
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier: sSd/qCvte6va5ajcnARmooqb6195/AVUmfM8kwVt5H4=
Subject key identifier: 35:32:F7:86:80:4C:67:95:89:2C:14:BC:30:27:D9:2D:87:05:C7:DD
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019D37C0702AB61AD6066FB23A252B9A1465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: wZiB0Yunlsyl50clJJ0Y27Dt0C8JyIxRdrwAn+12+MU=)
2: I945miDFpQYT7r3liramnIH9Rls.roa (hash: e2W1mAyx8RsZ5wQIGm7sXapbFW0BtqtspvuqaFqFnSU=)
3: RyTAXO0kucVJKzc8XJ__L9yOiUA.roa (hash: XRsDlSNxnX2HTPHcD0o1CksNeN89d3dz50kkMUn9wcQ=)
4: e0dgq9Xhgse0R4bj80TVupAtpHw.roa (hash: UhSpFrBBiQsPvJGPY2abaeBtDnP7c1J1dWqODlHmS/A=)
5: eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa (hash: FpdqbdBj0pjjZR67UoCvnKhEhOtiPNxEJV1VXUIHPLk=)
6: oOhDRpFOR5JraODgtWxrIqn03So.roa (hash: eigDmTWjWV0xucfp3vjonLKwok/Ysn+jhYRmXORf2+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:70:2a:b6:1a:d6:06:6f:b2:3a:25:2b:9a:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=3532f786804c6795892c14bc3027d92d8705c7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:b8:db:b4:0c:cf:88:d1:5f:de:31:f9:71:
a8:41:5e:c5:df:9d:40:55:c7:1d:1d:db:8c:09:79:
92:93:e6:f1:9c:87:44:ab:7c:4e:d4:4f:85:5b:cb:
10:7c:08:f4:f2:c1:85:ea:63:7d:68:72:1b:5f:96:
bc:ae:55:cd:05:b7:63:62:87:99:e3:3c:a5:2f:16:
ef:fd:38:4a:74:4e:7e:dd:f4:0a:9d:0c:d4:e9:5d:
70:8d:24:88:c0:32:e6:2f:1f:0a:68:e1:20:f6:18:
20:63:14:c0:48:5b:09:49:37:a5:f1:94:b7:d3:10:
9d:97:b1:86:81:12:fe:69:e0:8e:33:92:fb:ec:0e:
c2:d2:ea:6b:ac:6c:c4:01:4f:b5:6f:00:26:25:ab:
fe:3b:e2:47:d1:db:fc:70:e7:45:cc:68:50:53:6f:
27:07:f5:09:f2:60:87:df:38:11:74:6a:32:02:b0:
eb:f2:a7:1b:2b:01:af:67:76:56:4b:a7:77:2e:39:
a2:79:cc:50:0f:52:21:b4:0b:bb:a3:77:2d:55:34:
81:f6:7c:7c:bc:0e:77:09:43:b2:12:37:f6:20:f1:
fd:56:08:ed:4f:f4:13:25:aa:f4:ce:ff:b1:7a:e0:
71:91:d4:c3:b8:cd:32:63:6b:fc:31:54:0f:43:da:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:F7:86:80:4C:67:95:89:2C:14:BC:30:27:D9:2D:87:05:C7:DD
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:11:96:74:5d:6c:d3:c6:39:12:6a:41:00:d8:e7:ea:88:1d:
df:ff:2e:ce:b2:f1:a6:4b:3f:fa:67:7f:21:e6:be:eb:af:de:
23:71:c8:fd:8c:4f:b6:2e:51:26:94:b1:2e:c0:ee:f5:ab:44:
33:8b:9f:fa:0f:a3:c2:e8:38:83:28:64:ed:87:5e:b0:64:72:
5c:a1:72:fe:d8:cf:38:ee:03:59:ac:a4:3a:e9:30:46:bc:6d:
24:13:80:3f:f6:78:08:2e:df:e4:73:51:92:b0:d9:88:5f:03:
51:92:07:49:03:2c:e1:31:e6:11:a2:4a:7a:a8:8c:35:5e:20:
36:e0:4d:5a:8a:92:33:29:40:20:ab:19:06:b8:45:dc:79:18:
3d:9f:65:19:14:23:67:4e:79:f4:8d:85:2f:d5:14:65:3a:35:
1e:98:f5:d6:10:e8:d1:28:9a:47:26:ff:bf:8f:b2:c6:e6:11:
5b:cc:ae:bd:32:d6:42:67:5d:7f:91:f8:b4:3f:39:10:6a:44:
9e:31:bf:08:04:dc:12:01:dd:73:b0:4b:e0:ba:9c:e8:e9:68:
d4:92:0d:35:10:4f:52:0d:14:2f:4b:f0:2b:b2:fe:77:ef:cb:
da:2d:fb:c9:1b:14:eb:df:7d:3e:a1:25:bc:bc:05:22:8c:2b:
0e:4c:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:51 2026 by rpki-client