Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: fa6a8yRtAg4GWHqgXuqyIQeB7rIRewYcODDUVesSgEc=
Subject key identifier: 92:C2:26:B4:88:7D:80:7E:23:DA:E4:B4:9F:4A:CD:A6:BF:F6:EB:5B
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019D3752E59C730136A7CB994BB936DE0C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 1233
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: 8gIsaddeMYO5oAsUrWTeGk1W+0MHM6cVTMf9ZqFs1yI=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e5:9c:73:01:36:a7:cb:99:4b:b9:36:de:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=92c226b4887d807e23dae4b49f4acda6bff6eb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e1:8c:a7:5d:99:9e:b8:cf:17:6a:03:42:b7:
e8:b3:24:6d:1f:c8:27:b6:ff:5c:67:e4:48:45:32:
9c:e8:0f:56:12:bf:4b:93:8e:61:28:ee:de:d6:a0:
45:d2:ce:61:a7:4a:a8:48:a6:c8:92:24:2f:9a:0d:
06:cc:2b:e1:3e:33:02:61:f6:79:26:4c:d8:fc:5b:
46:a7:b5:ec:01:d1:49:5b:59:41:05:0c:6f:9f:2c:
7e:db:3e:aa:5a:2d:22:6f:7c:8b:c8:e9:96:7d:ad:
ae:4c:46:28:01:a6:6d:f3:3f:60:14:71:12:1e:56:
d0:d0:59:7b:ee:26:9a:e6:85:6b:ab:04:40:69:85:
bf:11:c3:51:c4:cd:1e:8e:07:9f:36:11:f5:1c:4e:
72:90:26:0c:87:1c:80:b6:62:43:99:a3:03:be:09:
75:12:05:16:32:b2:4f:85:08:f6:22:2f:a6:ce:08:
55:b7:cd:78:db:e4:5e:8f:66:2f:40:8d:e8:2c:91:
f4:88:1d:77:3d:fa:31:e8:e3:b1:56:f6:0a:32:fb:
e4:f3:de:cd:9c:87:88:79:57:ef:5c:be:f2:a4:9c:
6d:74:fb:d4:45:c5:91:7a:c0:59:2e:d3:52:67:49:
c4:f0:0e:6f:a8:ce:c2:1f:60:24:94:aa:05:f1:b1:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:26:B4:88:7D:80:7E:23:DA:E4:B4:9F:4A:CD:A6:BF:F6:EB:5B
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:9c:40:24:aa:ae:25:c7:8d:d8:48:de:2c:80:ab:84:04:
26:88:45:85:f0:e6:02:5a:64:8a:8f:1e:77:a1:54:1a:ab:30:
83:91:98:0b:a9:06:76:0b:96:a3:a9:c5:fb:88:ce:96:ce:d9:
e5:a0:ad:85:5d:21:e1:e6:cf:7a:58:7b:d1:53:46:a3:6d:7b:
98:18:64:e5:9c:cc:55:e1:f3:e6:f1:b5:f8:26:b9:65:06:77:
d6:fa:30:2c:b1:40:1f:71:5b:24:b4:6c:b8:cb:ac:65:41:ee:
f2:9f:a4:46:a6:bc:0c:8d:aa:7a:12:59:3b:8d:d4:ae:11:49:
5a:2b:ef:03:27:bc:18:1d:8c:18:ee:14:3d:25:53:80:5d:b9:
4f:6f:f1:a3:2b:c3:33:b0:e8:89:de:d1:48:5b:68:b7:0f:5d:
a7:49:e8:60:50:5e:dc:1f:2b:82:d9:25:41:98:61:94:c0:87:
22:13:fe:1c:75:c4:37:9f:5b:5f:ea:30:41:5b:e6:59:bd:6d:
ed:92:52:2e:ec:d8:00:f9:22:2e:27:e6:3c:43:5b:f3:f4:56:
e0:78:cf:7e:66:c9:86:16:ee:3f:39:9a:55:f8:0c:8c:47:1b:
f5:56:7d:59:e9:88:c6:5a:c9:d4:7a:0b:36:bd:64:b4:21:0b:
de:11:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:51 2026 by rpki-client