
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier: FE6T6W0X9tIlMPW2F709v/OJj1UCX9Z/+loRvgUtTEs=
Subject key identifier: 3E:96:19:AE:4B:67:13:45:60:6F:73:68:D8:4D:6A:79:32:72:20:D7
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 019D37894959A15170F1F3E3C041B497278E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: TOi3PAexptadLen8dMy9kYpWmohLTLciZkDDZOUij1s=)
2: F6fUHhyih39ackVWeOiT1Us1Y8Q.roa (hash: puoFvjqopp+quYrffqHcq8C0zEtx3DRFmOVecmQhdMc=)
3: gXTXswMAqOUZcicFKanGyy8Pc24.roa (hash: CsXx31nQ+NdycTm6E1P0Qb6Ob5IJ6xBFv4kmPa3DVVo=)
4: kOj1s5oO7oSiq_7ZjXoN1j2kTnE.roa (hash: Y6xric3ra7rVJoctwp2vvhl14A8o24GxxC7BIDvBIlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:49:59:a1:51:70:f1:f3:e3:c0:41:b4:97:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=3e9619ae4b671345606f7368d84d6a79327220d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:35:cd:bb:c6:94:d2:dc:e9:00:9d:ce:22:
19:2d:fc:a6:7c:97:2e:2b:09:4b:4a:89:27:87:60:
6b:9d:62:4d:cf:f0:4f:af:04:d3:1b:69:56:70:0e:
2f:81:ca:f4:71:c8:f8:e3:f4:4a:cf:2c:cf:96:42:
5f:2b:04:63:08:50:f8:87:40:c6:42:a2:6f:5f:ae:
8e:4f:be:06:78:2c:87:cb:0f:91:09:f3:58:85:9c:
21:d6:95:03:74:4a:f6:da:a7:a8:04:02:f6:e7:bd:
1f:2e:2e:14:b3:f0:45:a8:3f:98:61:e8:39:41:ad:
09:ea:66:9f:24:fe:b0:3d:cf:46:ae:f4:14:d6:b1:
28:e1:bf:9d:7f:db:41:50:a8:ab:2e:01:21:a7:05:
02:80:22:2f:b6:34:8c:c1:2c:09:e5:a7:93:ff:3f:
b4:5e:b7:bc:ac:4b:d6:5b:f6:5e:13:ae:4e:62:7f:
91:c7:51:02:64:58:ae:41:bd:d2:12:98:99:31:f3:
a2:bf:8b:d2:56:b2:02:11:37:42:fe:e1:85:11:b5:
ea:b0:b5:64:fb:4a:73:d5:1e:8d:81:28:4f:87:8a:
79:57:6c:73:91:6c:6e:01:33:9d:81:f6:ca:32:ce:
7a:16:b6:41:f8:d0:da:bf:9c:49:30:1f:1d:48:7b:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:19:AE:4B:67:13:45:60:6F:73:68:D8:4D:6A:79:32:72:20:D7
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:eb:16:3a:10:28:ed:af:d3:92:d0:7c:26:ac:6f:d0:32:df:
5b:da:33:13:a3:ec:2e:bc:7e:b7:be:67:31:bd:f9:5e:f0:26:
01:cb:18:e0:e5:88:ba:a6:1c:59:70:16:a7:fe:18:9c:2d:f9:
fa:f6:22:38:5d:a3:4f:13:e6:91:43:9b:65:8f:f1:b3:2e:17:
28:cd:4b:89:f8:10:c4:dc:78:d0:69:0d:64:17:7b:d3:b9:1b:
40:7c:78:70:7d:d8:20:16:ff:50:4c:ae:0e:72:d3:79:5a:0d:
a2:50:bd:66:5b:af:a8:8c:1a:b5:83:be:60:3a:df:72:6d:66:
dd:90:19:2c:74:ed:62:03:4a:63:aa:e8:36:22:4a:99:56:84:
54:4b:a5:c1:a3:f2:6d:ae:f3:22:b3:c1:fe:85:7c:45:e3:5f:
4e:34:06:f0:13:01:b2:6e:ee:7d:ca:bd:af:2a:db:06:33:4b:
d4:f8:0c:0f:2a:d6:3c:40:dd:41:f5:fa:6a:ee:e6:85:30:f6:
0a:42:88:e4:a9:f0:85:0b:49:0a:97:8e:50:9b:65:26:bb:df:
b6:1a:b3:ca:01:e9:3f:7c:05:1e:b9:1b:f1:d0:c6:e0:8b:fb:
54:1c:d5:69:e5:f2:cb:26:e1:3c:65:0c:f3:14:85:d4:3b:35:
b4:05:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:38 2026 by rpki-client