Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json)
Hash identifier: 3ZXjrPB+NUjtJQQIDL5ScqEn6h2TmkkBO2fTdBTCxek=
Subject key identifier: FA:D5:D3:BE:58:99:A0:86:ED:36:B5:FF:D4:FA:D9:F5:91:E8:E2:02
Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Certificate serial: 019D37C05D95C6340B4251B27BC61D490772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
Manifest number: 040E
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: Byn8+m5/KX0g4RXdpQldCFwtdg+DhOp4ERQ/SvL4SWk=)
2: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (hash: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5d:95:c6:34:0b:42:51:b2:7b:c6:1d:49:07:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=fad5d3be5899a086ed36b5ffd4fad9f591e8e202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:f7:3e:b3:14:c5:e0:32:53:57:14:de:a7:
1a:05:1a:33:b4:32:1b:9e:5c:2c:bf:d5:03:23:6e:
43:de:44:3a:51:ad:8b:2c:f3:d9:bc:35:da:2d:77:
3f:dc:1a:12:6b:e3:b2:62:eb:36:b0:0a:68:1c:1b:
f6:a1:23:74:08:2e:d8:a5:75:55:bb:a9:a7:b2:30:
9e:73:bd:f8:9c:26:79:89:b7:82:2d:48:3e:8d:4c:
93:bf:83:4d:a0:86:a9:70:c7:bf:c9:d7:cb:d1:5e:
6d:dd:e1:0d:47:59:fe:c8:a2:85:a2:3a:df:bd:d2:
9b:35:30:72:7b:47:50:65:73:a8:82:07:d6:13:21:
6d:f5:b3:4e:41:c4:a5:e9:9a:f3:91:58:50:f2:83:
5e:ad:e0:f5:b2:07:bd:d3:ce:cf:d5:a0:ad:c6:18:
21:bd:42:65:08:ba:14:74:c8:a3:82:69:1b:56:5f:
5b:5a:4b:b6:f1:8a:06:f0:c6:8d:ab:fa:62:a7:7d:
02:09:04:a0:76:5b:b5:4d:d1:86:63:d9:3b:2b:7d:
f9:7f:59:93:d4:81:0f:03:4d:5a:fe:6a:a2:3f:73:
3d:73:15:bf:c5:74:cb:d9:13:d6:94:70:0e:21:54:
13:b1:c8:9d:d8:2b:fe:da:47:82:a9:18:6a:c0:1b:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:D3:BE:58:99:A0:86:ED:36:B5:FF:D4:FA:D9:F5:91:E8:E2:02
X509v3 Authority Key Identifier:
keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1d:9e:a0:4d:11:59:b8:b8:7e:5b:5d:59:72:b1:68:7f:7e:
16:97:2e:2f:db:1d:3c:8a:29:d8:6e:e6:94:fc:44:c5:9b:69:
bd:28:cd:ca:ff:f2:73:72:2a:e5:64:7f:77:72:06:cb:66:22:
c5:a6:f1:9c:2a:88:d6:db:9c:af:eb:32:c1:d1:31:7c:6f:2e:
66:40:dd:23:a2:6d:a6:26:17:a6:bb:6f:81:64:55:18:f5:39:
c8:f8:90:60:17:4b:2a:5b:e9:b9:9f:d1:1e:8e:c5:f6:48:d4:
7b:40:06:f3:95:1a:14:f1:d2:9e:2c:bb:c1:45:e1:f7:25:8e:
a4:f6:94:2f:6f:45:bf:e2:65:a6:ca:d5:eb:70:2e:2a:92:1a:
87:0f:c3:c7:f1:70:d2:52:4d:dd:f8:bf:be:7a:0f:74:fe:a6:
b6:bf:ad:a2:9a:75:3f:ee:39:af:a2:11:f0:98:ec:2e:b3:a5:
4e:d3:fb:5c:d9:e2:2e:21:a7:bc:96:c4:42:a8:fc:3c:4f:a0:
47:e1:5b:59:92:37:b0:a5:c7:ec:d1:74:c7:48:a0:93:87:02:
49:be:16:71:64:77:18:e2:9b:91:de:13:56:08:80:ba:f9:6d:
11:22:7b:89:5e:8e:6d:d1:a5:ac:70:1f:46:03:36:e9:e1:c9:
4c:8f:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:41 2026 by rpki-client