Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: iqgJoANi+2IWgNnUVpSYqhcJtkqIJy/vDKNkJpLruiw=
Subject key identifier: DA:AB:33:FC:3F:7A:93:2F:91:1D:37:5E:E6:15:65:FF:0D:DE:52:04
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 019D38D371BF15DBC0E15D40096D02C2665F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0ADE
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: QMdLWo8tJW6nMs+3vJz0g/l+YjHTlbQhYuVz4K+F7Ts=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:71:bf:15:db:c0:e1:5d:40:09:6d:02:c2:66:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=daab33fc3f7a932f911d375ee61565ff0dde5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:29:81:07:c6:0c:d4:4c:e0:ac:45:3f:d1:
41:43:5e:95:29:73:a4:c2:bc:5b:3f:8b:1e:17:c9:
d0:6d:b2:a3:2e:d4:8c:89:34:68:6b:ba:d0:cd:f2:
f1:a8:0e:e6:fc:c0:f3:a3:28:db:52:e6:1b:d8:4a:
b2:01:a5:bf:59:d1:b3:9c:aa:f9:4f:f1:04:fa:45:
59:8b:28:79:57:6d:b0:34:bb:71:2d:23:5d:23:df:
ec:5f:3b:5f:8c:95:9f:43:5d:57:ff:2d:ef:1b:6a:
d9:17:48:57:aa:bf:3e:64:09:16:90:8e:53:45:8c:
d0:75:f8:e3:2f:9b:2e:c2:9b:01:23:4c:fe:42:eb:
75:7b:bb:f9:bd:0b:43:20:af:91:4d:a9:7e:3b:19:
2f:1d:c5:52:2b:66:37:a2:d4:22:7e:35:5e:72:e4:
37:de:b0:bc:66:50:fb:75:9b:f8:ea:14:60:48:e5:
67:57:ae:ac:f8:bb:8f:f1:a1:06:1f:b9:cf:6f:d2:
2d:77:94:82:b5:10:b2:2b:08:55:30:50:cb:72:a8:
32:d2:3a:f5:3b:2a:3e:46:b1:91:b2:e3:fb:b7:22:
48:26:db:33:25:11:71:88:ef:ea:63:e8:12:98:10:
47:43:3c:81:da:f3:11:35:bb:65:2f:39:b1:ee:df:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:33:FC:3F:7A:93:2F:91:1D:37:5E:E6:15:65:FF:0D:DE:52:04
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:3b:ed:28:b9:48:dc:ed:57:dd:35:84:c8:04:88:ef:a7:
ae:6f:d2:c6:a6:90:88:a5:82:b8:df:5b:4f:ec:59:2a:fd:c9:
e3:df:d2:87:d0:a3:ce:07:14:6b:8f:40:3b:cf:bd:24:a9:25:
07:6a:7e:93:7b:23:95:cc:21:3f:2f:eb:d3:11:26:f0:c5:bd:
5f:cc:c7:a9:f9:78:9f:04:5f:c2:11:d6:6d:5f:ff:6c:bb:de:
2e:7d:80:8d:e8:a1:4b:15:55:5e:31:b4:80:3b:13:8c:73:45:
2c:41:6d:12:86:e5:3a:3f:0c:d8:83:a2:0f:34:e9:99:f3:c7:
b6:1f:5f:82:b1:06:35:7b:1a:27:4c:25:2c:2c:c4:bf:1a:bf:
a3:e6:35:4b:bb:ee:af:b4:84:69:a8:9d:cb:fe:35:17:a6:8d:
84:b3:30:7c:46:32:a4:71:96:2a:75:e8:da:f9:93:12:1f:d1:
8d:52:1d:30:b5:d7:a6:0d:0a:13:b8:7f:ab:a4:97:9b:6e:09:
ff:51:82:35:05:30:28:b9:21:eb:7d:ee:ba:eb:dd:58:7d:0e:
7f:a4:f9:f3:8e:29:c7:1b:08:04:f9:02:1a:b3:67:8a:5d:28:
e9:49:05:29:b9:0f:3e:6d:59:6c:02:64:75:23:5a:68:e9:d5:
17:b4:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:24 2026 by rpki-client