Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier: WCKONutRHPenNJsIqTuWgOeWCIm9R3mKqLvP1kR2EFo=
Subject key identifier: 4D:2E:20:DD:00:D1:6D:8C:6B:8D:B4:F3:75:E0:99:C3:D6:F7:43:01
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 019D34BEFE02015FB4CDADEBD4687A995BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number: 77
Signing time: Sat 28 Mar 2026 14:00:25 +0000
Manifest this update: Sat 28 Mar 2026 14:00:25 +0000
Manifest next update: Sun 29 Mar 2026 14:00:25 +0000
Files and hashes: 1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: iyUCXMwV28tO/dg/XK2l0+mA+1KquC+mNRSVhQNoALc=)
2: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:be:fe:02:01:5f:b4:cd:ad:eb:d4:68:7a:99:5b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: Mar 28 14:00:25 2026 GMT
Not After : Mar 29 14:00:25 2026 GMT
Subject: CN=4d2e20dd00d16d8c6b8db4f375e099c3d6f74301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:19:cf:6c:04:31:82:d8:e1:58:00:3c:a2:
86:4b:39:44:bc:39:7d:cc:f4:51:a2:82:27:ae:c8:
95:66:a2:71:96:87:70:2f:fa:ce:76:47:37:e5:7d:
fc:85:47:5a:2e:d0:9e:00:58:0a:73:43:f4:58:fc:
89:a0:66:51:06:83:5c:0f:f6:9c:2c:ba:f6:00:97:
30:2b:91:39:b6:31:98:93:8c:c0:b5:dc:4c:20:9a:
9c:ec:fe:0b:70:f5:a4:f1:43:02:bf:58:08:51:02:
b2:40:2c:27:48:db:75:99:52:67:fd:e2:fc:27:9d:
16:0f:bb:37:33:04:87:17:cd:e4:4a:f9:f4:6f:1b:
80:54:78:cb:07:d1:df:94:90:87:5a:ff:63:e2:9d:
0a:26:ec:f3:16:63:dd:a7:2c:d9:49:38:38:93:0d:
13:b3:dc:b1:83:27:cf:66:20:ad:7f:c7:47:02:44:
23:63:4b:fc:4c:84:83:ce:6b:c5:54:0b:d5:f7:60:
df:6b:12:69:c2:dd:f4:19:45:7b:3f:a9:b9:50:0c:
1f:f1:82:af:ed:dc:f2:71:df:be:fd:9a:c0:0a:94:
42:0d:74:2d:bd:f3:ea:39:ed:2c:c7:2e:a6:23:39:
dd:81:b5:8d:76:f6:a7:cc:ea:17:c5:e0:6e:44:4a:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:20:DD:00:D1:6D:8C:6B:8D:B4:F3:75:E0:99:C3:D6:F7:43:01
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:51:51:b0:83:f2:e6:81:7d:87:eb:26:00:e6:3e:40:d6:45:
a9:8d:3d:04:2d:87:91:89:c8:d2:04:ca:cb:91:c3:80:08:c4:
f0:c8:da:58:c4:ca:fa:da:9f:bf:97:23:1b:66:3a:e9:1a:7e:
b1:0b:6d:34:19:71:b8:dc:21:ff:b2:ce:9b:6f:eb:12:9a:fe:
27:3a:c1:32:7f:ee:fc:26:4d:a0:2c:bb:5b:8c:d8:36:46:06:
9f:c0:e3:1f:21:be:a9:a6:6d:e3:10:42:c1:12:9b:7e:b8:8b:
bd:78:4b:15:21:1d:a2:e0:b3:d4:25:31:c4:52:4c:c5:bd:83:
80:91:f3:4b:fa:fb:1b:97:13:ab:0e:fd:56:9a:58:42:7e:6c:
94:50:ee:6d:90:19:45:2a:89:11:37:56:3b:0e:b2:97:f5:88:
d4:3c:cc:2c:e6:72:40:8e:3e:83:b1:ad:5f:6e:6c:07:35:46:
88:16:59:1d:10:36:dd:52:55:c6:c3:8c:44:de:21:fb:95:fa:
2d:8e:10:c8:84:38:4e:67:d6:fc:98:dc:26:37:17:61:39:a5:
56:b0:92:b8:90:a9:48:bd:0b:98:5a:91:8e:f3:81:3d:f8:50:
ff:99:52:a7:be:fe:9b:a6:af:e6:7c:18:f5:7c:d1:60:23:d1:
9e:91:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 00:16:27 2026 by rpki-client