Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: qbefcTcHi19wh7R9W6U8VHVNZpN6ACIag8Ly6icxS6k=
Subject key identifier: A5:47:15:F0:50:AE:00:88:CF:D4:0B:42:77:1A:43:B8:97:E7:29:D7
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 019D389C269AE0219544ECE12597C3A2C26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 0591
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: UKCQT1y80J2emiXEQP9qe4jvqjDFtwXMy0a862SpR6g=)
2: QEDVpN2G6A8jozHnkTczP5khLY4.roa (hash: ZdNXvCdfzs3xB6Mj6+mdd2fmrySxnZPGoHLzOwpr9Qw=)
3: SLONluzu2xwR72NqplrGtpQrZpo.roa (hash: NPfEmtRHn9vSpI84XMYUKyQXNZvZB0z0PHOCtt/9Ui4=)
4: ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa (hash: AqWjrA8SVcF0FHIW5EIMMdA7ZJxrbLWslrcFVwHu7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:26:9a:e0:21:95:44:ec:e1:25:97:c3:a2:c2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=a54715f050ae0088cfd40b42771a43b897e729d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:6e:23:d1:0f:6a:9f:55:9a:6b:77:b1:9f:
8d:96:2c:4c:31:19:57:03:38:f2:10:f0:ae:d7:c1:
49:ee:0e:70:a8:2d:ff:f1:0b:af:21:96:5b:93:29:
fd:92:f6:91:a1:ee:55:35:37:05:e5:fa:5e:2e:61:
7e:c5:c8:76:e3:bc:56:b5:d0:57:dc:69:3a:33:22:
f6:61:62:d9:79:a9:3e:1c:3f:bf:ef:7b:3b:e2:72:
ae:7d:1b:72:97:30:d2:58:e9:85:69:39:14:79:9a:
51:53:ff:55:a5:93:25:71:11:e7:2f:41:06:73:75:
73:38:51:75:29:a9:7d:e5:ae:f6:a3:76:99:75:3a:
cb:47:09:8f:c4:75:dc:d9:eb:c0:50:92:4d:b4:2a:
29:0f:3e:17:a9:68:55:48:af:46:5b:70:b6:ec:83:
56:af:02:57:99:3b:5f:6c:18:f8:67:1c:84:58:ef:
02:f6:a7:ab:57:58:ae:65:80:65:de:6a:6e:2b:f9:
46:94:6a:ee:f2:4e:5d:29:c4:d9:16:65:a2:f5:50:
16:36:eb:1a:6f:a8:b0:95:34:93:d3:1f:1d:8e:2d:
f5:8d:62:2b:17:49:3c:e8:69:b8:79:3f:2f:03:cd:
a0:33:44:f0:f2:ec:b8:21:d7:53:3b:b9:f9:31:da:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:15:F0:50:AE:00:88:CF:D4:0B:42:77:1A:43:B8:97:E7:29:D7
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:73:f0:1e:3a:a2:6b:94:aa:3d:6c:65:40:ef:e8:af:1d:
34:75:c2:dd:eb:da:12:2f:10:32:17:e5:0b:7f:09:93:88:be:
cd:9e:5e:5b:6a:4f:3d:f7:7e:a0:b1:3a:4f:41:39:8e:28:e2:
1e:22:3a:ec:c2:d3:0a:f3:6a:fb:33:be:eb:95:19:19:9c:65:
b1:ad:b9:d5:b2:62:ca:eb:24:69:f4:37:38:9c:fb:45:ad:dd:
57:7f:3d:6f:40:48:f2:ff:21:9e:1a:1f:22:1a:e4:e4:fc:3c:
73:09:34:a1:c5:72:87:97:af:2d:9d:29:2d:df:21:4e:33:28:
aa:e0:ec:7d:69:e6:6c:b2:6e:8f:00:80:4b:9d:24:9a:b3:2e:
3d:63:47:77:70:81:c3:71:b0:fd:f1:7b:0b:d1:01:d2:79:a2:
46:94:fb:34:9f:09:bc:3e:b0:52:8e:7f:bc:ab:5c:5e:76:fa:
b2:31:15:55:75:5c:ec:30:f5:45:3b:e0:88:4f:0b:4b:c8:76:
c7:18:b7:66:11:33:d4:d4:95:90:2b:8a:de:00:c3:f0:1c:e9:
3e:da:78:97:f8:6e:18:e8:5a:7c:87:64:78:b5:85:eb:e0:f8:
b5:36:f3:a9:eb:c8:2a:f6:37:a0:c1:0b:3c:46:27:90:2c:ea:
c7:64:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:32 2026 by rpki-client