Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: 7SLqW5nqNSdEHNZZOxInWWDAhSFmk70CtgF+FU2LN30=
Subject key identifier: CC:43:05:D4:BB:81:78:55:AE:C1:3D:A6:CA:AA:17:F5:C6:F7:DF:82
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019D31BE24D7C169AD0A76773CA9E230887A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 0BB4
Signing time: Sat 28 Mar 2026 00:00:37 +0000
Manifest this update: Sat 28 Mar 2026 00:00:37 +0000
Manifest next update: Sun 29 Mar 2026 00:00:37 +0000
Files and hashes: 1: 1QeTNjG1Dfkc8SWoA6hDqdCoE0M.roa (hash: TI7MVpkcT7thY/M8gEUna2Z6lXeVC6lOhkda9yw/ECs=)
2: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: IzpaWm/u4b1k2pls2UWLtOQRZL2vi6Z2gU/r+/ke9iI=)
3: 83i8inPN8cioUOUV0odmLvsgRjA.roa (hash: /ygI+B5yyCZ19+mmbGd9eyqCRVHl3RDiVcE9AZL8+EA=)
4: TuF1yyTgBJhW6oC5dwAW2GS084g.roa (hash: TcfD3AosMJkeleoYgBuUrwlWZpCWe+Rbnmh9egzYaWg=)
5: YvgUW8vlSYoSqJhA7O3nbFd0bJY.roa (hash: N4hhBNBcikInb4tPmaHKeGL864VkY1qTbkfnFOK42Zo=)
6: _PXhlZCjQvwPQ3-H5--9ECU2Un8.roa (hash: +OxXVp7CCvXwGvmdylv8hYCUGBTiCJtYUdC1nBHjCGU=)
7: fTPd9h70qbE4IDomqVhRl5Z6tXY.roa (hash: kJtRZt0jq1rkxlKv4aSYJNr1yYR0AREk7KSe3ox5v1s=)
8: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:24:d7:c1:69:ad:0a:76:77:3c:a9:e2:30:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Mar 28 00:00:37 2026 GMT
Not After : Mar 29 00:00:37 2026 GMT
Subject: CN=cc4305d4bb817855aec13da6caaa17f5c6f7df82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:b1:1c:3d:97:44:e1:a1:7e:31:d3:d2:23:
77:22:96:ad:31:cd:18:84:8e:28:2f:c0:23:be:7b:
5e:1c:31:05:3c:3b:4c:14:d0:11:ef:61:22:b9:41:
d5:69:8b:f2:45:f8:35:3e:a9:89:6f:36:d1:9d:c6:
42:7c:c2:80:c9:6b:c7:5d:67:c7:30:f6:a2:f0:ed:
27:24:dd:bb:6d:1d:d0:7a:50:5a:e8:01:fe:9f:c0:
0d:66:66:f6:d9:69:01:eb:4a:bc:e3:6f:72:39:fa:
2f:11:f4:d7:3f:47:57:75:36:97:42:c0:e0:1b:9b:
6a:88:72:fb:eb:d1:bc:3d:1a:29:24:ad:3e:1a:a5:
32:0d:27:2b:ab:49:eb:17:3c:21:a6:e5:9c:f5:64:
7b:f8:7e:1f:9f:9d:5f:3f:d9:05:d9:c4:b8:71:31:
27:e5:25:6b:ef:15:6c:0e:f7:a8:8b:6b:45:77:2b:
64:dd:04:a2:1e:3a:b0:a0:24:f2:e4:9b:b6:a0:4e:
c5:7c:58:b5:41:00:d0:10:a5:67:4f:18:0f:27:07:
c9:d1:13:2f:a4:d6:26:2a:47:cb:43:8a:f3:d6:f7:
3c:a3:20:b1:66:c8:e3:c5:50:09:04:34:a8:cf:66:
7d:36:c8:d8:c1:76:2d:d9:86:f8:ef:c9:43:75:2e:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:05:D4:BB:81:78:55:AE:C1:3D:A6:CA:AA:17:F5:C6:F7:DF:82
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b2:77:5f:f4:12:d5:d4:fc:06:9d:33:29:d1:10:c1:c6:ac:
bb:51:8c:eb:3a:90:ff:14:dd:98:f2:bd:e6:4a:7e:40:9e:40:
6a:25:67:69:87:fd:17:bf:bf:c2:b1:ee:3d:10:0c:57:c5:ef:
a5:21:ff:5b:fe:bc:10:7d:b8:e2:85:c3:15:b4:c5:bb:03:f0:
ab:94:d3:c3:ce:2d:28:be:46:d8:cc:e9:0a:86:53:6e:63:b3:
71:4f:8e:30:9b:66:2e:bb:a6:80:2c:14:19:d7:44:5f:4a:08:
6a:78:37:22:54:f5:b7:bb:da:07:1e:4f:55:67:b0:3c:bd:c9:
a0:aa:72:33:bb:48:5f:1a:f9:16:f6:a3:75:41:7d:40:93:5e:
a8:42:b0:4e:8c:49:60:d9:62:79:cf:b2:4f:52:54:8b:32:a6:
7a:bd:07:38:ff:87:db:38:4c:ea:ab:5e:3f:ca:81:50:6c:21:
91:78:c5:88:7f:6c:e4:f7:61:01:9e:ef:a7:ea:13:f4:17:68:
7c:c9:1a:92:9a:6c:93:92:f4:ba:34:9f:87:7c:31:69:96:75:
5a:c0:49:06:01:64:8a:06:6a:75:43:c6:69:5a:aa:70:39:25:
d2:09:ae:d9:3a:a0:8c:e5:79:37:62:c9:9e:24:4f:f6:cf:a2:
d7:e2:36:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:09:59 2026 by rpki-client