Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: BC3HEUmgK11+Kq+lsVXNSowR7KC/tIciXPXJ75tm9cY=
Subject key identifier: 74:0A:62:62:DA:1D:3C:9B:47:AC:02:E2:C1:E7:5A:33:13:43:02:8B
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019D382E255302440C96C0976E1CEFBD4F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 022A
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: N2E8QWLVz/ALe97cYzUYY+FzkS5PbMMttulXNsbckpg=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:25:53:02:44:0c:96:c0:97:6e:1c:ef:bd:4f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=740a6262da1d3c9b47ac02e2c1e75a331343028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:a5:fd:d2:8d:e2:09:9c:dc:0d:26:cb:87:
d0:44:24:bc:da:48:2e:53:59:70:4c:bc:f7:91:f1:
65:da:57:d8:49:cc:a3:5e:25:dc:89:b6:c0:bc:43:
74:2a:10:28:07:0e:7c:d5:d2:74:20:13:c1:aa:ea:
72:97:46:cc:fa:30:3c:b1:a9:99:cc:a3:76:fb:90:
18:b0:be:9c:e0:ee:3d:90:66:d3:d1:88:e6:0f:48:
73:e6:fd:4b:03:fb:a5:93:4e:50:92:5c:c1:41:35:
50:20:1d:4d:1b:3b:81:69:4c:3f:04:06:09:a8:fd:
35:87:af:9f:9e:e2:45:da:ef:59:57:9d:ce:d1:bb:
ad:d0:95:dd:23:8a:0c:25:9e:68:ad:35:ab:b4:b5:
c1:14:8f:ac:b0:71:db:c4:ac:4c:fe:0f:6c:eb:0e:
ba:5d:7d:a0:4b:9a:2f:87:cf:eb:aa:6e:0e:30:ee:
8b:1d:5d:09:4e:1a:21:d3:4b:09:1d:71:02:a2:47:
83:d2:0c:6f:cf:ec:f2:30:75:2e:37:4f:99:e1:9c:
b3:41:44:9e:a0:25:d9:70:5a:d8:62:1c:45:d1:b8:
1a:9a:64:64:d9:0d:d5:c6:76:19:bf:e9:36:58:ed:
06:a6:26:2d:1d:cd:47:70:be:ab:b2:7c:2c:63:e8:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:62:62:DA:1D:3C:9B:47:AC:02:E2:C1:E7:5A:33:13:43:02:8B
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f9:d7:33:62:3a:68:31:59:e3:a7:79:3c:16:90:ae:94:55:
23:be:ed:40:d0:f1:e8:17:ce:f0:d4:b2:e9:14:c6:86:72:cc:
82:9c:89:61:03:de:fc:46:fa:09:07:ee:91:73:6d:9f:97:8b:
3e:71:76:96:27:e2:1b:98:4e:4f:ee:99:67:ed:84:1f:7f:0b:
45:ef:37:ee:a6:c2:76:89:7c:c7:4c:bb:66:1a:ba:3e:3a:a6:
52:eb:a3:e7:15:02:5f:36:2f:5d:4a:8e:38:3a:6a:36:dd:0c:
b2:3b:a1:7f:bf:85:7e:b6:4f:f5:ba:d6:76:c9:d4:53:ad:5b:
a9:79:bc:1a:ee:0d:8f:3b:f2:42:3b:80:ff:0d:99:76:cc:48:
20:96:7b:57:ea:13:b8:0d:8e:f8:a6:3c:c5:2d:f1:b1:43:7a:
9f:e3:fe:ce:1a:23:f1:14:a1:b4:1b:f5:e7:22:69:ec:ef:4e:
9c:10:96:b1:aa:82:f5:c4:c0:d2:87:31:b4:8e:f8:2a:a4:d8:
91:f9:d4:d9:c8:c7:3f:81:69:f8:2c:ea:48:2e:84:d6:6b:c0:
40:33:5f:e3:84:48:2a:8a:1b:7c:80:2f:0b:b7:2c:4e:7e:f0:
bb:d2:42:06:c7:ea:7a:4e:77:c4:0c:88:37:2d:cf:5f:84:1d:
5a:88:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:06 2026 by rpki-client