Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: me0x8GXFb89zLVx3HDfUktQ5wNEd8NeLxG128TyxjIA=
Subject key identifier: F8:75:23:3E:3A:5D:D0:63:EF:F0:47:A9:22:B9:00:2C:9A:D1:76:CA
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019CDE7CE8E73910D3B79435AA956C175582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 02FE
Signing time: Wed 11 Mar 2026 20:00:53 +0000
Manifest this update: Wed 11 Mar 2026 20:00:53 +0000
Manifest next update: Thu 12 Mar 2026 20:00:53 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: QTTqFkFRZerO3OhNny6bLNr5TsgD6PXw1+P6Lz1ZdiQ=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 18:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:7c:e8:e7:39:10:d3:b7:94:35:aa:95:6c:17:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Mar 11 20:00:53 2026 GMT
Not After : Mar 12 20:00:53 2026 GMT
Subject: CN=f875233e3a5dd063eff047a922b9002c9ad176ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:d2:e5:e5:a0:8e:45:50:d4:fc:be:98:d0:
2f:4c:34:c5:ee:8d:cc:8a:e1:8d:da:47:42:ba:73:
f0:5e:c9:a4:2f:d5:9f:21:57:57:4e:b0:b5:cb:e8:
ee:cc:52:0e:26:7b:21:9e:99:80:90:f9:7c:f4:ae:
5b:cf:cb:9d:c0:1c:67:38:29:3c:42:47:dc:92:ce:
09:ac:b4:46:44:46:22:0a:08:20:34:99:40:73:fb:
0f:09:fe:50:61:55:0d:f9:39:e6:1c:0f:bd:48:4d:
de:92:2b:e1:c6:f3:94:ef:c9:f2:37:de:18:eb:5c:
09:96:8b:19:9e:88:09:fe:22:b4:81:de:44:10:8f:
b5:2b:72:3c:1e:e3:ef:13:36:22:b1:d7:14:18:5b:
78:0a:04:71:33:3e:d9:fe:c0:a2:11:24:fb:fa:f2:
0f:85:38:2b:cc:cf:00:56:99:f9:95:e4:6b:b5:de:
6e:33:21:88:4e:2d:b0:c3:d2:b4:ab:45:d0:37:c0:
12:9b:3d:76:78:fd:70:1f:69:7c:b5:22:21:c2:ec:
be:a3:62:35:25:4c:2d:f5:eb:66:66:c4:b2:2a:5a:
36:8d:2e:11:9d:3c:ae:b7:7f:eb:dd:f2:f3:36:7c:
1a:dd:f9:f3:99:bb:fb:8e:7f:90:56:9e:b9:ba:50:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:23:3E:3A:5D:D0:63:EF:F0:47:A9:22:B9:00:2C:9A:D1:76:CA
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:98:c8:dd:69:2f:ff:c1:bc:1d:f3:63:58:89:9f:87:38:
93:0a:ca:a3:88:92:fa:b5:77:a9:ad:88:e2:9a:90:9e:bf:8c:
f7:2c:64:28:36:ff:c9:da:92:07:b3:35:06:73:60:fb:1f:c2:
29:10:52:3a:ed:f9:f5:e4:e4:11:e6:be:33:26:8f:56:a9:94:
a2:f8:36:47:45:e5:13:23:bf:12:89:c6:e5:bd:5c:80:12:a6:
c2:04:d3:0d:c3:ed:69:70:bc:b1:8a:8c:76:62:c7:5c:36:67:
f1:06:8a:e6:b2:5a:4e:1c:cc:bc:7c:97:bd:a0:33:eb:20:8e:
b0:5b:69:12:d7:ea:ca:81:64:0f:df:67:29:57:3d:57:b9:82:
2a:55:cb:bf:bb:86:1b:d7:6b:1a:3c:24:a3:11:86:56:2f:b3:
f7:8c:36:e5:f7:2c:0d:8b:89:f7:6d:c4:94:01:de:54:6f:36:
93:12:57:af:75:37:a2:d0:b0:13:ce:63:5d:f8:53:71:4f:f9:
c9:fc:32:84:18:9e:eb:75:6c:6b:0f:08:4c:13:bf:55:a0:e5:
09:bd:75:07:33:46:ab:1a:cd:f4:c6:52:62:76:f8:1f:b8:d6:
3c:59:79:18:66:60:19:c6:b7:24:2d:6d:ec:c2:4c:8d:48:0c:
fc:6c:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 02:47:26 2026 by rpki-client