Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: xSMI9+wz0TxX9M3gRgzoiX9uT7Mug4BwAW+NTzfbbjA=
Subject key identifier: 1B:F6:32:F7:4A:17:A1:E5:CC:AF:DE:51:9C:37:02:C7:6F:5F:55:30
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 019D3B66B0E95CB312001C9D65EAF43D1A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0742
Signing time: Sun 29 Mar 2026 21:01:18 +0000
Manifest this update: Sun 29 Mar 2026 21:01:18 +0000
Manifest next update: Mon 30 Mar 2026 21:01:18 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: DPDRBoqqBco09HOGWCmFh7z0hbjWhuWG9XzoWLrnEGw=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:66:b0:e9:5c:b3:12:00:1c:9d:65:ea:f4:3d:1a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Mar 29 21:01:18 2026 GMT
Not After : Mar 30 21:01:18 2026 GMT
Subject: CN=1bf632f74a17a1e5ccafde519c3702c76f5f5530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:92:f6:ed:45:bf:c1:04:2e:c4:ef:03:00:
88:f9:bb:f9:db:d3:53:7e:ba:98:a5:cb:94:5f:7c:
94:49:a9:d1:eb:44:bb:78:56:ab:2b:17:37:1a:40:
14:95:de:62:bb:fa:cd:43:a0:a0:af:6d:51:b6:d8:
7e:f5:3e:32:da:81:37:84:bf:f5:55:90:9d:4e:97:
96:90:46:e2:1c:56:ab:d5:62:7a:29:97:b3:5b:7d:
a9:fe:2b:07:0a:ee:e5:93:df:7a:9b:b5:c2:77:17:
ea:0b:84:8f:fc:3d:47:a8:df:59:fc:68:76:f3:f4:
fb:a0:e8:4e:bb:e8:78:49:a6:8b:7a:5e:39:38:1f:
9a:87:50:1a:51:89:c6:cb:4b:6f:a8:8e:69:29:be:
55:fb:be:03:06:c3:38:c0:ab:6a:b9:a1:c9:6e:70:
d4:c9:71:b5:ca:f7:4e:8a:42:a4:3a:5e:22:b5:9e:
62:97:93:4f:7a:6c:08:c2:65:36:6f:20:b0:65:ce:
70:25:78:1e:ee:1c:7b:25:e6:79:fe:72:0c:fb:a1:
4d:3d:0a:f1:57:a0:f1:78:41:43:cd:0d:eb:2d:76:
22:fa:e9:73:bf:6d:95:84:40:bf:2d:7f:f2:d7:51:
a8:dd:67:1f:e6:a4:bb:f6:82:cc:82:03:9f:8d:39:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:32:F7:4A:17:A1:E5:CC:AF:DE:51:9C:37:02:C7:6F:5F:55:30
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:35:54:6d:04:a3:7e:8f:f3:76:b9:75:ba:56:0f:3c:6c:
c4:60:f8:4d:98:08:dc:93:98:7b:8b:1e:d8:13:52:31:65:99:
79:31:2d:5b:d6:a3:8d:96:7c:0c:7e:60:77:b8:ae:68:c5:83:
4b:01:27:d1:15:7a:fb:7b:d8:a8:91:5f:a6:fe:22:10:8a:1d:
db:0f:d7:72:db:13:16:b1:cc:44:8c:dd:b3:2f:d6:3b:f8:65:
d6:4b:1a:db:45:11:07:93:d6:b3:35:74:01:f6:be:a3:2b:e8:
ab:80:28:db:32:39:fd:34:75:4c:72:8a:5e:79:cf:a7:cf:08:
3e:e2:18:dc:59:55:fa:17:f4:62:89:63:ff:48:dd:86:bf:68:
d0:9b:cd:58:5d:77:8c:de:b4:ad:a5:36:b9:f3:c1:02:17:e6:
a9:6f:95:4f:d2:f8:cc:e1:04:fa:f8:87:1c:30:99:40:53:e6:
f6:2a:a7:59:98:8f:e8:f9:d1:ca:a2:a0:14:f5:67:6c:a4:f0:
91:ee:93:53:be:94:1e:65:ad:be:11:de:ea:07:5e:f2:0f:85:
cc:ea:9c:48:9b:26:7c:e1:df:d6:22:6a:f5:44:7c:23:35:72:
17:0d:e3:bd:26:f3:b1:e4:11:40:43:c0:55:40:b6:f7:0a:dd:
79:ae:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:38:50 2026 by rpki-client