Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: fFMR+Qkmuv90ZJTTMW2Lo9Q7R/dFydgHYbOd6NIFdcY=
Subject key identifier: 46:FE:56:02:32:91:AF:4E:C0:71:59:B7:5F:6A:63:64:E9:2A:B8:7C
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 019D38662BBEA9A8CCBD9C50E822186D563A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0E3E
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: fkqKd37qAgrbuNrTcvsuQUL8ZaLUa6T8flGq8AHFLk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2b:be:a9:a8:cc:bd:9c:50:e8:22:18:6d:56:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=46fe56023291af4ec07159b75f6a6364e92ab87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:81:05:99:03:fb:af:b9:ee:73:4f:38:86:
f0:f5:17:ef:22:de:45:03:1b:a6:0f:03:cb:dc:d1:
f8:83:f9:3f:d6:78:15:79:38:68:d6:3d:e8:29:5f:
ac:9f:ad:15:33:b1:f7:a3:6f:72:c4:d9:85:32:b0:
a7:35:fc:3f:25:46:4a:2a:cc:94:f2:50:a0:04:61:
b9:06:d2:e5:13:ce:c8:fc:00:61:1c:21:02:7b:42:
75:82:98:5b:b5:9e:47:d4:6f:5e:58:e8:0b:b4:cc:
26:d4:73:4d:bb:e1:48:0e:71:ae:cf:19:3a:0b:84:
16:82:71:29:5a:5c:ea:e5:59:50:83:f1:1b:03:2f:
44:8a:29:88:5c:0f:eb:31:e9:16:91:63:0d:fb:38:
f5:96:fc:29:ba:9a:b6:98:38:34:19:45:53:49:9a:
72:a2:61:14:22:be:32:bc:37:4d:9d:42:aa:80:a4:
97:55:ae:b2:f9:ce:2c:be:d4:26:a4:c9:43:85:21:
59:76:38:60:76:84:d9:6e:15:bc:82:73:97:1b:61:
2c:65:36:3e:b0:c2:06:f6:7a:de:be:76:79:96:55:
de:f8:99:13:ad:a7:68:96:b0:f8:65:19:81:40:ef:
5b:8d:52:87:97:56:f5:5d:03:70:6b:74:e2:46:61:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:56:02:32:91:AF:4E:C0:71:59:B7:5F:6A:63:64:E9:2A:B8:7C
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6b:b8:17:69:4e:0e:f9:b5:c7:00:ad:8b:67:5b:fc:35:73:
96:62:30:3e:32:7d:0d:e5:d5:d8:e5:fe:9a:71:22:a9:40:42:
74:b2:84:83:a7:32:62:7b:a1:13:c3:6b:0d:a0:b8:1b:28:58:
4e:e4:4c:95:c6:21:85:31:07:b9:0a:82:70:88:69:cf:d7:5c:
42:29:4f:02:1b:a0:e5:6e:82:bd:41:2b:8d:ed:9e:10:b2:a3:
31:ba:47:ef:11:46:f9:2d:5a:24:18:1b:b2:64:4e:9a:cf:38:
09:9e:6a:25:a3:82:5d:a6:cd:6c:ad:82:b5:97:35:1a:c6:f7:
40:01:89:2f:f3:eb:35:fe:cd:d2:bc:0c:16:bc:00:e7:e8:28:
b7:18:53:3e:48:1f:f0:ab:a5:69:87:8a:05:58:94:89:8f:68:
55:2f:08:5c:8d:d9:70:e5:9a:8f:e6:b4:14:c5:ff:df:08:ac:
6f:d5:a5:3a:93:a2:03:b6:53:ca:20:1b:f2:7d:91:4e:06:4f:
38:62:94:b3:4c:33:56:8c:d1:a1:c8:0f:10:54:be:a6:65:66:
2a:64:11:55:6e:7d:4a:f2:f1:ae:5f:ae:15:c9:d6:21:9d:78:
56:35:72:59:57:f9:61:38:b3:e6:34:67:10:82:d8:c3:a1:80:
ab:e6:78:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ziu+qajMvZxQ6CIYbVY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWY2MWNjNDA2OWMzNjM2MjQ0NWQ4MTg4OTEwMzQwYjZl
NTdiYTUwHhcNMjYwMzI5MDcwMTUzWhcNMjYwMzMwMDcwMTUzWjAzMTEwLwYDVQQD
Eyg0NmZlNTYwMjMyOTFhZjRlYzA3MTU5Yjc1ZjZhNjM2NGU5MmFiODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lOBBZkD+6+57nNPOIbw9RfvIt5F
AxumDwPL3NH4g/k/1ngVeTho1j3oKV+sn60VM7H3o29yxNmFMrCnNfw/JUZKKsyU
8lCgBGG5BtLlE87I/ABhHCECe0J1gphbtZ5H1G9eWOgLtMwm1HNNu+FIDnGuzxk6
C4QWgnEpWlzq5VlQg/EbAy9EiimIXA/rMekWkWMN+zj1lvwpupq2mDg0GUVTSZpy
omEUIr4yvDdNnUKqgKSXVa6y+c4svtQmpMlDhSFZdjhgdoTZbhW8gnOXG2EsZTY+
sMIG9nrevnZ5llXe+JkTradolrD4ZRmBQO9bjVKHl1b1XQNwa3TiRmFsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb+VgIyka9OwHFZt19qY2TpKrh8MB8GA1UdIwQY
MBaAFNifYcxAacNjYkRdgYiRA0C25XulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3Njkt
ZWEzMmMyOGQzODdjLzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3NjktZWEzMmMyOGQzODdj
LzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2u4F2lO
Dvm1xwCti2db/DVzlmIwPjJ9DeXV2OX+mnEiqUBCdLKEg6cyYnuhE8NrDaC4GyhY
TuRMlcYhhTEHuQqCcIhpz9dcQilPAhug5W6CvUErje2eELKjMbpH7xFG+S1aJBgb
smROms84CZ5qJaOCXabNbK2CtZc1Gsb3QAGJL/PrNf7N0rwMFrwA5+gotxhTPkgf
8KulaYeKBViUiY9oVS8IXI3ZcOWaj+a0FMX/3wisb9WlOpOiA7ZTyiAb8n2RTgZP
OGKUs0wzVozRocgPEFS+pmVmKmQRVW59SvLxrl+uFcnWIZ14VjVyWVf5YTiz5jRn
EILYw6GAq+Z4Mg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:41 2026 by rpki-client