fc:aa:89:4e:4f:61:ce:65:11:ed:dd:b2:83:
92:80:46:55:3a:1c:76:6d:55:98:d7:a4:a2:15:4f:d7:c0:92:
01:93:18:1a:35:e0:7a:eb:00:3c:6f:b0:25:84:b4:cb:4d:c1:
f9:88:c4:33:e7:e3:bf:05:99:c5:7b:69:67:5a:6a:6c:7a:3e:
39:e0:3d:00:e9:07:05:8b:ff:f6:78:a6:9b:95:67:6a:40:e1:
4d:32:92:32:c4:f6:97:f9:e4:0c:72:5b:a6:c6:14:d3:65:48:
7e:3f:8c:34:9b:36:a8:ed:4f:86:55:f7:b0:96:0f:fd:67:d5:
6c:fb:c3:37:fc:93:8d:42:2e:bd:91:03:ec:6e:97:58:2f:4d:
84:36:08:c2:9a:de:7c:0a:01:10:8d:67:d9:80:01:d1:16:f4:
df:a3:f2:4d:0e:9d:76:01:85:4b:f3:cc:15:2e:15:0d:07:22:
28:88:3c:03:09:6a:f5:58:13:cf:e1:76:ef:99:2f:ee:c4:e8:
f1:35:51:2f:f3:66:32:16:7f:c2:75:76:23:09:52:02:94:a5:
1b:78:fa:98:a4:87:9d:df:29:ed:bd:ac:6c:50:98:7a:41:04:
a5:b2:a2:39:ee:74:52:fa:8f:dd:54:78:fb:d2:3d:a6:31:01:
05:5a:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:18 2026 by rpki-client