Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: 8Vhswa3twL5PUcFL+W+ywJZegflbkLqhWjHZfczbd40=
Subject key identifier: 02:24:BD:91:DD:FC:60:F8:E3:91:66:BC:EA:38:0E:B7:10:F6:55:02
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019DCD86F545270BF8AD48827DD8F6A4B533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0AE2
Signing time: Mon 27 Apr 2026 06:01:06 +0000
Manifest this update: Mon 27 Apr 2026 06:01:06 +0000
Manifest next update: Tue 28 Apr 2026 06:01:06 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: wSzO30RPgj5wLycrDVMU2qJauRk4UPSyEo5YFv9K5bQ=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:f5:45:27:0b:f8:ad:48:82:7d:d8:f6:a4:b5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Apr 27 06:01:06 2026 GMT
Not After : Apr 28 06:01:06 2026 GMT
Subject: CN=0224bd91ddfc60f8e39166bcea380eb710f65502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:b9:47:78:6b:be:58:1d:fb:a5:ba:27:7a:
90:60:e6:b1:3b:26:07:2a:9b:26:55:42:c3:38:b8:
08:b0:b3:1a:82:64:69:1f:f0:d4:ba:11:fd:b3:83:
24:18:57:f8:cd:8c:67:bd:95:8a:b9:bd:66:0f:55:
13:31:e4:f1:fe:8d:d7:b9:f3:78:56:3d:1d:1f:94:
41:86:b7:f5:36:2c:80:ce:48:aa:d2:51:21:fc:b8:
4a:28:9d:af:04:5b:a2:7d:f1:9e:c7:82:95:da:3a:
81:5b:f0:d7:04:9a:ee:2a:ac:52:d7:d2:b3:73:b0:
9e:b4:fe:57:74:47:c9:d9:e6:11:34:a2:20:6f:01:
14:d5:a9:35:e7:60:42:11:e9:52:b5:f1:39:5b:ce:
1c:36:b7:66:d8:2e:51:32:16:ac:e4:86:74:52:01:
54:64:7e:c2:40:67:36:53:d1:6e:82:5c:8e:87:b1:
cb:09:c5:24:d4:0d:86:df:04:17:e5:60:70:f9:7f:
da:14:ce:d6:5e:bc:92:9b:35:c3:e7:d0:40:9c:9e:
23:b6:34:a5:cd:67:9a:94:ea:9c:4e:ee:e0:81:ab:
74:5d:1e:ec:9f:f4:a1:22:fc:43:8b:ab:99:d8:e9:
cc:2a:bf:57:0b:2d:b0:93:c3:fe:b7:6e:2f:30:4c:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:24:BD:91:DD:FC:60:F8:E3:91:66:BC:EA:38:0E:B7:10:F6:55:02
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:c3:b4:f8:d2:b1:c0:bd:65:4e:07:91:09:09:01:a1:3c:
53:fc:ee:6f:62:ba:15:bf:3b:10:05:11:aa:fb:65:eb:2b:c2:
b9:9f:51:ef:f7:b9:c9:6d:c9:f6:c1:27:22:8c:c7:f7:f7:f9:
32:e9:12:eb:c9:67:9e:0e:3e:00:c3:22:6a:15:1c:23:67:ef:
f4:e5:fd:76:f3:43:83:66:3c:dd:9c:7f:c1:69:e0:f3:4b:c1:
61:21:87:ba:6c:0c:12:15:d4:b4:66:f4:fc:f9:97:a7:99:55:
ab:23:6f:7f:c6:81:a2:87:e3:44:59:64:86:7b:aa:3f:c3:0a:
ed:36:9b:de:78:75:27:a9:5a:2f:b6:9f:9a:eb:15:ae:f0:14:
b4:b0:72:31:41:5e:3d:4e:20:10:17:01:1a:f8:4e:de:45:90:
b4:e0:8f:34:e5:60:5d:e1:b2:b9:b8:18:c4:01:3b:ed:2c:03:
68:6c:4b:4b:a6:00:64:2e:c9:a5:f4:cd:74:dc:67:18:31:58:
f3:30:f5:82:ff:ea:3d:2a:ee:74:9f:39:a3:1d:94:99:ef:e2:
3a:9a:09:18:c3:50:29:fa:7a:ef:e0:47:1a:38:e2:d9:e0:e8:
dc:7a:49:df:e3:cb:f9:52:d2:93:6f:0a:58:34:bf:68:0a:10:
b9:17:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:59 2026 by rpki-client