Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: Pd5pPHGwK4t3/5Nv90EEus2ejkonwdx0l5+tWTqxCCM=
Subject key identifier: 40:75:9E:4B:CE:83:11:13:63:5E:4A:A4:5F:98:0D:7C:2D:FB:1D:54
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019CE3A31C0A287A665FB561E74F19261D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 033C
Signing time: Thu 12 Mar 2026 20:00:43 +0000
Manifest this update: Thu 12 Mar 2026 20:00:43 +0000
Manifest next update: Fri 13 Mar 2026 20:00:43 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: ukgd+/j7qazdAf/TQCcuYoCY9KC/IrTTv/c6r6IScMA=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:1c:0a:28:7a:66:5f:b5:61:e7:4f:19:26:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Mar 12 20:00:43 2026 GMT
Not After : Mar 13 20:00:43 2026 GMT
Subject: CN=40759e4bce831113635e4aa45f980d7c2dfb1d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:07:0b:e6:3a:97:40:4e:33:76:8c:ff:09:
68:3f:8f:ed:e8:25:d1:fe:68:3e:49:97:bf:3d:d5:
29:f0:1a:91:99:12:15:4c:de:cf:08:24:b4:00:b7:
5d:39:19:6f:53:b7:fb:56:b4:6e:c0:9c:68:ab:59:
87:ac:cb:71:5b:67:8f:97:fd:c2:1f:b7:b2:c5:51:
fe:9e:6b:e9:d4:dd:66:09:43:ab:a0:d2:a0:42:36:
d9:67:9b:36:1a:8c:b0:d3:9d:1a:df:90:a1:16:a8:
d3:b7:74:e0:28:5e:95:ed:db:6b:a9:30:0a:f0:d9:
9d:96:a2:46:9f:4c:56:10:13:37:f5:d5:b8:60:ef:
c3:1c:59:e7:3b:72:37:ab:d0:55:b8:1b:47:23:1a:
f3:43:de:29:68:ae:39:65:47:c0:66:7b:01:e5:5b:
48:78:55:10:17:c2:8d:67:6a:38:f6:c6:b1:ff:43:
10:06:bd:63:ff:08:03:e8:c0:63:c8:cf:9c:06:2a:
fa:fb:c8:7c:86:bd:0f:7e:f4:98:a6:5f:1d:cf:8d:
af:e8:8d:bb:9b:d0:97:1d:49:04:02:b9:34:fa:9c:
ec:e0:95:88:01:70:60:68:56:b5:9d:15:cd:c2:31:
6b:d3:fc:73:35:c4:a6:a8:e1:82:05:5d:57:43:18:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:9E:4B:CE:83:11:13:63:5E:4A:A4:5F:98:0D:7C:2D:FB:1D:54
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:40:b8:d7:7c:fb:8f:b8:98:94:69:90:72:9e:99:22:04:91:
5e:97:43:4e:30:46:c5:d1:3d:52:3e:1c:c6:bd:3f:61:fa:8e:
70:ad:96:72:37:f4:c5:01:02:0b:36:26:b1:c8:87:45:f6:11:
8c:6c:c0:1f:93:d1:2b:76:81:43:14:be:23:92:ac:02:cf:21:
87:e6:9a:50:07:2b:8e:2e:7e:b8:bf:31:36:ac:a1:ac:7f:7a:
c2:ab:1f:c5:50:09:6b:08:13:14:d2:e0:f2:97:b8:41:43:83:
9d:77:be:29:14:a8:9e:0a:aa:68:8e:66:27:8c:f2:48:50:29:
ad:94:b8:d9:12:30:ca:61:d4:e9:43:7b:d9:26:fb:78:55:b8:
3e:1e:b9:99:d9:7b:54:98:43:17:24:35:3c:28:2a:29:98:a5:
c5:43:72:55:ad:32:f4:be:9d:5b:e2:e4:4b:26:14:0d:d7:d0:
1d:94:cb:44:55:2b:a2:11:84:6d:54:53:8e:6e:28:f0:1b:9b:
8d:80:f0:ed:04:ad:88:d0:2c:f1:37:b6:51:85:f9:f7:18:ad:
94:44:e8:7b:6c:ac:c3:29:ac:39:ad:38:80:5e:db:9f:26:7e:
4a:7c:b2:f4:e3:be:ac:03:87:54:ee:59:4f:34:d7:0d:fe:02:
65:2e:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:40:06 2026 by rpki-client