Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: bohIB1/K9LefUJYkuPxYa9mjBQZTMw/8BUOgQ7+6wzo=
Subject key identifier: 69:1A:09:36:BE:36:BB:CF:AB:5C:3E:31:EB:88:F7:C8:76:D3:07:EA
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019D38D3CE84DDE8F250F60225D4D011C327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0E6E
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 7S8tqpn39TmlCs50LZy30DiLeJ4/KM6kl8O0j1f56Ik=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ce:84:dd:e8:f2:50:f6:02:25:d4:d0:11:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=691a0936be36bbcfab5c3e31eb88f7c876d307ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:41:8f:80:ed:d4:0f:29:51:c7:cb:57:87:
98:bf:91:bd:cc:d5:fc:5e:b8:79:50:89:87:d4:15:
c7:91:0f:b7:ce:86:28:a0:1d:30:5d:5f:83:91:01:
bb:f5:03:7d:77:04:ca:e8:14:c6:76:d3:43:48:3f:
9b:f7:6d:69:40:ef:aa:ee:ee:cc:af:ad:81:d2:c1:
b1:2f:ee:29:0e:60:e9:b3:31:ab:e0:08:31:c5:fe:
34:ad:7a:77:10:c5:80:d5:0b:f7:00:68:1d:91:08:
18:86:46:e7:9c:9c:8a:42:a6:44:39:5d:64:e0:40:
84:cd:99:a5:4f:48:5e:83:db:02:89:21:a4:7e:00:
d9:f6:02:19:3e:24:86:af:a2:00:98:e5:8f:20:29:
d7:6c:c9:12:bc:25:92:2b:fd:68:b1:f0:ab:49:ee:
b0:ed:1d:cb:62:b1:58:07:57:15:5f:61:99:23:71:
dc:64:23:77:61:fe:37:52:d4:fe:67:66:17:b2:47:
a7:a8:88:5d:05:c4:5a:3d:ce:02:55:fc:50:51:a0:
16:c5:f7:28:4e:85:d1:d0:31:4e:52:03:0a:d8:66:
16:cf:92:f4:28:29:83:4b:7a:d9:c6:07:5b:7f:3e:
5b:5d:f3:fe:f7:af:d4:82:48:7d:61:3f:88:68:3e:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:09:36:BE:36:BB:CF:AB:5C:3E:31:EB:88:F7:C8:76:D3:07:EA
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:ce:ba:1b:32:70:0e:6f:3e:42:41:7f:c4:a1:e6:3d:49:
15:f1:0e:71:c8:01:38:58:1d:83:27:fa:19:f8:4b:b4:ec:c8:
71:d6:16:29:55:15:7e:df:b6:b1:1e:d6:d9:32:45:d6:44:cb:
bd:63:93:50:b3:4f:a2:30:ba:ca:24:20:f2:db:86:4f:82:21:
b9:6c:48:2a:61:00:87:1b:1e:2a:57:88:53:e9:00:5e:45:83:
fa:f0:02:88:22:c7:03:41:6a:14:97:5a:d2:95:f2:9b:20:32:
89:15:65:34:2c:3c:72:35:1d:9f:0f:23:26:57:d0:82:8f:71:
57:d5:d4:ec:b1:d8:e9:3f:bb:31:ee:b5:ea:82:02:8c:fb:27:
96:35:ef:be:70:3b:68:be:6b:b0:ef:a0:f2:06:ce:5e:a5:b0:
37:97:23:a4:bd:28:25:b8:20:dd:03:ff:52:b2:ae:6f:72:d9:
8f:09:49:68:8f:34:69:12:9a:f8:f1:a3:62:1b:9e:ba:fa:b7:
7f:6b:55:cb:5b:1f:0e:0f:7e:de:31:9e:10:8c:41:74:17:b0:
3c:44:d4:3e:79:07:b3:e5:ba:0a:fa:1e:c6:0f:43:93:52:f0:
13:7f:46:df:26:8e:dc:59:10:36:7f:5b:46:a5:22:45:80:b3:
fa:6b:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:51 2026 by rpki-client