Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: FCpPoHLIPZi8kj//XezNFc9H74RuvxphUIYLZUL9Wo4=
Subject key identifier: 01:2F:93:73:CB:7E:92:D4:9B:F6:EA:EF:1E:72:32:0B:1C:07:5B:46
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 019D39AE841706FD767561A6DDD9DB992B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 1483
Signing time: Sun 29 Mar 2026 13:00:31 +0000
Manifest this update: Sun 29 Mar 2026 13:00:31 +0000
Manifest next update: Mon 30 Mar 2026 13:00:31 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: r946IdUFab1aMQm7XpAmrYsz9Ndmy1hlX1sCQhppxWc=)
2: URzbRc-qYA-jqGN2INzPGr3qGIs.roa (hash: pdWeMvzH737tn0fqVYH1dvD9WQjSjaeJBSWYN+4lA3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:84:17:06:fd:76:75:61:a6:dd:d9:db:99:2b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Mar 29 13:00:31 2026 GMT
Not After : Mar 30 13:00:31 2026 GMT
Subject: CN=012f9373cb7e92d49bf6eaef1e72320b1c075b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:c7:c1:44:b6:bf:98:41:7b:5a:11:25:03:
1c:d0:5b:88:65:be:c6:88:72:28:a8:cf:84:1d:be:
20:b7:a6:d8:63:82:2d:e2:9c:73:83:ed:e5:dc:73:
c6:3d:97:fe:ce:f6:4d:4b:1e:ec:35:8e:b3:e2:51:
ca:01:06:44:0d:dc:7f:fe:3a:0b:56:77:8e:36:59:
08:3a:b7:b2:f1:31:47:24:16:f9:a6:e0:9a:f6:77:
51:66:16:fa:9a:cf:30:e2:97:ce:95:c4:40:4b:4f:
b5:3e:d1:2f:1f:52:d4:6a:ae:8a:f3:fc:53:ce:d8:
6f:e6:51:56:28:c8:18:1b:eb:4a:dc:9e:9d:c8:5a:
ca:c7:d3:56:b6:f9:75:6d:4a:04:03:35:23:db:c5:
72:be:dc:46:c6:0d:8a:24:ae:af:4e:57:8e:6e:59:
bc:e3:16:40:98:1b:02:05:70:dd:69:2c:6f:2c:93:
f0:2d:99:44:db:7b:e5:4c:1e:fc:4f:54:af:12:a1:
2b:c8:6b:e1:4a:3f:d8:86:f5:3e:7a:e7:43:ec:06:
97:64:86:1f:27:4d:69:c3:2e:02:61:31:fd:e9:ac:
4f:db:b8:95:7c:4a:37:c5:99:7c:ac:d5:59:54:f4:
19:0d:24:03:84:6e:d9:3e:50:2b:2f:dd:13:75:80:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:93:73:CB:7E:92:D4:9B:F6:EA:EF:1E:72:32:0B:1C:07:5B:46
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:62:63:6f:bd:70:91:41:cd:fd:1e:a2:9f:7c:b8:98:2e:0b:
9f:2a:a1:e7:8f:92:3a:79:21:95:b6:a0:3b:41:08:69:63:02:
5d:83:6d:1b:ae:ee:7c:21:5e:bb:9e:b0:8c:73:25:6a:b1:ec:
9e:76:05:b8:ee:c9:94:9b:d1:e4:39:72:e7:a3:05:ba:8e:0f:
63:bf:f8:07:95:7d:03:b2:80:39:65:b6:c8:76:e6:07:d4:fb:
ed:ae:6c:f6:fe:cc:ea:89:c2:17:57:50:13:d5:36:89:cd:99:
a9:84:4c:19:92:3c:2b:36:99:cd:01:f2:50:0d:22:4e:b0:01:
b5:3f:d6:a7:e9:07:c3:42:de:ab:39:e8:cc:4d:7d:5d:98:63:
e8:1e:c2:da:74:fb:59:0a:ed:74:c2:e6:09:94:1b:ab:cb:67:
ba:8a:76:a9:79:16:e8:c6:46:92:e7:68:17:05:28:04:0c:a5:
cc:35:f9:ac:c0:ef:20:cb:71:77:ba:12:69:eb:14:99:52:75:
43:18:95:d2:56:c2:71:ed:b5:c4:3c:88:54:f5:2c:aa:a0:56:
99:1f:f3:27:9c:4a:b1:fc:ea:04:39:b9:4b:a2:08:51:cb:2f:
4c:02:c9:6d:97:3d:8f:ea:0c:ae:a3:a5:11:04:ea:37:9f:91:
97:73:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:19 2026 by rpki-client