Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: 3WveNUSOYbILk2ynIclGFy0KPotvP2xRuYABtW9B7eY=
Subject key identifier: 28:02:E4:69:9C:53:3D:48:7E:14:76:BF:C4:EE:C2:FA:BD:30:1B:3D
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019D38D2BE17B8D678C1AAB2BA5A5EEEEC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0C59
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: vt6WbL0jXuNe8YtzQIEwkkNsMO8BlnvwMuL2hvdj2tc=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:be:17:b8:d6:78:c1:aa:b2:ba:5a:5e:ee:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=2802e4699c533d487e1476bfc4eec2fabd301b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:69:64:bb:3b:56:af:a0:cb:55:37:ca:bd:74:
7a:69:02:87:43:aa:b6:e5:6e:60:2e:c4:5f:6a:10:
8d:1b:40:c6:5e:a8:0e:e8:5b:44:d5:ec:8a:d9:c9:
a8:34:de:46:7a:6e:d4:66:4f:dd:dc:f9:88:2c:35:
6f:f0:22:8b:0d:e8:f6:b1:fc:89:67:52:c1:7d:67:
11:a1:54:d4:46:ce:4d:fa:44:7a:bd:e6:38:6c:e0:
72:06:81:03:b8:a4:1f:f6:3e:6a:95:5e:57:06:ed:
43:26:65:75:d7:19:7e:b9:b2:30:75:88:59:c8:f5:
7b:85:3b:ae:60:a2:e1:f7:76:be:15:b1:16:42:b0:
94:23:bb:0b:b9:97:f7:86:d4:5c:5b:f0:75:70:4d:
59:44:31:75:f5:18:c9:88:3a:23:bf:63:98:7e:01:
de:a6:b5:b5:59:28:21:84:e9:39:44:2b:25:f7:a0:
23:03:a5:4b:52:a4:90:75:40:87:2e:90:9a:f8:d0:
85:4b:ac:ab:cf:ae:de:e7:f0:48:2e:67:5b:ab:c1:
1c:9e:01:21:08:80:8b:ee:2a:3b:16:c2:96:dc:5e:
38:8d:99:4c:65:71:6f:d9:53:b1:58:f5:9a:82:43:
ea:df:25:6d:24:dc:35:7f:55:94:0c:16:75:03:66:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:E4:69:9C:53:3D:48:7E:14:76:BF:C4:EE:C2:FA:BD:30:1B:3D
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7d:25:e3:41:e5:02:c2:46:d7:7f:b0:0b:e9:7c:d1:4e:85:
2a:87:fa:5f:11:3c:2c:dd:56:f0:47:fa:71:ff:c6:34:9f:07:
24:14:47:8d:4d:07:18:6b:51:8f:49:50:69:41:34:f1:0c:75:
4c:4b:a4:51:4b:11:11:6e:c0:fa:04:d5:d4:4a:c5:8a:07:b9:
04:d9:42:e2:53:b1:c2:b4:09:e0:c8:c8:90:cd:2e:e5:10:88:
46:e1:cb:23:59:6c:b7:55:19:14:36:ff:57:37:78:50:fb:36:
ed:1d:09:52:f1:37:9d:fc:af:a2:f0:8a:c6:5d:2f:4c:53:08:
ca:96:0d:4d:97:88:e2:b2:0b:61:d4:93:ff:6f:45:70:4a:fa:
02:86:c0:39:61:e2:0f:c9:e0:e1:9f:82:bc:cb:0a:c1:92:a0:
5e:36:22:35:c6:b8:b9:2b:e7:19:44:ab:48:88:76:0e:5a:4f:
8a:f1:b5:0d:34:8a:8b:3a:7f:c7:16:62:3d:db:6f:7e:84:9d:
7d:81:fb:77:f0:88:99:9a:c2:2e:bf:c7:d1:52:21:db:31:75:
cf:80:1c:c4:4d:29:b8:b9:ee:0c:6b:69:db:88:de:45:59:cf:
a9:ba:df:8b:da:0f:99:dc:0b:a7:98:9a:5a:8a:ae:37:e4:d5:
45:83:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:06 2026 by rpki-client