Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: UdC+FdNjbfd8qDE/0U2RscfbLxoTl7XM8RmnbIVwHvA=
Subject key identifier: 5F:EA:62:40:5B:05:DD:5A:35:26:EF:2A:14:6D:93:9D:83:66:2A:51
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 019CE2FE6E0E9D8F7D739ADCFC5137281DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0FBD
Signing time: Thu 12 Mar 2026 17:00:51 +0000
Manifest this update: Thu 12 Mar 2026 17:00:51 +0000
Manifest next update: Fri 13 Mar 2026 17:00:51 +0000
Files and hashes: 1: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: v9lUeXlJRGoXdgHBvh2n/ZvKMk1ZYG41K12nLQgdxTM=)
2: 5O4Qywr4G5vGR4CnllsAHoHXE3c.roa (hash: 6B27b88IAgFkDxTqELlXG1aRObgI7R0ZM10hy8DvOwQ=)
3: WBH_fF6t3I2iXHzxgrxzCAX-XRA.roa (hash: cYtszWc1seVCwv311jPJcm6UWAtEmkWFzWyQin67xig=)
4: bfxZ3U8LPQDqD4igv8w1c53B7_g.roa (hash: wODIH/0xkpwmueRo+Rlw/VFlBWpKNaGnZK/vy02MrTM=)
5: bsYgzcPZezJ2gYbc8PKOspEFG4c.roa (hash: MpgIeeEXTiyIocenUfFnFL+sMDiBogWiOdN5+ESRb/E=)
6: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
7: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
8: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
9: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:6e:0e:9d:8f:7d:73:9a:dc:fc:51:37:28:1d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Mar 12 17:00:51 2026 GMT
Not After : Mar 13 17:00:51 2026 GMT
Subject: CN=5fea62405b05dd5a3526ef2a146d939d83662a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:ce:56:67:40:92:15:cf:82:e1:7d:91:93:
c9:d5:36:de:7a:99:76:88:e5:08:9c:78:46:59:52:
6e:fe:ed:bd:31:65:56:93:44:28:46:cb:87:8b:73:
79:19:80:fe:3c:65:a6:b4:fa:84:18:96:4a:0e:51:
4c:b4:32:c1:3a:10:53:65:ae:c9:30:61:03:61:ef:
43:c3:cc:74:ab:2a:e9:49:a6:06:92:0a:ec:6b:d4:
33:bb:e2:cb:cc:f3:41:59:cc:7c:e3:ca:d9:8f:5b:
75:ca:7f:94:b4:d8:f1:98:65:f1:77:40:9d:29:0b:
af:b9:ed:81:31:d2:9a:87:af:81:d8:38:15:9d:11:
83:32:00:1b:0f:9b:c2:b3:22:90:1b:ef:86:76:69:
f3:91:5f:0b:03:32:b9:8d:3f:36:26:4b:55:78:aa:
4d:c6:a9:bc:46:f7:3a:a1:b3:5c:be:3f:33:4d:63:
7c:f1:67:57:fe:14:26:98:b4:6e:9a:0d:04:cb:e9:
3e:14:d5:88:31:94:9c:f3:4a:3a:7c:9a:22:b7:69:
e7:72:27:b7:1d:f0:38:9f:5b:82:8c:40:f1:75:3a:
be:e6:79:da:b2:7e:26:12:1b:1e:dd:b1:c2:96:e7:
b7:9c:96:17:f2:f2:6e:bb:d7:0f:7f:8f:d2:87:70:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:62:40:5B:05:DD:5A:35:26:EF:2A:14:6D:93:9D:83:66:2A:51
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8a:fa:de:d2:70:23:5f:7f:58:ca:78:b8:42:d0:a9:94:3d:
47:98:d2:8c:a4:8a:12:22:9e:11:f6:95:b3:5b:dd:8d:0a:01:
2f:73:9a:f7:bc:a4:ee:6c:76:fd:06:7c:44:48:52:6f:68:d1:
4f:8d:cd:db:85:20:0d:c1:5a:dd:5a:59:6e:43:e6:b4:78:2e:
53:dc:fe:1e:84:19:6c:49:2d:67:5e:e5:f5:f5:79:a0:2a:a0:
b0:b6:e5:5a:72:f3:f1:c2:f0:65:87:69:3c:4f:d4:67:48:50:
75:ee:69:fa:3b:28:03:52:eb:51:7f:0c:d7:c9:07:86:83:66:
4e:4a:c6:01:2f:a4:12:6f:de:70:3e:18:32:3e:fb:c7:9f:15:
35:d3:19:10:06:39:36:82:5b:1d:c9:74:79:f4:7a:da:85:e7:
b1:9e:76:d2:16:67:f1:53:77:50:90:d7:80:01:f5:f7:84:0c:
ce:56:a8:3f:14:e3:bb:40:e1:77:54:e1:3b:07:0d:c1:03:4c:
c3:78:55:cf:96:ae:d4:08:79:b4:21:ab:5d:21:7f:b0:45:dd:
78:fd:7b:3c:f4:19:09:cc:98:17:9d:63:54:2c:4a:38:f3:db:
7d:74:fd:c5:1a:19:7b:d9:c6:a9:0b:0f:eb:4c:af:5b:3d:2a:
86:39:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:45 2026 by rpki-client