Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
File: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft (raw, json)
Hash identifier: Hp1nr8p70g96H7xEPrueROzDPe19oLy54oGOWfKcgy0=
Subject key identifier: EA:50:6C:F1:8E:BE:39:FB:1F:D4:6E:CA:03:11:39:BA:53:3C:06:26
Authority key identifier: DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
Certificate issuer: /CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Certificate serial: 019D37C031B6A27FFC6C52D93A85126737B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
Manifest number: 91
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl (hash: LpYrErcTM2pRD8dQVcguVREgYrIz1KvVkWXnVKAoi80=)
2: QZpcoFZ-mTdXgaU_KSl2tUqS-WA.roa (hash: kKgOgir5OcWMeFMyd0QfuGiJS19k1i7Dnvnix7dS1ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:31:b6:a2:7f:fc:6c:52:d9:3a:85:12:67:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=ea506cf18ebe39fb1fd46eca031139ba533c0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:72:eb:aa:cd:11:b5:bc:07:43:c6:98:b6:
c1:17:da:7e:30:49:16:42:a4:a7:e1:8f:ee:b1:2c:
b2:39:84:14:4a:8c:4e:10:7d:2b:08:f5:32:6c:de:
01:30:e6:22:84:fd:35:52:6c:b4:0c:50:09:6a:20:
87:97:08:ab:54:c8:9b:9b:03:58:be:c6:54:5c:c6:
52:d5:2c:2c:65:09:58:18:59:08:4d:69:3a:db:c7:
fe:cf:7d:3c:85:6f:d6:8e:3a:1c:60:75:ef:9c:1d:
6e:0e:36:88:a7:18:43:6e:6d:e0:80:3e:d6:b2:fd:
25:05:26:b6:09:fb:9f:89:29:d7:5b:b4:73:92:49:
c9:83:c3:29:bc:d5:cd:ba:6d:20:d8:7c:71:94:dc:
d0:f5:6a:b6:11:67:f2:1b:3d:95:97:27:4b:f1:24:
f0:6b:57:84:02:d0:41:57:d5:ce:ad:54:65:ff:dd:
f0:a4:e0:f2:29:8d:ea:74:cc:df:09:d1:f3:30:ec:
74:79:3b:ea:17:89:89:21:4b:77:f6:bc:ce:14:29:
2f:fe:ce:3c:65:9f:e1:c8:ca:de:8a:3d:7c:29:b4:
5c:bf:a0:3d:d4:0d:32:a5:4a:57:c8:79:32:5d:62:
e1:1d:08:49:1d:8f:74:6f:55:09:05:2c:f3:c7:60:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:6C:F1:8E:BE:39:FB:1F:D4:6E:CA:03:11:39:BA:53:3C:06:26
X509v3 Authority Key Identifier:
keyid:DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fa:f7:73:7a:ae:50:c4:93:4b:5f:82:7b:a7:3f:fd:3c:3a:
d7:00:0f:2a:c2:47:44:91:7b:cd:c2:dc:49:7d:55:8b:50:83:
3e:6c:02:38:ab:50:86:33:f0:4c:ab:02:a9:12:0a:ec:76:48:
21:c5:3d:c8:79:bd:d4:0f:15:f5:72:09:ed:b0:5d:c9:ed:3d:
32:90:d7:1c:e3:d7:22:7c:ba:2b:bc:ca:97:fc:37:47:4d:74:
fd:ad:69:bc:88:d6:5e:f2:dd:36:4b:d0:bf:16:ab:0f:84:0a:
1b:49:ac:67:8e:2a:bc:5b:94:b5:1d:77:ad:fd:68:d1:ea:e1:
29:ad:68:34:dd:92:b3:c9:3e:77:93:ed:f0:02:81:7b:d7:96:
cd:d1:8c:2f:bf:54:60:10:f4:41:f2:04:e9:a5:16:22:73:38:
52:c6:0a:60:0c:7a:e8:86:08:65:92:63:de:78:35:27:ff:31:
1c:b2:00:70:78:68:f0:32:c9:1b:1a:76:c4:c0:37:3f:b5:e4:
a4:86:00:e2:8c:f7:f2:c9:9e:b1:c9:c4:f3:6b:a0:59:8a:f7:
7c:46:6d:75:cc:86:d1:7d:62:97:9c:aa:ec:0b:19:ee:eb:e0:
a2:a8:38:b4:d2:fc:7d:2e:fb:de:1b:af:ca:51:3e:df:2a:30:
03:10:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:15 2026 by rpki-client