Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: wVMSIqdcX+iH8n3BdVGiNNpLc6w115ynGAnxAAAP3b4=
Subject key identifier: 4A:B0:A4:0D:8D:3D:4A:AE:5A:98:83:A5:92:53:92:77:41:F8:49:4F
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019DAFB35E85A5F5740BCF19378A15C20384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0CFF
Signing time: Tue 21 Apr 2026 11:01:00 +0000
Manifest this update: Tue 21 Apr 2026 11:01:00 +0000
Manifest next update: Wed 22 Apr 2026 11:01:00 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: pdSr1zYBZi+w7eQMKBfXCJb2kgtMQ6EfbNCeGJ84TRc=)
2: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
3: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
4: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b3:5e:85:a5:f5:74:0b:cf:19:37:8a:15:c2:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Apr 21 11:01:00 2026 GMT
Not After : Apr 22 11:01:00 2026 GMT
Subject: CN=4ab0a40d8d3d4aae5a9883a59253927741f8494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:1c:f0:7f:e7:7a:3c:8b:19:60:50:d1:db:
7b:e4:dc:63:93:7c:bf:2e:4c:1c:cd:e2:d9:99:72:
75:01:da:29:ee:dc:15:05:cc:0f:94:59:93:e6:58:
37:bc:db:00:c5:c2:b1:bd:a1:22:bd:30:40:5f:a1:
e3:8d:f2:cf:5e:11:c0:7c:d1:9a:7e:66:30:e8:fb:
7c:7d:6f:8e:ff:66:b5:86:43:96:91:58:6f:f2:be:
03:e1:de:7f:03:92:b6:99:da:81:53:8f:61:90:ae:
be:c4:dc:d8:de:93:05:1f:7b:18:30:b8:51:e6:ab:
a8:de:8f:b0:4b:7d:d7:17:15:2e:2c:ec:31:a9:e3:
bd:7c:49:aa:08:f1:41:0a:1d:28:f1:f8:3f:85:5e:
44:25:ce:56:2e:f1:46:8c:cd:ad:9e:81:5e:34:83:
b4:78:66:27:65:19:a7:c3:6a:c6:80:e9:89:b8:58:
54:4f:80:81:83:71:03:99:c9:25:7a:97:18:b5:25:
66:af:61:29:fd:bc:05:f3:60:76:95:96:c2:60:02:
a4:63:29:f2:1d:76:ac:2e:47:fc:44:d3:51:99:d4:
5b:d7:c6:fd:b9:40:98:9b:0b:b2:43:80:a1:d7:53:
54:6d:d4:a6:b8:d9:ef:ef:85:eb:96:88:a1:49:ef:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:A4:0D:8D:3D:4A:AE:5A:98:83:A5:92:53:92:77:41:F8:49:4F
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:ec:cf:17:59:e9:2c:5c:04:03:07:73:67:10:83:58:9f:
73:84:d4:2b:73:b6:03:92:79:57:ef:0d:6b:ea:29:06:48:07:
88:a2:9c:1b:07:9e:e4:61:8e:0a:74:bf:dd:c7:27:95:7d:2b:
69:ee:df:b7:06:79:f6:46:93:6d:63:90:61:30:9f:c1:d0:ad:
bb:3b:25:07:a1:6f:a0:27:f6:d8:09:c3:d3:c8:bf:7e:50:f6:
77:78:47:35:b6:fa:50:cd:b0:e9:a0:9a:29:05:b6:65:9c:73:
6e:10:eb:6f:b6:ca:fa:ce:82:51:28:f4:d6:f7:df:bc:bd:a9:
84:29:00:c0:85:1a:9e:31:a6:fd:cd:1a:f5:2d:6b:e3:47:27:
25:bb:90:cc:da:5c:d7:b4:a5:97:88:e4:3f:60:e0:1e:ec:93:
6b:26:df:d0:b2:e6:a6:e6:7d:bc:9f:46:de:87:c0:66:21:32:
f1:a5:6e:10:03:bd:24:af:a3:3e:76:7a:68:31:2a:bf:a4:d8:
60:29:97:65:b0:a2:de:50:86:59:9d:3f:57:2e:1f:93:6e:68:
eb:19:ed:c5:48:ff:89:12:50:87:95:1c:11:e5:3f:51:50:41:
e3:59:7f:73:61:02:ca:b4:f6:97:13:ef:42:44:28:90:2d:a4:
bf:7d:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:53:37 2026 by rpki-client