Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: nF3/qWNkc97yinIYV5OhOpT5l+mGZzagNWMhUXHDYZY=
Subject key identifier: 25:0B:E5:8E:F9:15:9A:D2:F8:A6:8A:37:61:AC:85:46:9D:EB:6E:0A
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019D382ECB0C217201094D736AEC00F19680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0F36
Signing time: Sun 29 Mar 2026 06:01:23 +0000
Manifest this update: Sun 29 Mar 2026 06:01:23 +0000
Manifest next update: Mon 30 Mar 2026 06:01:23 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: P93GujXEkNl88831bV1FmLynDtKft9B5fOe7RPgnmWA=)
2: GJE_tPOgXeLJ3DgOojgp5O691hA.roa (hash: 4D2iI83061LtWXrvOvTMbMz1c4sOHyfoyv2X47hDDUo=)
3: PIER6XCYCxthUakxWv-c4X999-4.roa (hash: aFXr3MnR3gymMlu+fiuuP0AS3tEEg0TArF5MnDX4EOI=)
4: zTdnnLc0QIacm1YbtJWIsiovLTw.roa (hash: kSnRCK8ElhlM0eULOEc3cJ4DBP5BQZF3/MbAm+M0XF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:cb:0c:21:72:01:09:4d:73:6a:ec:00:f1:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Mar 29 06:01:23 2026 GMT
Not After : Mar 30 06:01:23 2026 GMT
Subject: CN=250be58ef9159ad2f8a68a3761ac85469deb6e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:2f:1e:fa:3d:c7:5b:28:d3:4c:c5:ed:b9:
c6:21:1c:5e:7b:ae:da:24:e3:6f:e0:8e:c9:53:3e:
76:04:0a:40:c5:61:5f:f8:29:50:bb:f9:fe:4a:c8:
c3:ca:ac:80:82:35:d0:1b:1d:40:0b:4f:64:ae:6c:
76:08:e4:89:c9:8e:65:ee:6b:0d:27:7e:1c:94:7f:
ed:d4:2f:e8:7f:c5:b1:7c:f6:da:28:80:1d:bb:eb:
f8:a0:0a:30:29:e3:fe:b7:c5:5b:15:34:e7:c5:43:
da:55:97:60:1c:79:f9:8e:44:0c:3b:bb:b2:13:5c:
b4:05:8d:56:84:16:08:ab:1d:25:a7:78:61:84:0a:
24:1c:d0:3b:a3:b8:4c:d5:ec:82:f0:00:ec:d8:ca:
de:4c:18:95:39:ee:e0:ba:23:cd:02:d7:fb:97:29:
85:39:69:42:10:78:6e:d0:fc:6a:c8:b1:b5:fd:75:
1e:93:0c:aa:0f:f4:ea:45:e8:8d:5a:1e:e6:38:18:
57:12:9a:b5:78:99:42:6a:65:38:e3:f1:14:90:d1:
43:b8:c1:66:8e:62:30:40:71:78:7c:39:1c:96:a7:
cd:85:3c:ac:f6:9b:f0:30:4b:ce:b5:12:b4:7c:63:
32:dc:a3:ff:ab:01:6e:b2:20:13:60:a6:af:87:d7:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:E5:8E:F9:15:9A:D2:F8:A6:8A:37:61:AC:85:46:9D:EB:6E:0A
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:44:71:78:08:09:ba:9c:e1:9c:8e:f5:4b:21:83:ef:7b:75:
2d:77:16:93:e8:7c:0b:cd:21:aa:26:62:ba:98:96:76:6c:26:
23:c4:dd:2a:01:13:57:1f:6f:db:e8:29:c1:3c:21:f4:77:16:
e4:34:23:9f:e9:88:f5:e7:14:e6:10:22:f4:65:dd:f3:8d:68:
4f:f1:92:7d:ba:8b:7d:4c:a7:44:f4:68:10:53:ba:dd:7b:0e:
61:48:4d:ef:7f:8b:1e:c2:8f:9f:d6:27:55:7c:3c:f3:be:04:
ec:d6:ea:6d:a3:7f:07:b4:10:da:a6:d9:08:64:48:ec:1f:a8:
a2:86:cb:bc:f6:40:84:69:76:57:6c:51:8d:09:62:c9:50:c2:
b5:8b:1a:61:b3:04:25:40:29:1a:7f:de:de:83:ef:d4:57:8a:
63:6e:24:c9:fb:c8:32:8c:3c:07:66:73:b8:ed:72:c4:d6:dc:
d7:a2:54:81:62:45:21:f5:68:0b:45:24:6d:c9:d6:bd:59:cc:
b5:3c:5c:3a:05:0b:96:5d:bb:89:0b:9d:90:1b:32:4d:b3:15:
7e:57:44:73:48:ff:13:1b:f6:08:39:ed:c2:aa:8f:06:df:dc:
3b:32:9b:d8:0b:61:b9:ca:77:22:d7:93:61:b4:b5:87:84:96:
46:11:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:14 2026 by rpki-client