Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: kMFrIfniDz7qkxnDjXVCXzdmL7a4gxej1PIeH5CXCTg=
Subject key identifier: 3B:65:57:66:5A:17:B5:20:3C:BB:FF:45:C3:E1:92:DC:F0:53:F5:28
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019CE3DA6EB7FF24544953C8C76AC3DBF7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0A69
Signing time: Thu 12 Mar 2026 21:01:09 +0000
Manifest this update: Thu 12 Mar 2026 21:01:09 +0000
Manifest next update: Fri 13 Mar 2026 21:01:09 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: XxGeF1uj9EVGI3V2aG/TkC4E/NQ+8jf9uUAdnZWwIus=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:6e:b7:ff:24:54:49:53:c8:c7:6a:c3:db:f7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Mar 12 21:01:09 2026 GMT
Not After : Mar 13 21:01:09 2026 GMT
Subject: CN=3b6557665a17b5203cbbff45c3e192dcf053f528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:43:70:42:ed:07:35:2d:af:52:bf:69:8a:
7a:50:53:2e:d4:52:e8:9a:be:63:f6:b8:0d:bb:72:
98:36:48:73:4b:d2:d6:bd:4a:03:95:98:29:0b:1d:
77:d2:45:9c:61:33:a4:1a:bf:7a:73:48:52:18:85:
25:8d:0d:04:fb:c8:a2:d7:0a:eb:18:5a:75:66:2f:
c3:b1:40:d3:2a:d1:21:5d:65:8c:1d:0b:9f:21:cd:
08:ec:10:83:14:aa:48:5d:ce:5d:6e:3d:43:7e:41:
44:3e:1f:81:eb:9e:a0:8a:b5:18:75:81:95:58:05:
ab:1b:25:2d:51:dc:1a:b4:1e:5e:f5:61:3b:d5:1d:
9b:b2:39:e1:31:5b:c7:a4:16:47:b6:28:09:e0:40:
99:8e:0c:f8:ee:db:0d:ca:30:10:d7:54:2b:51:4f:
e8:ae:63:c9:20:1a:ef:df:65:a9:51:5c:7b:00:1c:
76:74:95:5c:68:f0:c1:b1:4d:23:f4:7d:01:9c:01:
79:c2:7b:75:9b:91:e1:92:89:84:9b:3f:2d:a8:8d:
44:7c:8a:a7:12:81:87:1b:fe:1f:43:4f:47:61:a9:
6e:84:1f:37:6a:c7:11:5a:59:7c:61:de:74:d2:5d:
69:34:86:fd:cb:7c:7d:60:e0:d4:1e:25:69:f5:37:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:57:66:5A:17:B5:20:3C:BB:FF:45:C3:E1:92:DC:F0:53:F5:28
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:93:f7:14:9b:8d:79:9d:84:ab:34:c3:67:de:c0:b3:e1:
89:29:6b:23:e5:7b:e7:72:f7:fc:8a:cb:6b:a4:99:0a:84:cc:
0a:53:16:da:db:37:0f:7b:a0:cc:4f:9b:75:d4:6c:43:a2:6e:
ec:59:64:ac:06:0a:65:4e:52:dc:21:83:0b:48:6e:e7:58:ad:
80:e2:cc:14:01:88:c6:43:d0:c9:b7:0e:f2:af:84:b2:84:51:
be:81:5f:8c:e2:90:31:4b:0a:0f:0c:5d:d3:99:13:18:03:a0:
ac:88:34:8b:4b:d6:77:c1:37:8d:79:ea:d2:0a:e7:2d:f7:9e:
c9:bf:04:3d:a2:53:b4:29:95:e4:93:75:cb:1f:95:f3:07:31:
f0:75:71:2a:44:0c:15:8f:82:e3:93:f3:53:d1:c2:88:b4:08:
af:f1:d5:72:7c:61:9f:25:75:df:8e:e7:d4:01:12:22:ad:4c:
e4:a2:e9:0e:7e:2b:8a:93:5d:3c:53:70:02:50:d5:91:09:33:
4c:e4:01:6c:04:dc:c9:4b:37:19:53:20:29:31:28:2f:9f:59:
b2:15:3e:3f:bc:12:ae:6d:17:a4:c0:eb:99:01:4c:db:df:49:
bc:24:7a:8d:9e:25:80:44:69:5b:11:e0:f5:e5:90:12:44:8f:
22:dd:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:10:22 2026 by rpki-client