Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File: c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier: 8kr0lemk4ynSlGme3LkNYXf0b/A03Dl3bYP6csb3K1E=
Subject key identifier: EF:51:33:5E:63:31:69:F4:DF:64:B0:00:9C:87:2B:49:1E:F1:AC:AA
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 019D390A0535B7F0993472C1CF9409290180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: TW2-9DzFOuohPs1xj6I1jkzuZzI.roa (hash: IdQKbJvB7AT8M3FZo1RjBrLT4XNU6TgjC9b0dCsoz+k=)
2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: mNNTtyxYo7mdOyh5MiN6SFrYproxcJa+jUHC2ZgxtNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:05:35:b7:f0:99:34:72:c1:cf:94:09:29:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=ef51335e633169f4df64b0009c872b491ef1acaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:9a:97:7b:3c:c0:32:68:a9:3e:c2:ee:36:
d9:c6:38:f3:05:fa:51:e2:93:ca:ea:5c:53:b2:63:
0b:ff:45:15:c7:24:99:5a:be:f2:95:38:7c:66:aa:
51:2a:b5:83:75:d9:48:bf:ea:b2:b2:bb:38:34:fd:
00:ea:8c:64:b1:75:2b:68:6f:90:63:0d:d6:4b:69:
4e:27:d9:b4:48:de:17:83:89:cf:b8:c4:0a:f1:f2:
a6:b1:5c:65:47:e5:8a:3e:58:df:fa:8e:04:46:80:
79:68:1b:79:d0:a8:cc:80:96:7a:86:68:bd:b0:69:
15:66:7e:bd:75:e5:ad:e5:47:76:4f:f6:09:0d:bc:
ef:e1:9e:31:d5:a0:db:ee:53:df:7c:24:b2:14:9e:
2a:91:08:d5:61:d3:b4:08:37:6a:dd:32:76:f3:87:
00:65:83:9c:9e:ba:11:d7:ad:31:0b:1f:a9:44:66:
92:c6:80:fe:61:4f:51:36:b0:4d:89:71:60:44:49:
32:9b:ea:38:55:ec:cd:b9:8e:8c:a8:5d:83:55:ff:
5e:61:11:40:8b:46:51:0c:7b:e9:28:a3:20:60:74:
d1:08:bf:53:0a:e7:c3:86:52:ee:dd:e1:6f:a4:19:
30:8b:9f:0f:08:25:3a:fe:b8:e3:97:6e:cd:07:83:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:33:5E:63:31:69:F4:DF:64:B0:00:9C:87:2B:49:1E:F1:AC:AA
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dd:5f:0f:3a:ce:c8:77:55:ec:44:3e:84:2d:46:49:86:54:
5b:7c:73:c1:84:69:51:a1:c1:53:e6:80:1d:b8:d6:bb:15:17:
a7:f7:3f:78:5b:cf:fc:36:16:4f:f1:87:19:60:79:5b:90:75:
22:c8:d8:c6:e0:29:db:25:0c:f1:82:ff:30:72:aa:e5:85:4f:
35:1c:2a:46:63:92:68:5e:4f:b9:32:27:f2:ee:32:a1:1c:ec:
a4:ba:b5:5a:a7:4c:54:36:11:ee:48:6d:67:24:58:9a:b7:46:
8f:82:d8:9b:a8:b0:53:37:a7:26:fc:97:63:70:2f:9e:84:d7:
b8:18:f2:f8:17:54:64:74:a2:81:b1:0c:05:74:56:7e:9f:b8:
8b:3e:41:87:b1:48:0d:c3:3f:a1:32:9f:71:52:52:7a:7e:ae:
91:cf:5c:d2:ac:59:00:b4:72:38:a9:08:2d:bb:b9:8f:ce:2b:
38:f2:5a:66:64:a0:42:eb:22:04:71:5e:e6:42:75:e2:dd:08:
b7:43:15:5f:b3:b1:c5:9f:ef:f4:24:ca:cc:f6:de:e1:f9:d8:
ff:24:9c:06:0f:13:54:d3:4a:36:28:c9:84:75:4c:e3:49:22:
60:e8:0e:fb:8a:ee:78:3e:83:08:3c:6c:09:b8:0c:24:94:c6:
c2:f3:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:45 2026 by rpki-client