Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: S94bDAg6GkN/nvpY5zaxTKpK76UvXq3voEqL1hWxw3M=
Subject key identifier: E9:A5:13:64:92:19:D8:20:07:F8:9E:95:57:B2:9D:66:60:75:6C:FA
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 019D37F73EA69968EDA68018DA9091394942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 040F
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: fj1zdIsieI4jNoV5V+fOaASG6OgOIC1tQBVfvJmaN1E=)
2: nNN8oPaWzwsAkuqBUkdubOWtVpo.roa (hash: 0qPiY5OdqzEcTjsFlVm1KfW2HObtyaiMymvYvbm7kPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3e:a6:99:68:ed:a6:80:18:da:90:91:39:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=e9a513649219d82007f89e9557b29d6660756cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:53:cd:ae:bd:ac:b7:1e:9e:14:90:c6:b6:
f5:c5:b9:15:ab:68:7d:ae:23:62:51:7e:66:df:7b:
35:a1:45:64:96:0f:01:3b:4b:3f:0b:da:9c:d4:b5:
7b:41:22:62:e0:7f:11:7b:e2:fe:50:23:da:57:6b:
85:da:94:99:e2:62:38:85:d4:c2:e0:34:b4:7e:1b:
58:ca:37:84:3b:14:c2:fb:eb:f7:73:0d:df:34:39:
99:54:af:e0:97:aa:e2:5a:4c:8c:4f:61:91:2c:33:
5d:54:5d:f5:5d:29:16:43:26:a2:d2:48:09:9b:02:
8d:30:97:93:fe:aa:2b:1f:af:2c:d6:cd:6a:b8:e0:
d3:e3:33:11:cd:ea:69:fc:bd:a7:08:d0:6a:ef:8a:
93:db:80:bd:b6:90:13:5b:37:b9:8a:7f:d3:56:8b:
44:46:86:19:d3:01:3f:89:a1:17:70:44:03:70:aa:
1f:f6:26:94:cf:85:1d:a9:cb:38:52:b8:e0:60:6e:
7c:1f:22:b7:ee:42:09:29:46:e4:0d:d2:3b:85:49:
99:d1:e4:58:2b:b8:a8:19:36:f3:98:e7:d2:f9:dc:
27:f3:1c:95:90:95:9d:3a:80:51:32:63:1a:9e:3e:
5c:58:ec:b9:d0:64:eb:70:57:a1:74:7c:7f:f9:a7:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:13:64:92:19:D8:20:07:F8:9E:95:57:B2:9D:66:60:75:6C:FA
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:55:5d:cf:8b:61:a1:f2:11:23:4c:1a:cb:ea:35:d6:09:99:
65:e4:42:ea:d0:ab:15:e0:12:7d:1e:cc:d1:3e:d2:2b:70:21:
fd:e7:e6:83:1d:4d:0a:df:fa:7a:ea:17:25:45:6d:79:e3:71:
66:a8:33:4a:51:ca:4a:a9:4a:73:03:5a:3f:0a:66:a5:aa:30:
38:7e:e1:cd:8c:65:54:9c:81:c5:81:af:0a:2e:c4:9e:ca:5f:
c9:3f:20:52:60:4f:3c:bb:9a:91:fb:b8:29:ae:cb:10:7a:8d:
ce:16:f6:46:17:04:0c:a3:ac:50:18:87:1e:4d:57:43:33:5f:
93:05:1c:f1:45:a4:24:96:ea:00:d3:b5:31:96:c4:93:15:97:
29:28:66:0d:97:77:2d:85:d8:7d:46:ea:3e:d5:28:3f:f9:9c:
cf:ae:30:01:eb:9d:44:fe:85:4c:de:82:e0:77:b3:72:23:93:
1d:fa:80:ee:33:76:38:2f:f8:df:0c:0d:9e:f9:47:c8:3d:b5:
7a:33:f8:23:02:13:2e:62:ca:bc:b3:b6:c9:fa:7e:11:a0:a5:
c0:9e:32:44:1a:61:86:38:ac:23:b5:85:91:fd:fa:92:74:00:
35:44:0c:c7:e3:99:6f:58:af:20:10:a8:58:f1:00:e6:12:bb:
bf:5d:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:10 2026 by rpki-client