Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: Zn5dgEXSjzMFLo+yNpzr6nAAK6n6EK8lRngQ3LOXZaQ=
Subject key identifier: DC:C0:82:02:BD:B7:5B:EB:BF:64:D4:69:BB:D4:20:3A:B8:89:F1:37
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019D3789B70896188D305F24737CF45B203E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 02FC
Signing time: Sun 29 Mar 2026 03:01:05 +0000
Manifest this update: Sun 29 Mar 2026 03:01:05 +0000
Manifest next update: Mon 30 Mar 2026 03:01:05 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: l7PGxpDiEKgrbE1Y4LPlZpasViSEeUerir6a3ftJjBM=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b7:08:96:18:8d:30:5f:24:73:7c:f4:5b:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Mar 29 03:01:05 2026 GMT
Not After : Mar 30 03:01:05 2026 GMT
Subject: CN=dcc08202bdb75bebbf64d469bbd4203ab889f137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:9f:e8:8b:af:33:46:13:5e:79:b8:38:bf:
cf:9f:68:d8:7c:f4:cc:41:e2:46:fa:c9:3a:97:fb:
d8:5c:c7:19:7b:44:4f:a9:c8:8b:e5:2c:5a:c1:53:
ef:43:f8:a8:c9:5a:0e:2a:04:bc:f0:96:0b:f6:c2:
9f:54:b4:cc:a0:7f:b3:ea:77:16:f1:b2:ba:0a:00:
33:02:09:ca:7f:d7:6c:02:ed:f8:2e:82:65:22:d5:
d0:e1:b8:91:99:c1:ca:79:49:d6:88:15:85:b2:53:
76:63:3a:ae:34:3f:37:e5:44:54:0f:b5:4e:7b:d0:
bc:99:6a:c3:ce:77:44:dd:19:e4:2c:6d:16:12:68:
de:9b:16:a8:a5:f1:3d:af:40:2d:50:b8:15:36:b7:
24:9b:ce:b4:db:dd:bc:b7:90:f8:e1:f7:41:04:2e:
9e:a4:07:99:b0:1e:fc:28:06:c5:a3:93:71:08:85:
9e:7e:b4:32:c1:b3:9c:b8:f1:ec:42:9b:68:7d:e5:
00:09:71:2c:71:2b:e2:2e:7e:a7:18:c0:25:44:26:
42:64:2d:dc:26:d8:2e:51:0b:5c:5a:e9:2e:8b:e3:
14:42:61:a6:24:da:eb:4d:6c:f9:cd:81:a9:f3:2b:
0a:a3:a8:d2:0e:7e:ba:d4:db:28:91:9e:66:0c:30:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:82:02:BD:B7:5B:EB:BF:64:D4:69:BB:D4:20:3A:B8:89:F1:37
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:76:6d:3f:3a:90:65:6c:5b:a3:c3:ff:4a:94:14:9c:92:9d:
ab:90:9c:e2:66:bf:30:69:bd:61:bf:de:f8:f2:62:a9:d6:4b:
a6:4f:e8:43:c5:1e:46:40:b0:fd:80:43:54:f9:06:c5:cc:6a:
b1:a4:9c:7a:7c:cf:9a:41:23:d9:50:c1:73:be:9e:89:1c:ec:
e8:51:2f:d5:66:7f:82:a3:59:95:ad:49:0f:79:49:41:e9:99:
c1:aa:f0:30:2c:ad:6b:98:1d:13:fb:c8:78:92:a3:d6:8b:1d:
bf:f0:09:ca:0d:c0:b6:47:08:96:60:08:7b:b0:59:aa:20:05:
e6:c7:2e:40:c6:d7:9f:f8:68:0e:64:47:6d:d7:7e:63:df:15:
a4:4f:d5:17:db:ac:d1:b1:68:1b:d5:2a:f1:c8:f2:8e:60:e1:
8b:68:da:6a:f6:1d:23:d8:52:c2:58:6e:9e:67:e0:c7:ec:14:
cf:94:ab:f6:ee:e0:00:88:c9:9c:d2:03:3b:04:49:56:c7:c6:
72:82:05:12:6f:b2:7f:da:2f:31:72:cd:55:49:5c:d0:f3:24:
f9:35:da:3e:73:1a:7f:ce:d0:a6:3c:ec:c1:8b:ee:3c:59:58:
b2:2b:94:45:0c:38:b4:ae:b6:69:12:56:11:06:29:77:24:e4:
55:f1:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:37 2026 by rpki-client