Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: Z82Y1sL5PV4kIcSHdBxnlIiNHi1ALBVfJm5YMO+JhOE=
Subject key identifier: AF:A1:67:C1:EB:87:9F:9A:78:A0:08:89:24:4F:83:BA:B4:D5:AA:C4
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019CAC469E0CD1D4A450D9183BA5E7362498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 36
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: hsQWGbNPgbmjVBAt/ppNtxbjcccvzgS61g7bZ+otRqw=)
2: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9e:0c:d1:d4:a4:50:d9:18:3b:a5:e7:36:24:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=afa167c1eb879f9a78a00889244f83bab4d5aac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:48:d1:8d:0e:c7:50:9b:b9:53:80:ac:9f:
16:04:cb:d1:c6:60:16:77:06:b3:bb:50:d5:3e:ed:
dd:a2:4b:41:91:82:17:86:97:1e:ea:e8:42:4c:3f:
e8:1b:04:e4:da:fc:e6:90:cf:ce:f4:37:0a:dc:40:
59:de:6c:66:cc:e8:0e:d7:73:bd:f1:11:e9:af:4e:
c8:4f:be:df:ad:e9:7f:8f:cd:83:2c:c0:02:27:6a:
ed:cf:4e:05:7f:26:83:a7:8b:b6:dc:b6:b5:db:9d:
c8:b0:eb:39:e1:e3:68:b1:ef:a2:a5:20:09:8e:4b:
da:ca:a1:0e:84:78:bc:a7:81:f5:8f:fa:d7:d0:59:
12:09:ce:0b:f6:5a:eb:d3:cf:68:1e:d3:25:fc:71:
ab:fb:34:d8:99:c2:d3:65:91:69:86:83:81:64:d0:
59:2e:08:81:80:a7:4a:22:dd:f3:b3:35:6e:b7:fa:
db:d3:2d:74:20:48:d9:82:52:76:5a:ea:b4:cc:ce:
d9:80:bb:56:de:90:5f:17:d4:2c:be:df:15:89:c6:
d2:6d:fd:bc:32:4c:0f:84:ff:ed:6b:2b:75:ac:b8:
9f:c4:23:95:a8:13:1b:51:52:bd:7a:9e:78:10:7a:
aa:7e:ee:13:05:04:03:64:ac:fc:c1:b9:6a:24:35:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:67:C1:EB:87:9F:9A:78:A0:08:89:24:4F:83:BA:B4:D5:AA:C4
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:25:3f:f0:f8:30:bd:af:a1:e8:ee:60:01:ae:74:a9:40:
08:97:54:1d:d7:fa:5e:a6:c5:a8:8f:38:d8:25:79:88:02:3f:
51:9c:fa:08:7a:bd:e7:61:ca:a5:fc:e7:4f:da:69:d0:f9:35:
37:d7:4f:9b:fe:ce:a2:50:c7:a0:0c:f6:2d:71:38:9e:bc:1a:
99:d5:2a:8b:cb:2e:d1:1d:7d:85:e3:7d:74:f6:99:0c:58:3d:
6f:a1:18:15:82:91:2e:9d:57:f5:d2:70:30:87:7e:d7:e7:17:
fb:c3:00:1d:73:2c:23:e6:cd:dc:76:d1:78:40:a4:8a:8a:3a:
77:26:cf:cf:d4:c2:86:e4:5c:62:67:05:3f:2f:8d:71:58:ec:
20:46:ed:fe:bd:63:30:38:80:eb:16:08:33:6d:f1:81:75:77:
0b:fc:43:a6:32:cb:88:51:64:32:d3:90:59:f6:cd:94:7f:08:
bd:3d:73:3f:04:9f:3b:b2:fd:53:e0:a5:93:aa:84:70:af:dd:
88:8c:4a:be:3c:44:1a:a8:71:21:49:4a:a6:34:9d:39:56:15:
e6:06:32:46:25:f5:52:ed:73:61:a6:a0:12:88:ba:22:ef:59:
0a:d0:fb:09:c0:38:1c:08:27:10:62:14:51:da:38:06:58:1e:
ba:9b:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:00 2026 by rpki-client