Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: /RYHx73wMeUNqmohOSfFhBhkE5ADJ53RJkti7MGz8Cc=
Subject key identifier: F2:39:E7:CF:9A:96:9A:D0:19:C8:4F:EF:3B:C3:81:1C:4D:9A:D8:7A
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 019D38D2C6BB5D71F1A41E09889DACDFD756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 153D
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: RotKDfn6YGdhaYxtCDfjbKPSCShFbgLQoQE3FrcqsA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c6:bb:5d:71:f1:a4:1e:09:88:9d:ac:df:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=f239e7cf9a969ad019c84fef3bc3811c4d9ad87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:68:29:03:5d:af:da:17:b5:40:ea:9c:dd:
02:29:09:04:38:ef:e2:a6:a5:a2:35:c7:f9:7f:6d:
2f:8e:84:bf:dd:3e:4c:91:52:8a:12:8e:cf:c5:9a:
92:62:e1:e1:89:04:48:47:da:1e:92:44:58:8f:44:
7e:ed:8b:e6:fd:13:e0:af:23:a0:ee:39:8e:d5:5f:
6d:59:d9:96:8b:46:44:ce:76:57:e2:cf:40:0c:71:
fa:ce:4a:42:f6:40:01:89:f3:a0:73:63:5a:1c:1b:
c0:5b:27:ee:ac:d3:06:84:14:54:0c:67:26:3c:17:
05:90:ef:9f:de:31:dd:5c:e8:a5:46:34:eb:d2:3a:
28:da:c2:e0:1a:25:d5:73:f5:db:b5:1b:f8:e5:56:
e5:7b:e3:b2:38:6d:49:b3:a0:78:79:2e:be:6c:e9:
0d:f3:35:77:ee:12:b4:75:10:13:bc:b5:1d:16:e7:
cb:4a:28:dd:10:35:93:09:d3:65:0d:3d:c9:11:62:
7c:a0:ad:b1:e1:4e:b1:2c:27:01:18:0b:c4:7b:d7:
a1:45:72:52:68:b2:c3:69:24:2a:2e:22:15:8a:7f:
5d:8a:32:c5:18:b1:62:ea:24:3c:cc:6b:da:c4:82:
4c:64:43:6b:b5:01:5b:f4:3e:e2:43:fd:91:e3:32:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:39:E7:CF:9A:96:9A:D0:19:C8:4F:EF:3B:C3:81:1C:4D:9A:D8:7A
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:88:7c:5b:55:a1:4a:86:87:63:89:eb:31:7e:2f:90:49:
88:46:84:5c:fb:1c:0f:8d:5b:6b:30:90:e5:0b:05:5e:f9:cb:
60:80:69:98:48:96:16:ed:37:77:59:24:b1:15:43:e2:88:64:
05:1f:74:98:07:82:71:6b:61:ee:5a:9d:8b:7c:b4:3d:90:0d:
76:39:64:f4:34:d7:1b:57:3a:b2:66:aa:86:f2:29:2b:af:d0:
a9:68:de:1a:6a:5d:17:94:dd:ce:49:61:4e:f8:7c:a3:91:52:
7f:83:01:56:af:1c:3a:20:22:f9:80:80:df:48:d1:06:b7:98:
f9:a7:9c:ed:f8:d7:05:5f:1f:63:36:28:d3:d4:c8:41:73:89:
90:6e:8a:13:8f:c1:f5:fc:45:2c:f2:ae:62:cf:68:52:c7:9c:
fe:32:72:70:b3:ab:1c:31:f8:b5:e7:74:ae:2c:fc:76:41:4c:
3d:12:35:a4:69:fe:63:e9:4e:2f:75:82:b1:78:8c:94:18:9c:
83:bb:3c:9f:e0:69:10:d5:98:5d:ed:89:87:12:f9:a9:d2:66:
a0:1b:25:3f:e5:46:f3:79:07:b1:f3:f8:79:dd:bd:69:91:b7:
0c:80:ab:b9:68:89:cb:d7:f7:34:e5:b8:fc:d2:ae:58:79:5d:
8e:7d:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:16 2026 by rpki-client