Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: j2bxhAXSX3BSp6i8zqBOTqmyy0MvUls5VaXFeAFpVCo=
Subject key identifier: 45:98:BE:F0:A1:C1:6B:A7:63:F6:65:A1:44:75:27:73:42:08:A4:A9
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 019D3A5458CFDF094B82DE4366A9F87D08BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 16:01:39 +0000
Manifest this update: Sun 29 Mar 2026 16:01:39 +0000
Manifest next update: Mon 30 Mar 2026 16:01:39 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: +KlAkmHAFHFTg3cl2jg4aL7m0PZQuRkxnM310+LBEj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:58:cf:df:09:4b:82:de:43:66:a9:f8:7d:08:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Mar 29 16:01:39 2026 GMT
Not After : Mar 30 16:01:39 2026 GMT
Subject: CN=4598bef0a1c16ba763f665a1447527734208a4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:22:d6:df:e4:32:e6:e8:2e:d7:99:c8:82:
08:71:0c:03:9e:57:f0:75:2c:5e:db:55:73:c0:f5:
14:f2:46:0c:ac:aa:a3:57:9d:06:31:72:89:4b:ad:
69:e5:1e:68:64:7f:bd:4c:a7:01:c0:c3:38:1d:7c:
13:c9:bf:c3:93:97:23:69:9e:19:d1:3d:23:3d:40:
62:ba:0d:97:c8:9d:7c:31:b8:da:c3:4c:0a:6c:62:
93:82:3e:bd:65:7a:fa:b9:88:f1:de:8f:b3:af:de:
66:9e:ff:28:cc:ae:2e:c5:e6:0b:de:ba:c4:f9:de:
4e:16:7e:5d:8e:e4:d7:52:e2:39:bc:c8:43:ec:66:
2a:93:5c:61:9a:97:2e:d1:97:b6:c9:6b:f1:cd:bf:
e9:83:12:08:5c:67:3c:15:e6:d1:10:37:60:56:e9:
4e:ab:2a:d9:2c:f5:cc:9b:01:25:cd:19:9e:8e:6f:
78:09:df:1d:38:f8:b3:94:5c:8a:e0:d7:87:4a:8b:
42:37:e7:d4:77:02:b4:7f:d0:11:09:1f:4e:c8:ee:
a8:0a:f5:d9:e3:17:99:98:21:7e:77:4f:63:dc:03:
4d:fc:95:08:04:df:e4:b3:ed:7b:16:12:34:3e:45:
2f:0d:8b:2c:3a:15:71:7d:1e:e7:ac:17:c9:db:9c:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:BE:F0:A1:C1:6B:A7:63:F6:65:A1:44:75:27:73:42:08:A4:A9
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a6:ce:94:fe:d2:a8:79:e6:3f:a6:a2:12:c8:92:66:76:ce:
78:5f:ad:31:0a:e2:98:42:20:ac:f3:f1:45:f8:ca:51:d3:b3:
30:07:65:15:73:be:f4:1b:ed:87:49:4a:22:61:a7:23:62:1d:
e6:ab:97:1d:5e:43:d0:14:25:54:7c:56:97:f5:39:40:47:21:
98:65:b3:47:76:51:b3:69:49:27:eb:54:9b:ad:ee:8a:04:e5:
92:80:20:35:08:c1:4c:1e:f8:23:d2:6a:00:20:1c:b5:47:24:
72:e8:9c:4d:1c:57:5c:17:f2:9a:68:d7:db:86:39:db:38:e0:
a1:78:f4:da:e7:a8:ad:41:89:a4:db:fb:d6:14:62:cb:5b:f7:
27:80:11:f0:71:44:2f:eb:46:12:8e:93:b1:0d:10:f7:07:6c:
35:03:a0:20:11:5a:39:54:bd:d0:35:2c:7e:27:ba:a4:71:8c:
17:c6:08:9e:62:04:0a:21:b6:a8:31:75:42:6a:84:1c:62:fd:
37:d8:8e:9d:f0:5d:e3:95:5c:f1:33:e6:1a:84:a2:5c:6e:3b:
ec:9a:61:79:19:31:51:3e:60:fd:39:26:3a:0a:00:69:e8:8c:
c5:63:ec:fb:9e:65:ed:92:c7:f4:98:f1:5c:f2:90:aa:7b:cd:
8d:93:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:27 2026 by rpki-client