Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier: jKs5pcn0WW8T4DPXrLMWzarSM/se463HEEoqWXujLQc=
Subject key identifier: 7E:10:AE:7A:C2:F9:19:BE:5D:C1:F1:B6:AB:01:3A:6F:3B:96:4E:6D
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 019CAC1001C8B14862D3AC3523ABF082FC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number: 0E15
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: T2me9Xr7q0cNjoU1ZX1G2QUiXohHcF92edPGYewD500=)
2: 4FYy4IVc0E0edu7Aspaqd269s3k.roa (hash: AewBAICqPk/AoyYo2Nui0QpeK5+BqYlSJNp/7pYYLxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:01:c8:b1:48:62:d3:ac:35:23:ab:f0:82:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=7e10ae7ac2f919be5dc1f1b6ab013a6f3b964e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:f7:af:d4:37:32:3a:cb:bb:37:e1:0f:a9:
fc:7d:6f:ce:b4:95:de:11:fa:2a:ce:48:be:ef:fa:
1d:80:ec:f3:72:4d:16:52:d7:17:df:92:ad:67:07:
d5:e0:70:21:c5:05:58:0d:32:75:0b:63:2f:aa:8f:
0f:57:f6:38:7f:ef:06:f3:81:02:56:d8:c9:c8:c0:
b5:36:1a:8c:19:3d:11:48:cb:ff:ef:d7:79:c5:7f:
08:6e:40:89:04:66:a0:48:98:6e:73:8d:9e:51:ca:
63:88:02:1a:a9:38:2c:c7:8b:a9:c5:80:75:b7:26:
7e:fb:2d:06:d2:15:84:32:8f:a6:01:e4:b6:c0:e8:
f5:ff:d1:ae:4f:9d:30:c7:27:46:43:17:0f:40:ff:
c9:e0:06:cc:d2:18:bb:bc:62:86:60:4d:25:c9:50:
9a:f4:18:75:1e:b2:db:0b:64:76:95:0f:3e:b6:6f:
a3:69:ff:c6:3f:ae:62:30:98:a0:c5:01:2d:0a:b4:
b2:da:6c:58:cd:34:ce:c8:75:95:eb:bf:8d:ab:18:
7f:6b:ff:db:06:12:01:8e:fe:4c:cf:6b:00:31:ea:
4a:cc:8c:de:2c:6a:cc:03:0d:13:63:ba:98:f5:16:
be:84:0b:fd:81:ce:d9:92:53:f7:74:be:8b:fc:fe:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:AE:7A:C2:F9:19:BE:5D:C1:F1:B6:AB:01:3A:6F:3B:96:4E:6D
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:22:c1:0f:d1:db:a0:69:56:0a:df:1e:46:66:61:7a:c3:87:
92:cc:74:92:52:d2:40:f6:3e:40:ff:c7:ff:15:0b:16:a8:4b:
80:0d:51:75:37:1d:5b:d8:5b:5d:f1:92:3c:ed:bd:28:28:30:
6b:a4:f5:0b:bf:99:98:60:13:64:9f:77:d7:b9:ec:37:9a:68:
08:86:aa:23:b4:1f:4e:85:1e:aa:fe:58:9c:f9:9d:4d:a2:39:
0e:18:0c:44:bc:28:3d:37:9f:28:d0:29:89:e4:c7:4c:7f:12:
2f:5a:04:45:89:bc:ba:fb:77:31:91:24:db:ba:06:81:02:b7:
53:b7:fd:f9:5e:e0:ad:f6:cc:53:d2:d0:c6:6a:37:7d:35:88:
6a:3a:5c:57:e4:c2:c4:97:85:35:3b:df:e8:94:37:65:44:e3:
0a:ee:e5:38:ec:67:ba:23:d1:8e:ce:19:63:54:0b:67:d8:35:
e8:42:12:2e:96:a2:3e:c2:cf:42:ae:f2:0f:ca:d5:cc:02:70:
64:02:38:87:73:ff:bd:67:b3:ab:5d:97:b1:d7:56:a0:44:11:
91:91:b1:77:a8:e9:cd:58:32:b8:32:96:50:38:2f:e7:24:0f:
2e:a8:81:2e:04:2c:c4:d0:7a:b7:ce:97:ae:54:7b:a7:74:ce:
05:83:d4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:10 2026 by rpki-client