Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: F4KiEfY9ma/PmCwqShxTjwdzrOkbmfKj/faRvn5fuHE=
Subject key identifier: 41:A2:76:54:4D:CB:B0:3F:8A:18:5E:F7:1B:2F:45:E0:39:29:C4:B8
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019D3941203E0ECFA05835159DF9DDF3A99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 1301
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: 2fIp9ggNI/pyvc3aJXikSwV2tfUjkB2YT5SOIqtjzR4=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:20:3e:0e:cf:a0:58:35:15:9d:f9:dd:f3:a9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=41a276544dcbb03f8a185ef71b2f45e03929c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:b2:30:7a:5e:80:bc:90:01:7f:d7:96:59:
a9:02:25:31:59:0c:75:48:1d:c8:bd:94:60:7c:d9:
c1:3a:b1:d4:51:bb:7f:63:34:b4:4e:ab:1d:64:c7:
50:e6:23:9a:bc:51:5b:b1:d8:4f:6f:18:26:20:65:
67:0f:56:cf:69:ff:31:0a:19:87:e1:2e:e6:58:93:
c8:36:c1:e1:4b:45:c1:6f:fe:76:99:4d:ef:49:49:
fc:f0:4a:6c:ce:a9:7c:26:4b:cc:24:79:a5:f9:96:
cc:44:a1:52:55:1d:c1:12:ee:98:67:5a:4f:ac:aa:
d1:e8:c7:04:53:6c:44:3c:2f:cc:d7:b0:c1:1c:1e:
95:3a:24:e6:1c:25:21:a3:af:97:e1:2a:92:d1:37:
5f:5e:0b:14:d2:43:4d:6c:09:bf:7e:08:6b:1e:aa:
16:0a:f6:25:84:61:60:f6:8c:1f:0f:5e:bf:1d:07:
a6:96:8a:89:1f:32:97:83:e9:ad:ba:b5:29:27:ea:
0b:93:5a:6b:1e:18:d3:f3:4b:c0:22:79:b6:28:a7:
b1:af:86:3f:73:92:a5:69:ed:d5:27:75:70:67:2c:
cc:d3:37:97:18:9a:ae:e8:ff:cc:37:37:ad:da:2b:
31:ed:60:c2:eb:28:b9:a1:cc:b8:95:87:71:6c:e3:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:76:54:4D:CB:B0:3F:8A:18:5E:F7:1B:2F:45:E0:39:29:C4:B8
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:0d:a6:70:65:ef:af:30:c7:67:99:77:b9:a4:62:5d:63:
b6:d8:88:75:8f:2a:ee:13:6f:26:3b:c1:82:9f:28:af:05:95:
43:51:42:b9:8f:97:f6:e6:cb:a6:a5:f1:91:f1:13:ec:c5:72:
96:ff:34:21:fd:82:be:8c:96:f8:fb:a3:9e:89:f3:b2:ca:e6:
28:da:97:c5:91:95:61:5a:89:d4:b4:cc:6d:08:bd:f9:58:7d:
2d:0a:c6:f2:e0:d7:eb:6c:cc:33:f6:52:6b:9b:0d:67:44:9b:
7f:00:59:eb:b3:ff:03:b3:4b:8d:52:65:2f:48:1d:bf:e7:36:
a5:89:3e:c4:aa:16:7f:22:8d:f7:57:9a:10:7f:15:7d:b4:75:
ba:2c:2c:89:71:ee:7f:7d:8e:e3:a4:b3:a2:e5:c6:f2:20:ef:
65:5a:ea:b5:9b:b5:40:72:03:83:6a:7d:78:14:2f:15:90:82:
00:f9:f4:6d:e6:f6:30:55:5b:b3:f5:a9:ec:4e:b4:13:0d:6e:
aa:fe:f4:13:25:b3:66:ad:85:20:ac:09:24:0a:77:e8:1a:69:
87:c5:c1:df:f1:9f:05:1b:2e:5c:a5:87:81:84:be:c9:bd:98:
a0:c7:39:1d:4b:db:e5:b2:61:f4:78:9e:2e:e8:db:d2:4b:db:
b3:55:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:30 2026 by rpki-client