Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: 1kheShSU+2Mw01XR+gydWBU82XsZgdRF+cyJi3lZYFM=
Subject key identifier: E2:C3:9D:37:BF:50:F9:15:D4:88:CF:A0:2E:66:4E:06:81:C3:16:A2
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 019D3977DF93EF2CCDAB8447250F753B8E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0741
Signing time: Sun 29 Mar 2026 12:00:50 +0000
Manifest this update: Sun 29 Mar 2026 12:00:50 +0000
Manifest next update: Mon 30 Mar 2026 12:00:50 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: Wy9njgN9epy0skj6ZFXbK18jW/sOYfZW1TexpV0IW94=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:df:93:ef:2c:cd:ab:84:47:25:0f:75:3b:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Mar 29 12:00:50 2026 GMT
Not After : Mar 30 12:00:50 2026 GMT
Subject: CN=e2c39d37bf50f915d488cfa02e664e0681c316a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:06:77:f6:32:15:0d:a1:cf:38:ab:55:b1:
fe:67:d6:46:7a:b4:50:20:ad:60:0a:6f:a3:d6:df:
e1:81:10:d0:6b:76:cb:be:81:6f:34:f0:6c:d9:11:
d2:49:28:64:4a:0f:39:34:8a:76:38:a9:9c:47:70:
a3:d5:28:cc:9f:88:6a:61:63:d8:40:3c:9d:56:1b:
56:89:70:d9:ef:5f:18:1c:d2:8c:c5:a7:98:60:cf:
a3:ba:8c:a0:51:b9:c6:12:ba:f5:f4:3c:ab:50:ad:
0c:e7:59:47:72:c6:3b:43:b1:47:80:db:36:38:58:
c8:25:fd:bf:7b:28:bb:a2:35:4a:23:8d:c7:f1:b9:
79:82:91:a6:18:33:e1:1f:6b:e6:dd:1d:04:5b:ea:
90:66:f7:22:1a:21:50:e4:98:c2:42:72:8f:c1:1c:
3f:3c:44:f6:c8:59:b7:01:55:ad:33:77:0d:d1:12:
8a:25:8c:6c:96:6e:d4:74:4e:4c:bb:a0:3f:12:f1:
a3:15:ba:f6:f0:bc:60:a7:bb:21:b2:f8:9e:58:b2:
48:8b:c6:26:97:0c:64:66:5e:3f:3f:0e:5c:dc:0d:
a5:6a:09:c7:d7:eb:81:c5:d8:72:c5:e4:ce:cb:ca:
13:a8:ef:ac:43:71:e6:8a:45:b0:1d:82:93:28:01:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:9D:37:BF:50:F9:15:D4:88:CF:A0:2E:66:4E:06:81:C3:16:A2
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:5c:7a:b9:69:7e:b8:a4:bf:82:0e:a0:0a:5a:ae:0f:29:
bc:49:b6:3d:f4:87:b4:17:0b:fe:39:d5:cd:ef:f2:6c:0b:18:
37:c6:03:dc:45:d1:cc:cc:06:b1:6e:d2:5e:3f:8d:53:8f:1c:
04:24:f7:a4:b1:87:ef:bb:5a:3e:0e:63:5d:0b:24:fa:84:cf:
b3:a4:76:30:96:3e:c5:45:d5:5b:be:aa:aa:07:74:2e:71:8d:
3c:83:37:66:38:93:53:5f:8f:b2:e8:12:3e:d1:82:e6:59:ca:
aa:4f:9e:08:a6:31:af:af:25:1a:54:9d:4c:21:53:ee:30:d9:
fb:f9:28:6f:b7:59:4c:10:89:c0:ff:15:fa:63:cb:02:92:48:
bd:ec:c6:14:ce:6a:05:ea:54:72:3b:86:58:c2:cb:24:90:4b:
84:40:59:69:1d:fc:bb:6a:e0:92:e5:42:50:48:9f:6b:91:9f:
59:88:1e:de:48:03:9c:b0:9d:04:44:ff:3b:f0:38:74:0a:a7:
35:7a:b6:25:ce:5b:c3:cd:5a:fb:31:e6:6e:e0:40:d2:bc:fb:
74:ae:88:7e:7b:68:b9:85:ef:4d:9d:93:64:8a:c1:7e:03:f8:
2c:63:11:83:3e:0c:13:0c:c2:3c:04:04:78:16:96:e1:e7:73:
bf:b0:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:47 2026 by rpki-client