Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: 3rjwh1n5/BsVs6En5mJf4taiixVlYCaC66I5IpoDnvI=
Subject key identifier: A2:D3:67:88:A8:63:FE:41:96:AB:F9:64:FF:C0:37:04:11:8F:2B:03
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019CABD9F780E67DB29A1641EC69AB9759FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0A4C
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: L+K27GnEhHf1cIOruKCbjp6iIX0N6Qf1kY6uKMO0uJg=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f7:80:e6:7d:b2:9a:16:41:ec:69:ab:97:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=a2d36788a863fe4196abf964ffc03704118f2b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:a3:2a:dc:35:9b:17:20:c9:e4:2e:48:fd:
c4:9b:aa:10:cc:8b:d7:0e:0c:06:f2:d5:0e:40:01:
79:71:e5:c8:3c:8c:f6:af:24:b8:fe:00:91:34:d4:
10:fb:6b:a0:19:61:5a:46:20:33:65:f8:e6:78:45:
29:82:82:1a:d0:9b:8a:69:08:77:fe:25:2e:6f:0a:
3d:83:a2:c0:4f:12:43:78:60:fa:9e:05:d9:52:52:
1e:aa:62:f7:51:aa:14:a8:af:2a:42:a7:d7:d1:25:
2f:8d:c0:f6:49:57:dd:a3:22:76:59:0e:cc:23:5e:
bc:6b:6f:4f:74:41:10:ca:4f:c5:11:ef:e5:87:b4:
59:08:33:ee:7a:44:4b:e4:4b:2a:50:4f:94:1c:95:
da:ed:b2:08:46:b3:c8:1c:e0:31:a3:a8:55:cf:27:
8e:1a:84:97:79:a1:dc:b9:21:19:89:f1:f6:49:cc:
74:b2:08:95:f5:3c:96:15:46:7b:72:9d:62:85:77:
a9:97:43:39:c9:4f:41:c8:4d:40:94:bd:f9:8c:09:
f5:a4:5f:08:c9:fe:35:36:0e:7e:ed:c9:09:3a:4a:
f6:92:eb:d5:1d:a9:61:d5:59:11:a0:d9:5b:9e:47:
e9:02:da:5d:a2:aa:ae:6c:82:19:82:f1:b9:86:6d:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:67:88:A8:63:FE:41:96:AB:F9:64:FF:C0:37:04:11:8F:2B:03
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:21:7c:23:a7:dd:6a:fb:8c:cc:1a:2c:56:c4:c7:08:b4:53:
3c:13:8e:88:da:48:e9:ec:c4:6e:b6:01:45:bb:06:7e:5d:ea:
c6:ee:81:d9:2e:6b:f4:f8:3d:96:6e:01:24:76:b7:42:0d:12:
fa:3c:67:0d:e8:f4:7a:ed:ea:75:b7:89:d1:96:9c:de:1d:e1:
2f:cf:4d:9f:58:e6:c4:40:ea:74:1e:12:17:ea:db:20:ec:18:
cc:3f:27:d8:ac:1a:d6:2b:5d:a8:3c:21:9d:64:c3:80:c6:40:
6d:c9:17:0f:b5:79:70:25:61:7b:0b:cb:b8:9f:26:1e:1e:cf:
48:5b:47:8f:c0:60:45:77:4c:84:fb:d3:8f:e1:c8:b0:f6:bb:
95:7b:f9:30:ea:e4:30:a3:68:6e:c7:bd:c5:1a:74:0e:c7:ac:
24:50:f0:a0:f4:34:96:0b:9b:e7:a5:c0:9a:9c:3c:51:88:d5:
73:9a:6d:b9:f7:ac:4c:d9:09:ef:8c:85:b5:36:89:2e:11:c7:
26:83:25:41:c7:b7:3d:14:ca:7e:f0:40:f6:67:e2:12:a0:c6:
07:8e:84:8d:c4:7a:b4:bb:a4:6e:03:c1:6d:5c:7c:09:b5:93:
8f:0b:c0:d8:09:d6:26:cb:e1:15:fe:44:ff:52:c8:42:32:34:
ec:03:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:49 2026 by rpki-client