Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: T/WCZn8REZu3aydPan1F8yyP0fJ0hif6t3rcSuB5msA=
Subject key identifier: 86:59:1F:70:2A:79:F8:69:8D:8F:86:86:61:3A:2E:C5:4D:91:47:DF
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 019CABD9101407232D06643077C9F8179F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 0451
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: xgcfbAbgAMfqURX3jS9WorviWk2UoIAP6BUve0rmEMw=)
2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:10:14:07:23:2d:06:64:30:77:c9:f8:17:9f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=86591f702a79f8698d8f8686613a2ec54d9147df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:80:19:21:5e:4b:cb:d5:cd:79:04:5d:60:
a3:f2:5b:c6:f9:fb:fc:79:fa:91:78:fd:c8:7a:35:
24:17:63:19:ea:86:92:eb:7d:03:5f:aa:f6:5d:dd:
80:ce:cd:65:1a:41:e0:40:b5:35:14:45:04:9e:92:
8c:d9:2e:d2:8f:9e:01:79:38:c1:0d:e5:3d:d3:1a:
e8:b8:ff:d8:69:f9:f1:bd:f7:a9:44:d3:ad:e9:2a:
77:cc:0e:61:2b:1e:cd:9e:1c:13:da:3b:b3:4f:3a:
86:bd:ee:3d:01:86:55:17:96:ee:fd:6b:36:23:54:
9b:93:b8:86:88:43:18:65:05:79:24:d9:43:98:47:
78:f7:2e:98:af:ae:d9:0c:5f:21:2c:ee:0b:af:3a:
3f:94:40:b7:45:2c:5c:5c:45:de:4b:32:d6:73:45:
e3:b2:64:a1:76:d3:fc:b8:c6:fd:25:37:84:b7:e4:
79:e9:0f:62:b8:8c:c6:b3:2e:89:b7:5c:20:46:d7:
5b:c9:d4:e8:ef:cc:00:52:5b:c3:25:d8:ec:42:de:
4b:67:71:fc:77:40:d3:57:52:d1:45:53:c8:19:f9:
9b:3c:80:d2:ec:e9:36:14:7d:b0:83:bc:62:03:ff:
5f:bf:fd:dc:b8:bc:7f:e5:70:f1:0a:96:db:cd:a2:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:1F:70:2A:79:F8:69:8D:8F:86:86:61:3A:2E:C5:4D:91:47:DF
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:20:75:32:b7:d7:75:7f:76:5a:1e:b1:2d:2f:0f:c5:59:ab:
9a:c4:38:90:f1:46:27:c7:ed:3f:3a:7b:db:67:4e:26:d5:ff:
9b:27:b5:ef:86:15:30:69:54:72:5e:f2:7a:38:ff:e0:27:fd:
f5:aa:7d:fb:3b:7f:84:2f:ef:f2:ee:ed:72:5a:59:50:ef:93:
c0:8b:75:ce:64:2b:f6:2e:7a:3f:8e:e4:e9:97:ea:e5:ec:5f:
62:0a:4f:95:33:a4:d4:12:6d:d6:de:d0:05:93:2a:22:e4:16:
90:6d:05:3d:06:a7:42:dc:c5:90:d1:d7:8a:ea:65:48:5e:fa:
a1:02:2a:2b:b9:b4:e3:12:7c:b8:db:62:a6:fc:ea:8c:8c:86:
de:5e:b0:28:a7:ed:17:8c:d4:48:24:03:b6:fd:24:61:a9:4b:
e1:b1:c9:12:a4:c9:f7:4b:8b:36:bc:76:fe:9c:e6:c1:b7:41:
e5:9f:3f:83:9f:2b:d3:64:f8:0e:e1:b4:e5:32:42:b9:ee:32:
40:c1:a1:3b:ba:cf:2b:52:ff:81:7b:ad:f0:c1:18:85:b0:1a:
bc:10:1a:bc:1b:00:b7:78:aa:75:14:fe:ae:e4:d7:f0:c1:76:
0e:b8:d9:00:4b:66:81:22:45:3c:bc:9b:4d:9f:f6:f0:de:ef:
0b:92:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:03 2026 by rpki-client