Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier: 8ZQhbDRz6o131zCyhdlKsoDw+e/UvtZksZfqTGCf86Q=
Subject key identifier: 0B:07:FC:CB:68:60:E6:64:90:A2:A6:0B:92:9B:06:15:80:0B:53:07
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 019CAB33F7A26EDE39EA29389000645CBB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number: 05A3
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: z4aiBs0EgvlEnhNUUmm2t9OzAkynuPGaW/vuYFNKXpo=)
2: 5hSNwWLNWCAUYLUKlFOgbC-vsKw.roa (hash: fkCkSIkOMr1NgMDTMDUskq39VJ7KZjaa4kYDj6t+Z0w=)
3: 7CXmH7ThrZok20WiAGjCXCBOzas.roa (hash: ML0vggVdekDweRUo8ISIsoQBBgpWCyTUPYs8nGYXR2s=)
4: 9-C51BQ9GR3x8sWko39QajrgzuQ.roa (hash: 1bZx3qAnqXddYhE0b5hAmr5qKot7DzAZND6Oe0URbRY=)
5: 92Ks2sFC0w0p0AIFF49f1gWqGCY.roa (hash: D1mBgUfkWtkbrrO6F1qZG97Uv8V0Ofc3+kHoQHbc2Zc=)
6: R9yQDUpo9qSNelx0KQxWO9fm9iA.roa (hash: RSvmXKJf5yDyS1EyQpjsuSAr6t0VEWEQu/Rk/10QmtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f7:a2:6e:de:39:ea:29:38:90:00:64:5c:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=0b07fccb6860e66490a2a60b929b0615800b5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:d1:2a:fc:62:d3:1b:24:d1:8b:43:58:95:
cb:48:a8:99:58:07:27:69:f6:07:65:f1:e2:92:80:
b6:81:17:66:b9:29:c9:b1:ba:33:f0:5b:94:d8:73:
8b:be:92:6d:d6:36:92:2b:63:e2:c4:4b:b8:39:c8:
fb:b1:86:90:c7:c8:fe:d9:f9:0f:89:ff:a8:58:8d:
52:ce:4a:3f:2f:d1:6c:80:f2:03:2a:a6:eb:0e:bf:
c6:b0:61:20:eb:a5:5d:ce:78:67:1d:01:b9:8e:ca:
9f:ac:50:01:b3:63:cd:5e:73:27:f2:ee:ab:7c:71:
0e:63:5f:68:20:52:77:32:7a:27:87:37:60:29:96:
03:f8:8e:41:5d:db:07:89:25:e9:67:a0:50:00:76:
54:85:b8:f3:bc:e3:d7:e3:82:a0:ba:6f:af:c0:aa:
ed:76:39:c0:ce:e6:7b:b7:f6:52:69:1a:66:41:a1:
ce:96:2c:10:50:2f:1c:85:f0:0b:86:ce:a5:8b:c3:
87:36:33:7e:91:ae:3e:6e:48:ea:37:ae:8e:1a:a3:
74:7c:57:48:46:cc:c4:09:5b:c5:a7:7b:56:71:b0:
06:ac:1a:67:51:20:6b:8a:55:cd:8e:04:72:d0:e4:
b9:43:ba:06:1e:2a:39:b6:59:33:45:42:62:18:38:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:07:FC:CB:68:60:E6:64:90:A2:A6:0B:92:9B:06:15:80:0B:53:07
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:b2:c0:ae:4a:6e:7a:44:33:f0:4f:25:88:3f:72:ff:3c:
f0:d4:8d:3f:03:2a:4c:2b:21:5f:80:72:21:6b:bc:48:fd:2e:
de:78:16:72:1a:1b:51:65:ce:be:f9:e2:79:07:1d:18:5c:20:
8c:00:3a:a7:1d:f3:5a:6c:33:c8:c3:bf:6f:2e:fc:ab:10:88:
9b:e4:5d:ad:1f:50:db:ba:b2:8d:a8:2f:f1:01:09:45:9d:3c:
f3:78:5b:69:80:e7:43:a6:63:76:a0:a4:d3:c2:a0:95:0b:ca:
19:d7:d7:f2:3c:66:4a:18:f2:a1:a1:c3:df:45:d7:62:de:5b:
19:0e:31:72:1e:0a:f3:f3:03:30:ee:3c:83:0f:46:53:3b:54:
43:c6:46:a6:a4:36:37:c1:72:38:74:d4:70:64:62:af:f1:55:
76:9c:e9:7b:4b:93:d3:de:d8:67:26:ce:54:c8:d0:58:02:a3:
05:26:58:3a:45:ee:62:70:af:f4:f1:6f:97:3b:33:3b:d6:4a:
28:ae:77:68:6f:de:4d:b8:94:c6:06:0b:f4:d2:45:1a:2d:b5:
1d:cd:73:03:68:18:db:72:e0:d5:fe:79:d0:a6:9f:04:f4:0e:
88:d9:5a:cd:f7:12:61:db:41:d6:56:ae:37:95:e4:02:43:36:
fa:6c:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:24 2026 by rpki-client