Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
File: 2UivxK9I3Sso6FSZZFe04qhDTWE.mft (raw, json)
Hash identifier: e5mIPJGh7W3oXkI9dwYivwTp0KgcAt05wb65PDgf4HY=
Subject key identifier: 5C:00:1C:25:A2:01:47:94:0C:97:7F:69:D0:43:1A:60:12:B7:1B:8F
Authority key identifier: D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
Certificate issuer: /CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Certificate serial: 019D3A536724F208D157379BB94541C29DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
Manifest number: 1D
Signing time: Sun 29 Mar 2026 16:00:37 +0000
Manifest this update: Sun 29 Mar 2026 16:00:37 +0000
Manifest next update: Mon 30 Mar 2026 16:00:37 +0000
Files and hashes: 1: 2UivxK9I3Sso6FSZZFe04qhDTWE.crl (hash: 6/u+IwMeqyxPpw5/hloCEwgMYwxnzcC8tiNtMfsoUKY=)
2: UO5esvuscm_Muh0KmfgSRLz3jvA.roa (hash: Eg2xdzCBLccjbkg/73TIkrnL2S4mi3j1eD98e/h7Rpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:67:24:f2:08:d1:57:37:9b:b9:45:41:c2:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Validity
Not Before: Mar 29 16:00:37 2026 GMT
Not After : Mar 30 16:00:37 2026 GMT
Subject: CN=5c001c25a20147940c977f69d0431a6012b71b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:0f:e5:14:b8:15:bb:e0:31:40:55:47:21:
07:dd:43:ac:ec:a5:ff:87:85:11:9d:31:a4:fe:9b:
af:50:b4:55:99:a1:5f:21:b6:0e:80:ed:2f:d8:d7:
55:04:3a:25:a8:ee:2b:35:d9:3f:ff:60:1f:6a:6c:
b7:3e:13:97:3a:98:4b:d1:27:1b:9a:d4:ce:68:c8:
a5:da:25:9f:79:b5:8a:8a:de:fe:61:d7:3f:27:b0:
5c:58:3e:eb:65:4e:58:45:87:a3:02:73:61:e5:15:
1b:94:bf:22:50:2f:90:83:12:09:d2:5a:31:e7:8c:
f0:00:d7:03:33:0c:ee:84:34:5c:b8:44:d8:9b:bd:
4e:00:b1:93:45:de:f5:4f:6b:6a:94:10:3d:84:1f:
1b:d8:e7:c8:2d:30:7f:04:d0:07:6d:02:21:07:84:
f7:25:56:ed:dd:b0:a9:88:24:ea:4b:73:9e:1f:5a:
e8:62:01:c5:a2:8e:cf:e8:34:ea:cf:7b:d0:85:3b:
e7:87:3e:09:04:35:f5:14:19:2c:be:6b:23:f5:7f:
fb:96:da:59:26:73:db:2e:35:eb:91:f8:df:ec:23:
bd:3b:76:ef:ef:e2:7b:7f:f3:f9:f7:4a:0c:30:17:
46:ff:a8:0b:e4:f5:97:a5:b2:d4:dd:17:6d:3f:2d:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:1C:25:A2:01:47:94:0C:97:7F:69:D0:43:1A:60:12:B7:1B:8F
X509v3 Authority Key Identifier:
keyid:D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:dd:87:56:a2:81:c3:1d:b6:a7:4c:41:e7:43:3f:44:23:
25:3a:d2:fe:91:b0:b8:8f:ea:52:49:8d:a7:64:fd:58:b6:cd:
a3:dd:f2:6f:c2:ff:8d:99:0e:6d:e9:25:9a:3d:bb:3c:14:c7:
13:29:2d:f9:17:89:b6:37:7c:29:f2:f1:fc:9f:f7:ea:8c:f8:
37:84:df:8f:d6:60:d8:e9:e2:c9:c1:99:24:b0:eb:23:cd:4d:
3a:4c:ce:9b:c7:0e:52:84:68:10:eb:65:6d:b9:1e:b1:62:ca:
ae:18:d0:94:d9:0b:cc:dd:50:df:4f:d8:e8:d5:1c:92:bc:35:
3b:eb:c3:4b:c5:28:47:35:ca:28:21:c8:8d:fe:53:66:ab:b3:
58:ed:d3:38:d1:92:87:32:4e:4e:35:c2:5e:af:e2:a8:bf:87:
f2:ab:09:c7:a0:4c:cb:c4:60:d6:62:4d:5c:78:52:11:f4:93:
64:b7:0d:16:e5:bc:32:47:53:c4:7f:7d:87:80:1a:8e:36:e6:
bf:a2:de:1b:08:9c:7d:62:86:16:57:dc:5b:f7:f6:60:02:e3:
3b:e2:21:ad:b0:c7:ec:d5:94:db:b9:70:25:f0:8d:7f:3e:9e:
fa:dc:4b:a7:ad:06:8d:9d:af:d0:f6:d6:8b:a3:8b:35:b4:42:
ed:13:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client