Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: gBx/7F6hDaZY49Ggj+A2GjFXRllhKKEB5+FfLQL8w/E=
Subject key identifier: FE:03:98:94:EF:08:E9:D4:3E:70:CF:E9:6B:A1:26:27:8B:00:EF:B1
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019D36E4432637ACA76EE142886DA066B109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 00:00:22 +0000
Manifest this update: Sun 29 Mar 2026 00:00:22 +0000
Manifest next update: Mon 30 Mar 2026 00:00:22 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: CcCFYijYoQSQfwadfWO9Mu/MOOGs6upiqxH+wxJODaw=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:43:26:37:ac:a7:6e:e1:42:88:6d:a0:66:b1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Mar 29 00:00:22 2026 GMT
Not After : Mar 30 00:00:22 2026 GMT
Subject: CN=fe039894ef08e9d43e70cfe96ba126278b00efb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:22:63:0e:fe:f9:fc:08:33:cf:2c:78:2a:
22:fa:73:51:6c:12:e2:14:3d:f0:ce:76:4c:7c:ce:
83:50:46:bd:a7:9b:49:db:e0:5a:60:0f:96:63:23:
39:52:93:40:f7:2b:c1:92:07:ea:1a:d0:19:47:5c:
20:7c:7f:54:7b:e0:20:91:9b:b8:29:2b:41:44:fc:
f5:31:ef:85:b2:1d:46:1c:a6:7a:dd:85:5b:37:aa:
dd:8c:fe:41:df:82:0e:6c:c0:11:37:0d:d9:91:6e:
04:3f:67:c1:6d:86:d6:71:19:e7:93:62:83:77:c5:
9b:fb:ec:d4:4f:df:28:29:b9:62:47:3a:d0:9b:cb:
2c:36:61:66:85:97:80:9d:c8:6b:b6:b1:d8:92:c9:
c6:40:03:b6:0f:88:5c:94:51:98:a2:17:d3:2a:f7:
d7:a9:df:df:ed:ff:42:ff:4d:3e:e9:d0:e7:8a:dd:
c1:70:53:96:c2:18:6b:fc:a8:85:f6:26:61:1d:48:
2d:94:3c:be:cc:14:16:17:3d:86:47:13:8d:80:9f:
c7:1d:da:43:54:74:5c:e0:57:04:13:2f:07:7a:63:
31:22:6d:92:68:d9:3a:b8:b5:13:71:18:f6:f4:f1:
ca:3e:ff:e9:4a:9a:27:a5:6c:23:83:58:45:47:c1:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:98:94:EF:08:E9:D4:3E:70:CF:E9:6B:A1:26:27:8B:00:EF:B1
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:34:50:12:7f:86:e6:ea:ea:67:12:5e:df:09:39:5b:44:88:
4d:5c:16:fe:06:9d:61:ab:ce:ca:33:ae:e1:58:1b:ac:84:64:
12:24:ea:92:fa:37:8e:8e:94:09:a5:70:f3:33:bb:86:5a:87:
30:09:74:e8:d6:70:44:ed:11:85:ae:e8:71:8f:bf:c7:cb:ac:
ef:dc:54:f6:31:c4:7d:84:fc:a9:b9:2d:1a:57:96:01:64:59:
ba:bb:8c:8c:fb:ae:59:16:fe:17:8d:f1:3d:e0:5e:3e:af:66:
a3:96:e6:7a:b7:81:c0:bf:61:75:0c:8d:63:06:99:99:ae:9b:
88:ad:ea:bd:a1:9b:20:ec:58:09:5d:9d:99:fe:9b:cd:f7:96:
7e:60:5b:c3:de:91:76:97:d1:f4:d8:0e:3a:eb:16:b1:3b:3a:
f4:58:0e:f1:86:e7:58:ac:a1:e6:2e:4e:7e:5e:a6:ed:4c:e7:
19:88:99:1e:eb:92:0b:aa:66:f5:d9:94:7e:3c:52:43:6f:7b:
c3:00:d7:9e:fc:65:63:8b:16:cd:ee:bb:92:bf:03:e6:f7:57:
7e:44:8e:a7:1f:9f:6e:53:92:46:fd:ba:d0:fc:1d:a9:fc:8f:
94:af:98:bc:1e:22:7d:bd:7b:a2:b8:67:8b:b6:fd:fe:9f:6b:
81:14:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:36 2026 by rpki-client