Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: EwJdcMK70utmnnmdywlSpFK14mv4i24tXCfPOlNFDpc=
Subject key identifier: B3:79:4B:2C:02:00:09:94:32:44:B3:E7:6B:75:88:CA:D5:3E:D5:5D
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 019D17FE55004C4755C866119DE179FED862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0489
Signing time: Mon 23 Mar 2026 00:00:36 +0000
Manifest this update: Mon 23 Mar 2026 00:00:36 +0000
Manifest next update: Tue 24 Mar 2026 00:00:36 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: F1A8qeI0Xbkw892mLYEfx7G5aDD53IhClOVmI7yJD0E=)
2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 21:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:17:fe:55:00:4c:47:55:c8:66:11:9d:e1:79:fe:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Mar 23 00:00:36 2026 GMT
Not After : Mar 24 00:00:36 2026 GMT
Subject: CN=b3794b2c020009943244b3e76b7588cad53ed55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:e5:9e:4f:6a:cc:a6:55:6a:04:0d:d9:c4:
8e:fa:f3:48:d1:c0:a0:a3:8c:c8:8e:0e:2a:99:cd:
21:8d:f8:26:68:8b:c0:e7:bf:13:96:24:6e:27:38:
22:30:89:d1:a1:55:b4:22:97:e9:d7:5d:d0:79:23:
98:b5:d6:02:ec:4f:87:ee:00:39:35:3d:34:a6:e5:
81:fb:fb:91:f4:cc:20:77:53:bb:dd:f5:77:42:a7:
a4:ab:a5:64:ce:d0:11:a3:1c:6d:ea:21:6e:70:a0:
f9:7d:b7:f6:4f:1f:74:37:90:10:b8:00:fb:24:10:
20:80:d3:60:62:c1:54:68:19:91:df:06:1f:2c:c4:
42:73:c7:f1:d7:59:7c:11:ea:5b:f4:b2:1d:20:84:
2f:db:72:98:39:ff:cd:65:e6:e6:d4:bf:67:45:39:
8c:aa:97:34:eb:1b:8d:c6:02:60:06:d1:02:2d:bf:
55:62:0a:3d:ff:fc:6b:8b:ef:9f:df:4f:20:a1:3a:
ab:82:49:da:5f:98:31:aa:fa:ea:85:9f:f4:0f:15:
ad:b1:0d:ed:1d:89:45:29:94:fe:30:07:50:eb:3b:
9e:51:65:0f:0c:1b:6e:3e:89:e3:77:c4:86:7a:9e:
bf:d3:09:dc:58:85:44:f1:92:84:dc:70:8c:5d:bb:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:4B:2C:02:00:09:94:32:44:B3:E7:6B:75:88:CA:D5:3E:D5:5D
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:00:55:da:2e:54:f8:f3:7b:aa:53:dd:f5:2f:4a:cf:c5:7d:
45:41:e3:b0:d6:4d:7a:a5:1e:e2:0b:31:57:21:70:37:8e:04:
e3:7f:d0:9b:55:b5:90:b5:92:22:1f:75:5d:31:2e:a0:a2:b5:
16:47:40:63:94:ef:7e:52:28:d7:27:85:00:df:66:38:e3:5c:
e6:aa:27:5a:ef:d4:2e:2b:40:ac:62:bf:16:db:b0:46:36:a8:
6f:f1:da:46:52:29:4f:8d:18:03:50:5f:f9:dd:21:6b:07:cf:
4f:ba:67:51:d8:c3:d3:35:2d:21:65:e8:96:30:79:e0:14:69:
c0:07:f2:52:2f:15:49:89:63:cd:ee:0e:58:cf:56:5c:d0:a5:
e1:ea:0b:64:e5:7c:7a:39:d4:13:2f:09:3f:5d:b7:7b:c9:28:
57:69:66:6b:0d:c7:20:81:6b:ae:a4:50:4b:f7:f3:f5:55:af:
8c:e3:a5:e7:b0:c7:b2:1a:c3:70:05:fc:e1:ff:fa:f4:6f:b8:
b8:ce:d9:ec:1e:6c:93:b7:9d:cd:23:72:b5:57:24:15:fd:cb:
38:d4:76:59:0c:12:c6:02:7d:73:00:66:67:2e:7a:59:53:00:
c9:34:db:5d:65:4e:20:0a:2c:0b:33:af:48:1a:5b:0f:5e:39:
15:9d:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 04:18:26 2026 by rpki-client