Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: LXyxnX47/ddVbRE46mNEEDa7YnIVjdjc+ZIscFcfkP4=
Subject key identifier: 57:AE:6D:E6:5C:30:21:26:09:CA:17:7A:27:48:E3:D0:FF:AA:DD:BE
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019D3977F5E491E3ABE5EB3625A2C45A03FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 18A4
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: 3kKM+DbgJJCx2/v5de6KbLgPVBpbGIjlaZ77cDorots=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f5:e4:91:e3:ab:e5:eb:36:25:a2:c4:5a:03:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=57ae6de65c30212609ca177a2748e3d0ffaaddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:f8:d9:2c:dc:1d:c0:dc:26:de:0e:9c:b4:
6d:cb:73:13:bc:e9:eb:c0:d9:99:f9:34:6d:7b:48:
d9:e6:00:67:6b:b1:5f:52:cc:74:a2:15:87:79:1d:
8e:22:ee:75:9e:39:ca:84:16:bf:3f:6c:c1:2f:b8:
f1:eb:c3:fd:cf:8b:a3:8c:79:0e:67:bd:f7:b2:1a:
fe:f1:08:cb:3d:83:37:3e:b0:8a:29:74:49:1c:7b:
23:c8:f7:c5:ef:bc:0c:e6:44:f9:23:8d:88:f9:98:
60:d6:e6:fe:12:ff:3f:3b:50:c5:c4:bc:8b:a2:97:
d0:f0:f0:45:33:21:57:31:34:91:11:73:21:66:30:
7c:10:aa:a2:de:56:9d:cc:75:65:24:92:56:1d:b8:
80:29:31:01:94:b9:c2:51:04:f3:7f:56:28:88:44:
b2:87:d7:15:77:3f:fb:85:e4:73:8f:63:83:a7:cc:
2f:29:08:76:04:02:fa:2e:19:ca:78:97:89:07:ef:
1a:5a:4a:3e:6e:e4:a4:4a:ee:ed:06:83:3a:1a:b8:
b7:eb:a4:c7:f6:a3:44:12:69:dd:1e:51:1f:77:a5:
ab:e8:36:d5:52:33:cb:be:34:ac:57:a2:0e:74:3a:
91:1c:47:d5:5d:73:a4:ff:c7:40:aa:dd:b8:ad:2a:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:6D:E6:5C:30:21:26:09:CA:17:7A:27:48:E3:D0:FF:AA:DD:BE
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:33:f9:61:e7:c2:c2:6e:7b:d1:16:24:2c:09:85:6b:58:15:
d8:9a:0a:f7:10:e4:02:12:e0:cb:bc:f8:d5:ab:66:19:c6:81:
1f:e0:a8:2b:e5:e2:e6:3f:fa:2b:46:68:88:31:64:2d:7c:3f:
87:e3:58:42:72:40:ac:f7:68:dc:4e:09:be:ec:f8:e3:cc:67:
a8:3d:2c:95:93:53:90:db:44:f3:e0:c4:51:f1:2c:70:c0:cf:
34:74:4e:30:34:8e:45:37:45:74:18:04:2d:81:4c:a7:98:1a:
9f:cd:9f:87:80:2d:1d:ec:7e:40:a7:ad:12:de:3e:a2:ce:ea:
0c:4c:88:1b:f0:69:88:78:0e:e1:94:f7:97:ab:37:8b:58:e8:
b9:ec:2a:d6:fa:b9:d7:a4:ad:3d:d6:7a:07:56:5a:8a:9b:9c:
fb:ad:68:a1:5a:69:e9:25:ae:f6:bb:4c:ab:80:ba:03:ea:51:
40:86:a7:38:4f:39:0a:01:ec:50:e0:da:49:c8:a5:79:65:6d:
2e:be:22:d7:a2:20:0b:85:b1:b9:48:21:7b:89:89:9b:96:1a:
bc:37:71:b2:24:f8:a0:f3:ad:8d:d3:48:01:e9:d8:1f:04:34:
51:3a:37:de:85:c6:df:39:a1:8a:00:b4:99:51:eb:4c:8f:5c:
e7:e8:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:12 2026 by rpki-client