Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: LaExYAe32h2RUVaVSVEQBLyE1/wEQu8IZYfIoSQUvW8=
Subject key identifier: 70:83:A8:2D:64:30:7E:12:AF:A6:2B:62:E2:B1:00:D3:BF:0D:2F:E1
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 019D389C2C55779E1854F55E52C2ED594899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: hJhU38hqZmkzYByWlDqQw9167TeZpcb5Z3syvGXg2P8=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2c:55:77:9e:18:54:f5:5e:52:c2:ed:59:48:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=7083a82d64307e12afa62b62e2b100d3bf0d2fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:72:15:89:44:23:24:ee:d0:4b:f7:50:94:
fc:34:b5:de:01:ae:60:71:a7:6f:e1:0d:6f:4d:75:
9f:9a:7b:05:99:fb:d5:76:bf:d1:31:d0:15:fe:de:
1f:e5:68:56:ee:f3:7a:af:3b:6a:cb:df:87:66:d1:
53:6f:4d:7b:2b:50:3a:ff:7f:af:e9:e9:7c:19:36:
6d:82:25:43:d1:ef:68:86:07:c9:4a:e3:12:99:85:
c4:48:b8:95:5c:3c:f3:8e:53:ba:7a:46:de:a5:96:
8c:67:37:20:94:73:f1:cc:9b:73:22:24:7e:3f:ec:
56:55:da:70:3f:f1:48:df:9c:6d:15:22:18:da:ae:
7d:39:fd:2d:19:9f:11:07:05:6a:dd:57:b8:35:a7:
59:f0:69:d5:13:81:33:73:cb:de:b6:c7:5b:1b:9a:
f4:10:35:a5:db:c8:36:ba:55:a9:7a:24:40:1c:40:
9b:24:01:51:3a:0d:13:0d:6b:88:58:75:45:c5:bc:
1f:8c:be:64:82:17:ae:72:ec:9f:89:8c:4c:df:53:
2f:b4:90:54:f6:09:27:04:e7:ce:a2:3a:c3:0a:19:
27:da:37:4d:84:43:b0:4b:b3:5e:0d:1c:dd:7c:03:
14:7d:8a:9c:70:84:80:78:8c:da:e4:a7:7b:c7:22:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:A8:2D:64:30:7E:12:AF:A6:2B:62:E2:B1:00:D3:BF:0D:2F:E1
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:24:ed:dd:e4:cd:ab:e7:88:aa:87:86:7e:86:f6:ab:a1:
92:d4:c6:aa:b0:d8:b4:ac:d7:f1:f2:a2:81:e6:8b:86:36:f1:
c8:e5:ff:6f:a5:d3:76:44:3e:0d:07:2d:00:95:74:25:5c:7d:
e0:80:60:8f:7f:64:54:6b:f8:29:d4:94:0e:83:fa:a0:09:ff:
2b:a1:5f:11:95:b1:b7:61:5a:c5:83:bf:5a:d4:5c:e3:cb:6f:
86:f6:a2:e2:41:25:94:13:23:fa:7c:47:5d:39:88:c9:d5:3d:
ae:48:e2:f4:2f:aa:35:7a:ba:32:db:0d:34:64:12:ba:f7:61:
ac:d5:91:c3:32:7b:99:aa:74:13:1e:85:0f:2b:2c:e7:80:df:
a8:f4:73:40:90:30:67:4d:41:e2:70:03:c7:58:68:75:f2:b8:
b7:1e:b8:ca:b8:6e:77:b6:fc:02:c7:39:d1:a4:d4:c9:6e:e5:
32:21:10:50:6f:31:3b:d1:a7:c0:61:5c:40:62:8c:f7:8a:c5:
f8:64:cf:ae:00:f1:16:51:df:31:ca:85:78:76:5b:ae:ca:ae:
9c:b0:24:ea:15:a7:4b:38:e6:e1:d1:21:2f:4c:64:2d:59:a6:
d2:b8:9a:55:fb:06:ed:8a:19:68:74:e4:af:d7:b1:17:c9:66:
1e:17:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:36 2026 by rpki-client