Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: NkLx58sfBZYRTkb3ABctCbdGg4qT/jzNv7Wk8BHvA5I=
Subject key identifier: FC:BE:F8:3E:1B:EC:73:0C:8D:A2:23:4A:3F:35:4E:96:01:D6:B2:9B
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019D9962B757113EDF161D5D60FA868EA8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0AC7
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: oqIap75TB+Xc+eNCPRtMjzaMN+eXgW45GBwKJlIvCJo=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b7:57:11:3e:df:16:1d:5d:60:fa:86:8e:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=fcbef83e1bec730c8da2234a3f354e9601d6b29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:1c:cb:86:d9:34:36:28:37:0c:03:e3:89:
e3:02:77:57:27:75:b4:e9:f9:05:9d:3d:60:27:cb:
31:47:78:0a:81:1c:54:d4:8c:f5:d7:9e:88:26:c3:
5b:6d:52:1b:71:55:29:e2:51:27:bb:c4:1e:0e:6d:
00:07:fe:41:c1:78:50:fa:97:7d:c7:65:5a:2f:b5:
4a:28:ff:9b:68:f3:af:10:bc:a0:c2:c8:2c:18:a6:
15:68:63:de:e7:00:7a:8b:06:11:9e:4a:62:f6:cc:
d0:e9:1c:b1:33:2d:57:d3:e2:1e:80:b7:6d:13:4f:
db:e0:88:9f:35:66:47:0e:3c:30:f1:bf:0d:e0:ab:
23:fc:28:8f:36:56:5c:2f:fc:3d:d6:07:21:22:9b:
36:b2:0d:7e:e1:81:39:68:5e:ff:4c:b6:50:d6:8a:
45:46:29:af:4b:0d:7c:a0:b9:f9:48:7f:f0:b0:25:
06:3f:44:35:a5:25:d5:30:c0:e6:73:4c:6a:2c:86:
a6:6e:89:34:57:9a:ae:f3:0a:b2:f0:27:fd:ed:46:
99:c8:30:2d:13:12:20:af:d3:cb:6c:ee:12:8a:11:
74:1c:b8:e4:56:8b:3b:58:87:9e:80:52:31:27:ad:
b2:10:fb:1c:99:d8:b4:bd:c8:69:ff:8d:02:e8:fe:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:F8:3E:1B:EC:73:0C:8D:A2:23:4A:3F:35:4E:96:01:D6:B2:9B
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2c:c8:bd:3d:c4:6c:84:76:11:06:ce:e4:aa:09:60:ec:a2:
d3:72:74:cf:14:0e:6a:8b:9f:d5:58:cf:bf:ef:73:05:ba:b6:
61:e8:7f:90:97:3c:41:b1:ca:bd:11:bf:41:7a:8c:be:b7:d3:
69:12:47:96:48:7b:9b:07:cf:19:74:7a:c6:01:c3:38:47:c7:
c9:51:b2:8a:7d:55:32:8b:5c:bf:4e:6e:26:4e:c1:95:f6:cd:
6f:97:9f:08:6b:19:b8:6b:a3:24:1e:70:6a:e1:79:e1:bd:88:
fa:05:0a:9b:05:99:2d:fd:35:36:34:84:9c:b7:c7:fb:54:1b:
c1:06:6c:e0:87:3c:1d:06:08:20:73:7c:2d:82:bd:22:a2:7e:
eb:2c:c3:b7:bc:e6:48:03:06:48:7d:98:45:5f:0d:90:a6:1f:
25:cd:d7:76:36:11:ed:db:60:c5:8b:52:b4:72:d4:64:97:37:
94:6c:07:8c:cd:c4:92:82:30:18:21:80:38:46:5f:ae:5c:04:
5c:11:8b:c6:19:5f:66:53:42:bd:75:2c:37:9a:f8:d9:3e:ed:
bd:d3:c7:29:34:ba:f4:b5:f5:79:bf:3a:3e:2c:87:09:80:ee:
10:79:fd:62:4a:74:f9:fa:58:20:30:1d:8e:f0:a1:67:5c:d8:
24:41:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:50 2026 by rpki-client