Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: 6Xf/wRCungBBlHKsS+V3RsPM02k7wc3Z4VpW5i+PyY4=
Subject key identifier: D5:F1:00:AA:B3:DF:8B:A4:51:4F:B9:44:9C:67:79:1B:1C:D5:01:B4
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 019D371B5F144220924DE43FA22B60A23CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0F76
Signing time: Sun 29 Mar 2026 01:00:33 +0000
Manifest this update: Sun 29 Mar 2026 01:00:33 +0000
Manifest next update: Mon 30 Mar 2026 01:00:33 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: wKNX4vS5miWVe9Ic82y3IKOHxv1PO8p7VNHOjRlX/T8=)
2: kPCV9Z9GO0MBuXeU-WIy78ikMug.roa (hash: 0NQx9iiXvgvHENMrWY26SmRkGT/goJQ6m2yue/PuWAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5f:14:42:20:92:4d:e4:3f:a2:2b:60:a2:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Mar 29 01:00:33 2026 GMT
Not After : Mar 30 01:00:33 2026 GMT
Subject: CN=d5f100aab3df8ba4514fb9449c67791b1cd501b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:f8:65:03:ac:d6:e6:13:41:c4:16:d6:1d:
04:e8:79:10:ad:2f:da:ef:45:8f:34:b7:fa:18:45:
42:d0:3c:ff:6a:3c:04:3d:41:ef:d1:1e:34:bc:02:
0a:d7:8d:8a:a8:af:2e:c8:0c:e9:b4:38:e3:cb:9b:
b4:e9:8d:35:38:5c:f0:2b:98:31:26:a7:f6:a1:39:
32:4f:df:b7:a5:7d:d6:ce:a9:df:e6:d4:65:84:0f:
a6:45:c0:d7:1a:6d:31:d2:0f:36:a4:4e:bd:2c:b8:
f5:27:43:a9:ce:ad:55:68:bf:f3:e9:e9:fd:7e:7d:
1a:a3:e2:3b:26:d7:ee:c5:2b:ba:b5:8f:27:b7:cb:
5e:16:8d:85:aa:5e:77:30:41:a7:c1:03:2c:41:d8:
a4:64:72:17:1d:37:ad:0c:12:34:32:49:26:76:49:
59:38:bd:66:ed:02:18:fd:5e:73:1d:5e:4a:e7:08:
e1:8c:f4:6d:b3:aa:f3:2e:16:1b:90:33:81:45:66:
0c:65:b3:77:c0:90:68:be:ed:9a:0d:96:6a:0d:5e:
9f:b7:2f:94:5f:d1:cc:8a:62:a9:b7:71:8e:fa:c3:
ac:5d:d0:e9:fd:22:16:be:81:a9:a6:38:22:91:63:
82:75:ae:7f:34:15:49:25:ff:87:db:2a:24:da:85:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:00:AA:B3:DF:8B:A4:51:4F:B9:44:9C:67:79:1B:1C:D5:01:B4
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:09:3f:56:8e:a2:51:3f:d3:93:35:28:29:32:93:29:be:
3c:53:51:8f:a6:54:67:cb:88:55:39:42:d0:19:0d:b3:ba:0a:
63:ed:1b:ce:fd:c6:7f:b5:03:ab:69:5f:de:04:a0:bf:e0:36:
e0:eb:68:f6:42:56:66:55:6b:6e:e4:2a:0b:1c:36:4b:ea:b4:
53:78:65:0a:c5:5b:10:46:ce:2b:84:4d:c9:91:38:de:c4:13:
c3:c4:35:6c:78:25:9f:f7:70:b2:2b:e9:e9:28:84:b7:fe:98:
5a:fa:ab:c2:b9:a7:ab:20:de:63:b9:0d:9d:7b:e7:b4:87:32:
78:db:f4:bd:fb:ae:93:01:d8:1a:bc:bd:65:f1:1b:23:05:24:
8d:89:48:30:d0:bd:3c:96:4a:27:f1:b4:49:bf:4e:b9:b3:6e:
9f:fe:b6:a1:04:b2:92:fa:ef:dc:75:22:ae:4f:ad:5c:86:e4:
e0:b6:a5:cc:3d:68:28:c1:b6:84:3d:a1:45:81:32:49:29:95:
11:d2:9c:4e:98:87:54:83:f2:f6:a9:3b:10:a1:d4:81:40:b6:
f0:33:73:bc:c9:a7:47:34:1a:64:e7:db:7c:f9:ea:8c:38:1a:
f8:ed:f5:95:d6:1b:25:26:da:4c:3c:bc:80:32:dc:b8:ff:e7:
e0:cb:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:26 2026 by rpki-client