Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: XkvzW0Iiw7fgs/zwa5VfVnK14i6r3YKwyfsc1QwxK2s=
Subject key identifier: F1:3D:8D:E7:44:DF:CB:BA:94:14:18:6A:E7:A5:75:B8:35:43:E1:04
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 019D389BF1F313F2C356EC1692C852BAB08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: D2
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: LNs7p3dQUoPnTuT1hgDMf+Os/TJSP+P9GidlOIpaV0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f1:f3:13:f2:c3:56:ec:16:92:c8:52:ba:b0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=f13d8de744dfcbba9414186ae7a575b83543e104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:64:49:6e:b0:c7:e7:c8:80:c6:16:70:af:
ec:49:2d:d9:bb:5b:09:54:8f:8b:9c:34:48:8e:de:
bf:59:84:b7:5c:42:fb:9f:fb:50:21:25:ee:42:d0:
cf:21:8d:a5:9f:74:cb:22:0c:6e:8f:4e:18:74:bb:
3a:a4:07:21:cc:5c:7c:09:19:08:e5:c1:22:b7:5d:
03:39:14:3c:33:a9:61:25:e4:97:10:fd:8b:f1:38:
09:63:27:c3:64:1d:f0:6c:55:b6:62:0c:3e:2a:af:
00:ce:95:c7:4b:cf:b5:c2:f1:fa:c6:82:3a:88:65:
b0:23:84:11:0e:73:c3:4b:b0:37:b7:62:85:7c:77:
1f:34:16:b2:f5:be:61:a8:29:2d:f6:45:0e:2e:a5:
52:aa:35:15:27:2e:25:06:a9:fc:cb:e9:b0:dc:a6:
8c:7a:5a:72:77:78:d7:46:bd:d3:a9:48:3b:54:c2:
a1:90:a8:94:71:6b:48:f2:a1:3c:0c:df:10:c1:7d:
67:60:29:16:21:9b:d6:7e:05:0d:9e:57:bb:f3:0f:
6e:35:0f:92:c0:4c:2e:ac:94:b7:23:71:b3:8f:b5:
11:85:89:d0:cc:14:5b:1a:f0:8e:3c:3b:1f:6e:45:
7b:7f:77:0c:c0:53:52:5c:07:84:50:0e:d0:64:a1:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3D:8D:E7:44:DF:CB:BA:94:14:18:6A:E7:A5:75:B8:35:43:E1:04
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:92:63:3c:bf:a1:72:a7:b7:51:3d:2c:5d:ab:80:90:1c:3d:
95:5b:41:5f:14:69:a1:87:55:a2:c9:9b:4a:28:c1:e8:96:b9:
22:66:96:09:16:73:80:2c:61:58:2d:b0:10:f0:12:f0:ca:89:
a4:09:d2:d9:53:d5:76:e6:0b:04:75:a9:a1:fc:c7:5d:3c:af:
48:ed:08:cf:01:cb:7b:02:51:ba:d7:71:31:93:fe:3c:a8:a0:
03:9b:16:f3:1e:40:dd:26:0a:32:59:f5:44:a4:38:b2:3e:2d:
2f:fc:cc:b4:06:0e:f2:66:1a:b3:4b:3e:61:70:04:0e:61:7b:
e8:e5:fe:bc:65:89:63:0b:7b:f3:d5:8a:8b:93:ea:07:6b:b5:
8d:6d:1f:3e:c9:c1:a5:64:13:58:b2:f6:1c:5a:7f:58:3b:e2:
09:a1:b8:10:ae:18:e5:19:df:ce:b4:9c:a7:3f:91:ee:4f:e1:
f6:f0:d2:1b:4b:cd:a5:fd:dd:1f:26:ae:f4:2b:02:16:11:83:
22:f4:f2:93:e2:ee:da:ee:fa:18:1c:db:f3:2b:48:9b:cc:81:
99:65:76:f5:ad:a8:60:bd:7e:7a:f9:ae:58:56:b4:de:89:57:
e0:e1:0b:74:9d:0d:7a:26:b6:0a:a2:f5:b7:da:8f:9e:55:40:
b4:da:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:33 2026 by rpki-client