
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier: JF3+pDsJibKjSgC2kLVaKCZwgxDpqgQzayEBkibQmmw=
Subject key identifier: 16:95:63:2C:93:0F:B4:6A:46:AD:C3:67:F3:AD:E0:FF:98:7B:12:C8
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial: 019D382EC755467A59454229CC29C117D44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number: 0F5A
Signing time: Sun 29 Mar 2026 06:01:22 +0000
Manifest this update: Sun 29 Mar 2026 06:01:22 +0000
Manifest next update: Mon 30 Mar 2026 06:01:22 +0000
Files and hashes: 1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: 01QrbgAbyt4xKecTudggM1eiR0sqiQcfNIrbKC42KN4=)
2: Mt9Wz8CiJyE1vhw9jtbceg6H-ug.roa (hash: fJNiy9ne0mTwA4HHTmShZYQguekNk9G6a4WDwn5xHSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:c7:55:46:7a:59:45:42:29:cc:29:c1:17:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Validity
Not Before: Mar 29 06:01:22 2026 GMT
Not After : Mar 30 06:01:22 2026 GMT
Subject: CN=1695632c930fb46a46adc367f3ade0ff987b12c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:c2:7d:f1:ca:4d:1e:42:68:1d:da:49:8c:
69:c2:96:14:95:42:cc:84:ea:f1:7f:d7:ff:bb:8f:
ab:7a:8f:31:37:b6:47:02:ad:81:17:30:ec:a3:9b:
ba:dc:d2:d7:37:13:bd:6d:76:5c:a9:11:9a:7f:3c:
dc:8a:7f:54:19:50:32:2c:70:18:0a:7c:bc:a7:40:
a3:45:ee:99:5e:a6:c0:82:e2:4f:f6:33:75:a6:1f:
0d:b0:0c:99:15:78:e2:d4:7c:1d:78:6f:c2:38:64:
7d:64:e7:d0:f4:d7:35:55:19:ee:6c:9b:0d:b9:4d:
4f:39:e7:78:d7:0d:5d:8a:03:20:30:88:10:10:b3:
ec:09:5d:a1:3f:22:3a:69:08:12:2f:2c:b3:da:a9:
cb:b6:7c:82:03:9c:4c:ba:e5:35:15:62:e4:85:bd:
d0:2c:e4:d3:06:c1:7c:f5:d0:e7:e3:ab:60:82:8a:
9a:4e:91:64:d1:8a:79:55:14:5a:de:92:11:0e:f4:
e4:1c:7b:6d:77:9d:fb:89:ab:5f:5c:6d:2a:40:ef:
18:94:80:a9:c7:b8:c6:cb:95:0b:58:7f:b9:4a:2c:
f4:f0:03:0e:d5:42:21:5d:7f:e3:24:bf:00:65:08:
c0:b1:f5:12:94:fb:bf:af:a4:dc:4a:54:c9:fc:c9:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:63:2C:93:0F:B4:6A:46:AD:C3:67:F3:AD:E0:FF:98:7B:12:C8
X509v3 Authority Key Identifier:
keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:c6:e4:1e:79:bc:f9:7d:eb:8e:aa:4f:ec:8d:c7:1b:01:
fc:52:d5:38:9b:69:1b:e9:82:3e:70:74:ec:eb:36:1f:52:1e:
36:4a:1f:df:be:99:6d:eb:6c:c4:9e:84:8d:76:5e:7c:f5:4a:
04:c9:7b:48:68:b5:20:72:c5:8c:2c:0f:78:e6:b8:30:bf:f8:
8e:d8:d5:ee:00:b0:a4:ab:b1:45:63:0f:57:7c:50:f2:a3:e1:
f1:fd:7d:0c:cc:44:54:09:c6:15:a3:71:9d:eb:3b:10:ae:1d:
a3:9c:b6:fe:f8:7e:b7:85:ff:e5:64:2d:e5:3a:bb:ec:45:9d:
da:2e:7d:57:e0:8e:40:5f:db:1e:31:25:16:49:fa:79:03:cc:
4b:6a:de:ae:f2:25:37:25:f8:67:7c:fe:e6:20:0f:b1:d3:fa:
b1:63:72:07:e6:7c:c6:22:da:83:ca:af:4c:16:fd:09:f3:42:
44:9e:ac:a3:39:d5:67:01:3c:96:cb:cb:77:16:0e:99:0b:3b:
fb:a4:04:df:23:f4:42:3d:52:02:2a:cf:0f:44:ab:b2:c2:69:
b2:50:45:08:fe:54:47:e3:a1:34:8c:b2:fd:45:97:4e:4d:41:
1f:d6:03:97:71:13:42:b2:75:3c:9a:35:ea:90:fd:71:19:cc:
dd:7f:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:45 2026 by rpki-client