Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File: 2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier: ccRNOOcNl0QjiGUBfEJ/bw01VglIUnPAL91/v27obpQ=
Subject key identifier: 40:3F:BC:39:FF:A7:10:48:22:34:5E:3C:25:7E:B8:AD:78:BC:6E:54
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial: 019CF9F4336ECCFF13B09488FE9C62CFA0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number: 96
Signing time: Tue 17 Mar 2026 04:00:56 +0000
Manifest this update: Tue 17 Mar 2026 04:00:56 +0000
Manifest next update: Wed 18 Mar 2026 04:00:56 +0000
Files and hashes: 1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: J+pqkRka8wvoc+GSoHSoy49E7pkL/9bIkBH1H+Qj+ts=)
2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
5: UD_HyZZU2C19IaFsZaCL4In6Jj0.roa (hash: rylHESPK2fj3KtkgDq6dsWyTS65oKT4JjrBMW31aQeo=)
6: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:f4:33:6e:cc:ff:13:b0:94:88:fe:9c:62:cf:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Validity
Not Before: Mar 17 04:00:56 2026 GMT
Not After : Mar 18 04:00:56 2026 GMT
Subject: CN=403fbc39ffa7104822345e3c257eb8ad78bc6e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:28:ed:c7:28:c5:61:4e:68:86:85:28:6b:
6e:cb:af:b5:92:cf:f5:61:e3:90:2f:49:b9:92:5e:
d7:ad:e5:c1:40:a3:c9:70:3b:b5:89:04:e6:55:0e:
e6:97:21:c1:6d:2a:28:e0:c1:7e:78:10:2c:2d:9d:
c5:d8:4b:a4:c9:82:f6:ed:56:a3:70:6e:98:66:7a:
13:05:21:6c:f7:9f:50:42:3b:39:fc:15:b7:3a:06:
d5:22:00:24:67:db:dd:6e:1f:de:f7:8d:50:7b:f6:
2d:28:c1:28:57:3f:ab:8a:8b:61:f2:d6:9f:59:ad:
71:c8:84:35:67:eb:4b:94:ad:60:c8:e0:f6:43:1c:
b0:4c:89:b9:d3:cb:04:96:35:d3:4b:83:8c:32:e7:
64:8c:14:a5:51:df:45:9c:90:7d:9c:f8:b7:11:6c:
77:c4:1c:c8:81:9e:90:8f:af:bc:28:3d:5d:4a:ea:
85:96:63:06:45:30:5c:26:69:97:57:d9:5a:94:ee:
2b:f0:8a:4a:83:a0:58:ce:9d:6e:e0:56:38:68:36:
fc:8a:c4:cd:05:6f:d7:ea:f5:4a:f2:11:31:fd:14:
94:85:1e:58:d2:9b:9d:f9:43:67:27:10:fc:cb:65:
50:d3:56:e5:98:40:6a:d2:59:66:0f:d3:a9:83:d1:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:BC:39:FF:A7:10:48:22:34:5E:3C:25:7E:B8:AD:78:BC:6E:54
X509v3 Authority Key Identifier:
keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:15:09:43:a8:fc:90:ee:b6:72:81:f5:82:da:6c:ab:c1:c0:
e0:1d:15:25:e6:f8:fa:e5:9a:f4:31:40:04:b6:28:34:bb:29:
1c:b3:04:a5:3b:cd:37:a7:22:e3:e0:ed:70:69:aa:08:70:88:
b5:3b:b4:03:22:85:1a:fe:02:0c:96:91:03:d6:1e:e3:7f:62:
e6:a2:df:92:fa:fd:21:99:6b:52:0a:28:c1:74:92:3b:91:e9:
e0:0c:92:fc:14:6f:fa:62:ce:e6:5c:a7:3c:ca:18:b3:cf:44:
33:5a:b4:52:6d:f5:17:57:9c:8e:4d:39:68:b0:4c:77:11:2d:
d7:5a:85:bc:e7:d7:bd:64:61:ae:41:4a:4a:a1:27:41:ae:f9:
ee:ae:03:87:e1:ff:b5:1c:fd:77:60:67:72:98:69:2b:78:90:
7f:70:3d:47:73:c5:68:d9:40:9b:d4:20:51:36:8f:3e:73:10:
4e:d0:c1:38:07:c5:df:02:44:ff:ed:4c:07:f1:b9:53:40:49:
38:11:cc:f1:04:77:cc:b5:21:31:78:9c:65:21:38:d6:d4:5f:
bc:18:32:30:84:68:10:af:60:49:a8:f7:40:3d:50:ec:51:b4:
4f:8c:6c:4c:fc:90:33:65:87:ef:be:42:06:8e:12:17:02:21:
b0:1e:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:55:25 2026 by rpki-client