Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: xtbmjaMvcB0kObdWAP7J2ykGCG7Kxoz1/pg3Yb1gSJE=
Subject key identifier: 0F:82:B2:BF:15:96:C7:37:7D:D5:F6:1D:36:9B:36:FB:15:97:CE:B6
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 019D378984E8CEF7818C87B96168767668F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: 0302
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: or3TFvowwKPa4rq81bEDcCuZh9O1M4UNHNQPmVfexIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:84:e8:ce:f7:81:8c:87:b9:61:68:76:76:68:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=0f82b2bf1596c7377dd5f61d369b36fb1597ceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:10:f0:fb:34:9e:30:df:fc:f4:d0:85:db:
ae:dc:4d:9e:04:b8:a7:9a:29:49:2c:2c:9f:ae:e9:
3a:b1:11:ba:ee:38:46:ea:d8:3f:a0:24:48:91:05:
c3:ef:42:2a:ec:2d:15:45:e1:4d:88:da:0c:ec:17:
e4:46:88:b0:8a:49:27:22:80:ba:89:aa:ec:c0:7f:
b2:19:e9:0f:82:2b:4a:4d:70:57:1a:09:16:13:29:
43:68:54:87:0b:32:17:e1:8b:ec:54:39:f3:65:2c:
1c:95:54:38:82:79:b2:dd:69:77:79:40:f3:b4:d3:
b8:14:01:1c:f0:f8:5e:b3:0c:78:68:01:d5:34:5f:
e9:f7:e3:1c:c2:05:ad:6c:19:53:75:9b:f7:fb:fb:
6b:4b:11:2e:fb:59:93:09:3e:eb:8c:38:70:9c:bc:
5c:c6:86:44:ca:be:c6:6d:ed:95:de:75:8a:1e:25:
68:be:b9:da:59:2b:4c:4c:f1:31:ff:73:97:61:6d:
7d:fa:6c:af:0b:d9:3e:a0:50:8d:f5:61:bd:36:eb:
bd:41:33:30:63:2a:e5:53:45:6e:ee:84:96:57:91:
f1:04:02:f9:50:37:8a:22:e0:5f:42:9f:6c:88:fb:
8a:40:4f:26:fb:ff:e9:79:b2:f6:ba:21:0d:2f:a7:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:B2:BF:15:96:C7:37:7D:D5:F6:1D:36:9B:36:FB:15:97:CE:B6
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:af:9f:7e:57:bc:bf:39:db:e7:6e:25:d4:93:e1:e9:1d:
e1:8b:b6:ae:0b:4b:54:1a:b1:6a:20:11:59:7f:a0:0c:fe:52:
51:da:5a:50:e0:3d:0d:37:57:a1:a3:f1:40:f6:b8:a4:3b:03:
10:a5:5f:2f:54:4a:5f:27:88:db:56:fa:55:bc:30:68:8f:4a:
d4:41:96:86:37:1a:fd:0f:d8:fc:0f:58:0d:91:c5:df:0d:16:
d2:e2:57:98:34:96:b6:30:4d:41:8f:f9:ee:e0:5f:63:70:70:
4c:2d:9d:f2:eb:b3:d3:6b:fa:8a:5f:fd:05:ce:02:48:0f:c9:
93:7a:3f:53:2f:8e:0a:04:60:d1:78:de:0c:85:34:f6:1e:82:
a2:c3:43:61:9e:5e:38:57:4f:0f:be:3a:4f:28:25:7a:2d:58:
90:14:24:86:e6:33:93:59:2a:7b:2c:81:aa:6f:fe:5e:ac:5e:
13:42:ea:9e:4e:72:5b:ce:a7:e7:24:ae:4c:d6:33:72:17:de:
a2:e1:12:f7:f9:33:6f:e3:a6:96:97:38:b3:d6:c9:1e:a3:c4:
88:c4:54:ea:ac:be:dc:e2:c2:e5:f4:dc:a9:ad:4b:63:93:f7:
ea:0f:58:ad:23:52:aa:2c:6d:72:37:87:49:98:63:82:ef:6d:
8b:e6:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:51 2026 by rpki-client