Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File: 2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier: RV7WmlB52f/fVcH6YzfD1TMm5dPu3ry+jctFPWilzeE=
Subject key identifier: E9:15:30:9B:68:15:9F:22:D2:B6:6B:40:A8:CA:B8:AC:FF:E2:F7:35
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial: 019D37C04A8ED1263183AEF89383C0B30F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number: 0265
Signing time: Sun 29 Mar 2026 04:00:42 +0000
Manifest this update: Sun 29 Mar 2026 04:00:42 +0000
Manifest next update: Mon 30 Mar 2026 04:00:42 +0000
Files and hashes: 1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: D4uh5Maqavb2zn4tj2Zw3DLRArU4Q4RDuPD+swcQGCU=)
2: 3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa (hash: t4uGj4/wTSstzpMGs7YKMuCqSdG4+YDmS+F49g2Xx/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4a:8e:d1:26:31:83:ae:f8:93:83:c0:b3:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Validity
Not Before: Mar 29 04:00:42 2026 GMT
Not After : Mar 30 04:00:42 2026 GMT
Subject: CN=e915309b68159f22d2b66b40a8cab8acffe2f735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:61:c9:1f:d3:49:0d:fb:77:30:f4:cf:0e:
ef:27:9c:37:0f:cb:be:82:06:0b:a8:c1:92:e5:d1:
25:f2:2c:55:f9:6e:a2:c8:f2:05:e6:27:7a:a7:d5:
7a:d2:56:be:b7:d3:81:32:7a:1e:b3:01:cc:d2:8b:
2a:ed:13:23:46:a5:ec:21:01:0f:87:62:8e:9b:fc:
76:dd:e5:a7:aa:01:78:04:46:b9:3d:00:5c:34:29:
1e:18:fe:f7:6b:bb:2a:b2:6a:84:d6:bf:51:61:14:
64:c3:90:d9:03:9e:1a:8d:ba:f7:b6:17:c4:9f:5b:
ed:46:1b:32:8b:03:b7:bf:07:2c:e3:28:66:ad:79:
f1:67:1e:aa:f9:4a:32:24:a6:b7:fb:a9:e2:7a:ec:
0c:8e:df:d5:53:42:b4:9b:97:3e:20:6e:35:1c:aa:
66:d7:5e:cd:3a:c7:9e:b7:92:71:59:15:a1:2c:97:
34:8c:0c:99:a1:d3:66:f6:f7:9d:6e:e3:54:d2:b8:
32:24:00:70:3d:bc:8f:1a:21:6c:10:38:f2:30:aa:
3a:51:be:9c:0e:4e:66:59:83:b6:7b:05:3a:89:37:
14:9c:0c:a4:85:d4:a6:f1:29:79:93:e9:1f:d0:f9:
26:43:d4:9a:73:52:c4:70:67:c7:17:e0:b3:44:99:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:30:9B:68:15:9F:22:D2:B6:6B:40:A8:CA:B8:AC:FF:E2:F7:35
X509v3 Authority Key Identifier:
keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:22:51:af:c4:be:0c:36:5a:69:88:a4:cc:56:bb:f2:35:79:
5f:63:78:09:18:56:a2:af:4a:17:5d:22:ea:15:5b:e3:e5:d4:
19:0c:92:b9:1b:43:a9:24:52:83:4c:0e:5f:f1:c6:10:19:9c:
af:ed:25:40:5d:56:24:98:c7:78:06:8f:93:45:5d:ef:41:8b:
9c:23:3b:59:44:6c:51:d5:9e:13:46:02:ba:09:2e:ba:51:f1:
2a:6e:34:ec:4d:60:a0:88:af:7b:ee:e7:69:9f:6f:39:05:c3:
5c:50:b0:ce:3f:61:7e:b6:9b:ea:fe:eb:6b:40:55:81:7e:cf:
b7:c5:2e:30:6e:b5:d6:a8:ca:0e:ca:19:8b:e0:b3:41:9b:12:
86:17:38:46:9a:50:7b:65:f1:6f:0b:15:f2:2b:d0:4a:57:4c:
ee:d0:53:a4:97:03:76:1e:0e:2f:fb:24:5b:5e:7c:17:f9:b0:
81:2f:0f:f8:22:8f:d5:f0:ad:d7:81:34:b6:5b:1b:5b:6a:b3:
b5:aa:b6:46:07:98:33:0a:e7:86:31:a8:66:b4:43:ac:6f:6b:
a9:80:b5:93:8c:13:20:10:8f:c6:6e:b3:e1:52:6a:8e:08:49:
4b:6a:83:4a:32:6a:dc:35:1b:fc:f4:76:5b:af:f7:d2:82:6a:
ed:ee:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:03 2026 by rpki-client