Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: LaqTTEq9v+xWYTvkrH07TArlgxw5yfmkJqx2M3/spIE=
Subject key identifier: 98:7F:E2:C7:14:81:EA:4C:48:51:44:DF:B8:7A:BF:5A:E5:69:0D:C6
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019CFA98BE63906D3DD95ADE19021DDEC4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 3C
Signing time: Tue 17 Mar 2026 07:00:39 +0000
Manifest this update: Tue 17 Mar 2026 07:00:39 +0000
Manifest next update: Wed 18 Mar 2026 07:00:39 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: ZgQvex1PomlOfJBDG0TKxffvVunLEua4hs9jZgd9yV8=)
2: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:98:be:63:90:6d:3d:d9:5a:de:19:02:1d:de:c4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Mar 17 07:00:39 2026 GMT
Not After : Mar 18 07:00:39 2026 GMT
Subject: CN=987fe2c71481ea4c485144dfb87abf5ae5690dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:d3:6e:91:f8:c3:9b:17:52:93:ad:0f:af:
6d:f4:4d:a6:aa:22:69:69:83:7d:5c:7b:1e:29:2e:
03:15:a1:10:3b:4d:b4:86:d2:7c:25:2b:70:13:9f:
2b:04:e0:36:f5:ac:fe:13:4c:07:a6:40:cf:f1:77:
2d:fe:ec:fb:9f:42:60:0d:d0:de:ce:fc:83:b0:32:
cc:f5:04:d3:96:b8:17:bf:d5:72:61:34:26:f8:70:
1a:df:30:d5:3b:cc:be:69:6c:37:4f:0a:5d:53:c9:
ef:68:26:a8:21:22:ca:1e:90:0d:e8:f2:46:46:71:
9e:48:ea:33:c2:aa:e1:64:dc:9e:65:74:7f:d1:cd:
64:81:f5:2d:02:09:af:e6:b0:e6:18:1f:51:61:e8:
0f:d5:15:c1:13:b6:4f:3b:0a:44:84:36:50:83:b4:
a5:ac:ab:17:6b:16:52:1c:f5:8d:13:d1:cf:a5:94:
9b:ce:7f:d5:82:a7:89:7f:35:28:fe:6f:bf:65:fb:
18:04:60:33:de:f5:3f:11:31:a7:18:7f:44:9b:b7:
18:bd:57:49:c4:fe:ad:d1:a5:a2:a3:10:63:f6:b1:
56:f3:82:83:61:f4:19:fe:22:68:70:d8:26:68:12:
38:01:cd:b6:12:f2:ac:7d:30:e5:38:6d:e5:57:97:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:E2:C7:14:81:EA:4C:48:51:44:DF:B8:7A:BF:5A:E5:69:0D:C6
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:84:7e:f6:5f:e6:b6:a1:1d:06:ff:43:e7:3e:aa:2a:0e:
33:57:f2:e5:f4:70:48:db:eb:e4:b1:96:32:d6:89:b3:a6:f3:
a3:b0:d3:13:10:ed:64:d4:bf:10:31:44:be:88:71:55:fe:79:
d5:98:c0:68:0f:d9:57:53:88:b5:0e:6f:23:8b:29:04:4e:35:
40:dc:03:c1:fa:79:19:97:7e:95:db:77:9e:93:e6:35:7d:3f:
8a:76:7f:70:52:c8:0d:77:f4:8c:31:6c:85:48:09:e3:0c:f4:
82:7c:31:96:c6:ea:00:63:b7:f1:2b:34:d9:bd:b7:25:7f:de:
c1:95:9c:5c:fb:2b:e7:88:13:fb:cd:4c:b9:42:0a:22:20:50:
29:81:de:7d:83:1c:05:54:40:a4:d3:06:e6:c2:2b:f6:84:04:
5f:e3:b7:d2:76:dd:d4:57:15:66:58:98:15:6e:54:da:a0:b5:
b7:4e:97:8a:e0:94:26:7e:80:7c:f7:a2:26:b6:e8:96:07:26:
fd:64:d0:c2:50:a1:59:af:00:f3:4a:ef:57:bf:23:bd:5b:b2:
da:a6:59:b5:85:47:0c:a6:18:73:ed:0c:89:c8:fb:ee:a9:2c:
b5:c1:d4:dd:33:24:1b:5f:61:28:7c:cd:ed:71:9a:b2:b1:c6:
ac:90:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 15:34:26 2026 by rpki-client