Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: y3YxkqB0rpNsAXjqLsgi0F5uqtzym1PV73zuwP5WnDE=
Subject key identifier: 4B:3E:C4:DE:11:CC:BD:DD:3B:4D:A1:4A:5A:A0:AE:C6:56:4F:C0:38
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019D37525EBC7BF6AD81B37A07903582802B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0940
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: UBNk51DA+0w7PwoBeRX+k3GiUQEwH+i9hNqmdjaBLU8=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5e:bc:7b:f6:ad:81:b3:7a:07:90:35:82:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=4b3ec4de11ccbddd3b4da14a5aa0aec6564fc038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:9e:bd:3a:a7:64:2d:9c:89:d3:e5:e0:fa:
35:76:2c:32:1d:87:fb:44:2b:4d:00:bf:b7:a2:53:
19:b6:dc:af:2b:ba:b5:6c:22:8c:64:bb:c5:ae:ca:
11:26:57:97:cd:3b:d7:d9:43:36:bd:58:4d:6d:20:
fa:ee:e4:9e:c9:18:87:d5:8e:3f:11:ae:34:2a:de:
ef:3e:ab:ba:b2:c4:26:52:2a:3b:9a:a6:01:8b:79:
a9:49:4f:53:f7:61:e3:c3:34:e0:33:12:f6:c5:e1:
77:45:3b:1b:1c:ad:38:30:1d:35:43:86:f1:0e:8a:
36:d1:a8:92:e0:c9:3f:e6:cb:0b:e5:0a:ae:b6:fa:
e8:0d:63:40:ba:87:95:54:17:4c:df:c6:9d:88:5b:
c2:65:c7:4d:57:76:cd:1c:e9:05:1a:3c:a2:51:57:
df:34:7a:d6:0c:6d:2d:d5:df:04:c6:cd:ab:3b:18:
54:28:3f:ad:16:b2:6c:71:b7:e4:0d:38:a4:74:5f:
45:3a:bc:cf:e2:f6:32:d3:60:de:79:65:30:ed:72:
e3:a8:40:25:d4:be:c6:cf:07:0d:11:68:c3:1b:e6:
1f:51:f3:ca:c1:ed:fe:12:a4:d6:b1:08:8c:a0:80:
76:4f:db:1c:b6:c8:9a:d0:60:66:e9:ea:12:a1:df:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:C4:DE:11:CC:BD:DD:3B:4D:A1:4A:5A:A0:AE:C6:56:4F:C0:38
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:b8:ac:d7:64:ec:29:9c:6a:fd:da:a8:51:b5:c2:23:b9:
0c:5d:b8:42:4b:c6:71:36:bc:f2:ce:a4:ff:b0:21:1a:12:0e:
fa:c1:d3:1b:c2:de:ac:53:b6:eb:45:35:7b:e9:66:4d:be:46:
b5:96:70:eb:bd:96:26:75:d8:e0:58:32:21:5c:f6:9a:1a:27:
50:20:dc:33:81:4e:18:b3:43:87:1a:88:f7:0e:cd:60:aa:0c:
0b:c7:b4:c8:96:6b:15:d1:c6:e0:c8:5f:1c:33:55:3b:28:7d:
c8:da:2b:27:b7:cc:47:59:dd:e6:cc:ab:59:21:99:ef:e6:b3:
ca:00:2b:b6:22:cb:04:f8:0e:85:2e:86:27:8c:1a:d5:fb:22:
27:25:7c:36:13:da:79:3a:3a:80:e3:df:12:db:dd:a0:07:af:
c0:77:cc:69:d0:d8:2d:a1:68:77:11:ca:01:48:6a:46:74:e8:
68:c8:90:b1:10:d5:e0:05:17:72:48:b0:da:2d:85:b3:54:ef:
e1:cf:8f:d6:fa:e1:4d:9c:0a:b0:c2:fb:d5:0d:3c:4a:20:a5:
11:e9:19:4f:51:da:6f:86:5b:13:4d:46:a9:45:80:d0:5c:c7:
2e:22:70:ee:e7:68:ff:a1:ce:5b:7a:31:50:1b:87:ca:4f:bd:
3a:93:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client