Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: wmdAxo5M2DrU4E6z2mEBup/zdGud3TRQTu6hc5NUT8E=
Subject key identifier: DE:0D:22:31:F6:F0:F3:AC:0E:A3:D8:49:6C:7E:55:07:65:9B:6E:35
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019D3940BA196F7A89EE69B3798A4B30E150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 09EF
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: PLtIMUyceXNOcU7Zu2xDrdnOrnhGt3UmaDVv5+NyCW8=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ba:19:6f:7a:89:ee:69:b3:79:8a:4b:30:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=de0d2231f6f0f3ac0ea3d8496c7e5507659b6e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:5e:50:51:73:cc:86:80:48:5c:ef:14:58:
01:ce:3a:12:f2:d9:bb:1a:6d:c9:67:cf:1c:5f:1d:
f1:9c:b7:7d:00:9b:ed:c6:64:4c:91:4f:ef:b7:c0:
e7:f1:22:ae:3a:c8:1d:9e:31:6e:f5:b4:f0:8c:ee:
f8:42:3e:89:34:89:53:76:3a:35:b5:7b:a9:34:f4:
77:99:65:c2:0f:44:a3:84:41:ba:68:66:fb:ab:f8:
be:38:39:d5:62:88:4a:20:67:ed:c8:bd:33:e3:fa:
ec:4a:0f:ec:60:82:82:31:2d:df:c2:ed:85:a7:9e:
65:42:ca:ca:1e:85:ec:8c:3e:02:81:e1:a2:5e:f4:
32:5c:d6:36:2b:98:07:e2:c6:b9:85:ba:e8:82:2d:
34:6e:62:e8:e8:26:97:72:dd:7d:75:63:47:78:1e:
4b:62:39:78:c4:3b:5b:87:8b:ea:49:68:e2:49:dd:
f8:fe:8b:96:cc:93:52:c8:a0:92:de:f9:63:a8:8c:
41:01:15:92:ad:1f:85:aa:67:48:94:ab:42:16:3f:
ed:ee:16:64:a6:70:fe:a2:8f:22:43:eb:0b:bc:4c:
49:df:f9:87:a8:57:5e:fd:cd:b2:47:9a:07:66:04:
24:0e:fa:7e:86:82:a0:2c:1f:e2:d6:b0:e8:db:8b:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:22:31:F6:F0:F3:AC:0E:A3:D8:49:6C:7E:55:07:65:9B:6E:35
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2a:bb:a8:36:06:45:eb:e4:a6:eb:53:03:80:48:71:01:0a:
61:f7:a1:b8:bb:d2:a3:73:97:af:32:0b:2f:85:25:bb:19:aa:
a5:d4:6e:9b:29:bb:e1:b9:7e:6a:bf:e9:f4:c0:e8:21:f5:97:
c0:ab:28:d8:0e:0f:40:b8:3d:5a:b9:50:4c:b0:fc:46:e9:cd:
74:bb:bc:73:95:e2:42:b7:7a:a1:6c:6d:6d:3a:93:3c:af:24:
32:c8:59:b2:9f:c5:0f:d9:16:33:2c:8b:87:4e:fd:1c:e5:dc:
f8:17:dd:63:e6:a1:16:34:d7:e2:d5:ec:c2:78:4b:44:40:3e:
2c:bd:c7:90:3a:a7:88:ca:69:d5:56:34:5f:67:35:14:89:d7:
26:32:f6:47:ab:71:2c:96:da:59:5f:fb:2f:bb:92:73:f9:3c:
52:8d:1e:e4:e6:98:42:64:09:83:6e:2f:01:2f:70:b8:c0:e9:
58:81:1f:62:09:6c:86:8c:5a:ee:60:f6:c5:67:eb:0a:5b:9e:
a6:ae:1f:e4:be:24:84:17:ad:f4:5b:fe:a2:0a:f3:30:c2:63:
35:56:2c:94:ee:ac:5a:16:c6:4f:b7:9e:d4:d0:4f:f6:ab:ee:
bb:20:91:d9:7d:7d:50:60:4f:50:2a:35:d6:94:25:fb:65:67:
78:2e:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:48:50 2026 by rpki-client