Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json)
Hash identifier: /q1jV6hA6uhyBWK0M5Zl3Dh8o3yRtXO+RpFIXRyRtCE=
Subject key identifier: E1:D2:CA:A6:E5:33:BF:A7:48:54:D0:C8:64:C9:B2:1F:BD:E0:2C:B1
Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Certificate serial: 019D375268D8552EDBBBFFBDEDC5FE003E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
Manifest number: 016C
Signing time: Sun 29 Mar 2026 02:00:40 +0000
Manifest this update: Sun 29 Mar 2026 02:00:40 +0000
Manifest next update: Mon 30 Mar 2026 02:00:40 +0000
Files and hashes: 1: 0AzcAjUT9N1QB5cI07RUAHonZOs.roa (hash: g0trIEnIrBs+QaX8y9UPsVa9Dhsva7/upARrEo7U33o=)
2: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: d81xmzuEiGMVmxiY4cqODxXTMDQ5yilQEfr4vvcRC84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:68:d8:55:2e:db:bb:ff:bd:ed:c5:fe:00:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Validity
Not Before: Mar 29 02:00:40 2026 GMT
Not After : Mar 30 02:00:40 2026 GMT
Subject: CN=e1d2caa6e533bfa74854d0c864c9b21fbde02cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:87:e3:c4:ed:61:6a:86:d5:86:d2:2f:f6:
2e:e0:41:8b:41:e0:86:f8:21:7c:12:40:5d:e8:7f:
c5:44:48:f1:c3:2b:68:c1:23:ac:2a:b4:f3:8d:f7:
51:80:e1:86:69:68:be:e6:54:b6:8a:f7:81:07:70:
93:b2:ed:ee:b7:ab:18:24:25:55:7d:b7:48:4a:0e:
64:93:3b:c4:97:57:5e:fc:30:a8:10:b3:b3:41:63:
f6:21:e1:65:62:48:13:35:b7:24:d9:0a:dd:05:c1:
27:ed:0f:2b:7d:d3:6b:21:51:49:0b:24:ee:63:31:
c5:5c:e4:6e:27:5d:2c:c7:c2:6b:73:d0:58:e6:2d:
00:be:aa:80:4c:83:92:43:c2:c1:6f:e3:a4:b3:d0:
85:e4:32:77:66:f0:45:0b:f6:3d:f9:25:68:d4:12:
9a:76:e7:7e:38:09:01:5f:39:c1:65:e9:af:85:0c:
93:71:aa:95:25:3b:67:e6:74:8d:8e:ec:1a:dc:8c:
29:2b:7a:3d:29:ea:d5:d7:38:24:d1:11:1c:a7:76:
7a:8b:67:85:5c:77:01:91:fe:ec:8d:ae:97:50:68:
ea:dd:78:65:9b:a5:4a:d3:f8:c2:47:db:1e:4f:73:
fd:be:c3:14:cf:7a:c2:27:ed:b4:09:96:83:a3:1a:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:CA:A6:E5:33:BF:A7:48:54:D0:C8:64:C9:B2:1F:BD:E0:2C:B1
X509v3 Authority Key Identifier:
keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2d:53:a7:6c:29:01:1e:83:16:93:c3:9b:6a:1b:ec:d7:d0:
41:1f:2d:5b:ee:34:2e:16:ef:9f:2f:f9:a3:23:cd:cf:c8:b4:
19:9c:5c:b9:d8:9f:54:eb:a5:bc:3e:ee:41:d5:4e:1d:d5:6d:
3c:03:54:ad:2f:f4:6a:9c:cc:b1:47:1b:76:65:39:02:b1:4d:
74:f8:94:af:6b:e0:11:fa:b8:19:04:97:59:7f:7a:42:dd:18:
cb:46:55:6b:b3:53:77:31:e5:fb:ba:17:f0:f9:d5:b3:6c:73:
5f:3e:9d:50:44:9a:c0:4d:1f:c6:c1:a8:b2:f0:f5:46:56:9e:
77:fc:e7:11:23:f0:ef:e1:e7:9c:83:f9:b9:f4:15:10:73:b8:
4f:f8:10:88:96:8f:c3:37:48:8d:06:b0:d1:f9:9c:0f:95:91:
bf:68:e7:34:e6:ec:22:f6:72:db:2f:42:f3:6e:6c:4f:94:a2:
fb:bd:8e:b5:f8:28:ac:7b:ea:a4:82:21:c8:9a:bf:38:71:4a:
49:36:22:e6:97:11:6e:d5:29:6d:1d:8b:50:44:a4:b1:df:d8:
a7:fc:8c:88:f6:72:87:30:99:ff:27:71:fa:fe:5c:16:4a:38:
f4:43:b5:9c:21:c0:95:bc:75:90:21:2a:47:fe:ad:17:cc:6d:
be:69:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:46 2026 by rpki-client