Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: n6punqQzzOuQrFzJosYnNXdHXjJrPXnRVtAv/gRxsVA=
Subject key identifier: 2B:5D:A4:BE:0B:03:2D:21:53:FC:77:0E:27:B8:CC:13:41:75:64:BA
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019CABD94327C4F17EBF9571A0A4496E3630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1720
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 7eS1dBgCOBqkLD1BYOUcQqwvuy6jDUbvZ35NL3Fno1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:43:27:c4:f1:7e:bf:95:71:a0:a4:49:6e:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=2b5da4be0b032d2153fc770e27b8cc13417564ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:9b:ff:86:96:54:f2:37:b8:e3:97:a9:5e:
03:32:4d:9c:f2:09:1a:d3:6b:f8:84:13:30:94:65:
44:09:ca:8f:2a:d7:3f:c5:af:9f:cf:2d:14:ac:fe:
cc:41:3b:bb:1c:b0:cb:d8:43:6a:a8:c3:6b:a1:09:
94:aa:e8:7f:52:96:4b:94:03:8e:d8:ff:6f:45:ec:
53:23:d4:75:90:f2:4e:bd:dc:7e:ff:f8:de:6f:4f:
02:54:fe:4e:6e:f6:3f:1a:37:08:57:71:37:1d:8b:
e7:95:85:1f:85:7d:8f:a4:af:12:0d:a9:ee:f7:37:
13:bb:e3:7c:bd:44:79:d5:94:58:c7:4a:fc:51:be:
fe:48:c1:be:d0:bf:76:0c:89:8e:b6:61:ba:2f:dd:
ad:f7:51:25:7c:41:f5:7b:39:9a:ee:0b:69:70:26:
38:ee:97:c5:90:3b:5c:22:0e:d3:77:98:31:42:23:
ea:c7:d8:22:e1:2b:f6:5a:04:83:f2:05:5d:da:07:
bb:65:7a:bb:b3:4d:24:ad:17:f4:e2:04:03:e3:e7:
1c:69:64:e6:7a:ba:20:84:85:eb:b7:29:af:67:7a:
b0:f2:ae:97:0f:3d:7c:73:8e:78:90:5f:ad:d6:82:
6e:cc:1e:24:2a:b9:72:8f:13:e1:8b:45:ea:f3:87:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:A4:BE:0B:03:2D:21:53:FC:77:0E:27:B8:CC:13:41:75:64:BA
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:35:51:3f:39:32:34:1f:c6:c5:2e:36:e6:48:b8:af:33:
8a:c2:f1:d4:24:83:34:93:85:cb:4a:07:f6:de:1b:18:67:51:
15:b7:ce:66:bd:e4:9e:5a:9b:b7:b6:f4:5f:3d:ac:5a:81:3b:
1c:f1:74:e0:4f:4c:f8:9f:42:8a:18:5c:52:92:6d:e0:4e:a9:
ad:42:c3:59:42:47:25:bc:fe:5b:ad:e2:40:f2:2c:d0:7d:17:
59:18:f0:44:58:bf:ff:76:d5:d6:fe:b6:05:c5:52:e6:31:16:
4b:01:50:cc:39:d8:2e:ef:32:ec:76:72:f7:90:e1:ab:96:d1:
20:91:09:fd:12:79:27:38:09:65:9f:72:8c:9b:b7:ba:c8:8f:
fb:72:17:c4:b4:b6:eb:15:58:ff:d3:4c:82:5d:1c:28:56:7a:
9c:6a:ef:1e:e3:d3:28:36:63:0a:8c:8c:ba:19:f2:af:9d:6e:
05:cd:df:d3:e7:42:40:74:b7:4d:66:8e:ee:7a:a7:df:0f:f7:
cb:e4:b1:f1:4b:8d:23:49:51:fd:26:ef:c1:86:7b:da:29:97:
e1:fa:16:85:ae:b1:34:73:26:5d:b2:8e:d0:cb:9b:8a:5c:9e:
3c:fc:0d:ae:80:95:ad:09:fe:f3:0c:58:db:6c:df:a1:63:2e:
ab:7a:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:32 2026 by rpki-client