Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier: LeqY0TA0XU1Y+DdDL6P6K71+kEnJ6JazG7NuQKInyO4=
Subject key identifier: E6:1A:1D:A8:7A:3A:E3:BE:3F:45:E4:E2:E2:C8:62:45:DE:E9:76:5E
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial: 019DA30A98F7B8B50C86B0648A8727C6E810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number: 04D1
Signing time: Sun 19 Apr 2026 00:01:13 +0000
Manifest this update: Sun 19 Apr 2026 00:01:13 +0000
Manifest next update: Mon 20 Apr 2026 00:01:13 +0000
Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: 1VDpwyPtTCtaXQGTdl3kgojH5hkyp8zMh3franXmTzo=)
2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:98:f7:b8:b5:0c:86:b0:64:8a:87:27:c6:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Validity
Not Before: Apr 19 00:01:13 2026 GMT
Not After : Apr 20 00:01:13 2026 GMT
Subject: CN=e61a1da87a3ae3be3f45e4e2e2c86245dee9765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:47:e8:d3:34:1b:95:c2:db:10:a7:4b:8b:
dc:44:82:ba:1b:fd:90:6c:19:31:a4:85:49:7d:a2:
82:99:ee:91:9d:58:3e:b0:ba:fc:40:ee:9b:11:c5:
81:8b:c5:46:ca:8a:fe:3c:48:47:96:09:78:74:a1:
e7:36:36:61:dd:dc:01:93:7c:ab:89:3c:17:9b:f6:
9c:d8:82:e1:4e:d7:13:90:f6:ec:e9:9a:29:53:33:
eb:50:b3:3b:ed:f5:54:67:23:a5:c8:d7:e2:59:86:
4a:69:7b:97:ab:36:38:7a:c6:63:8e:3e:34:db:03:
73:fe:0b:19:31:a7:0d:00:34:dc:e4:4f:af:fe:64:
f2:21:df:ab:01:7b:cb:96:ba:25:34:14:c4:e4:a1:
e8:29:9b:37:d4:7b:de:c8:a7:bb:78:d6:42:d7:04:
37:21:d1:4f:75:00:95:e5:78:5c:1a:eb:8c:16:d3:
27:87:2b:af:52:bc:57:e0:e8:0f:85:30:15:0b:94:
e2:99:24:e0:39:58:8c:80:5f:06:2a:1c:da:b4:9f:
be:19:60:61:c9:a2:f3:be:f0:e2:9c:26:57:4f:5c:
a8:64:23:d4:20:6e:45:27:e4:7b:ba:9f:3e:24:d2:
ef:70:25:48:dc:bd:15:2d:15:96:8c:48:bf:15:07:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1A:1D:A8:7A:3A:E3:BE:3F:45:E4:E2:E2:C8:62:45:DE:E9:76:5E
X509v3 Authority Key Identifier:
keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0c:77:3e:82:d1:ba:28:01:e8:f3:4c:1a:4c:d0:88:3c:3d:
f4:59:74:21:7b:ee:a6:e8:c8:9e:35:c4:9b:69:86:87:cb:89:
69:44:9f:d6:1e:94:95:11:78:43:85:6b:05:4b:6c:69:0e:46:
56:5e:c8:65:4f:b9:ce:a9:51:59:31:db:3c:dd:0d:08:7f:85:
2a:c7:0d:22:23:ca:64:1d:5d:fe:81:24:c8:5f:d8:12:0b:e9:
04:3d:7f:51:1e:ec:0f:e4:89:7a:62:4f:5c:06:0a:be:b6:42:
ea:67:23:39:0b:2e:b4:09:ff:1d:b0:47:74:17:a0:95:c8:1f:
98:6f:70:4b:8e:76:e5:a1:77:14:37:ee:be:18:f2:41:73:90:
8e:77:55:59:60:ff:47:d1:db:8f:74:19:cc:57:01:40:c7:e6:
6f:8a:26:bf:f7:96:56:d9:ab:e6:48:af:e5:0d:60:77:71:27:
96:41:0e:3c:9e:f6:84:e4:fe:fa:b0:c1:d3:bb:48:2c:d4:bf:
86:3f:9c:aa:79:fc:a4:ef:08:10:ed:18:2e:26:01:4a:f5:4e:
69:43:5e:7d:d2:0f:a2:b4:f2:aa:c5:54:80:6b:57:38:a7:a8:
72:69:c9:d9:76:d7:9e:a8:aa:9b:74:8e:a7:16:77:b0:00:a6:
85:91:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:27 2026 by rpki-client