Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: pq5hnU7nT/BdSkvKt8/H80c3e7f5tmyENZMeuAePwt8=
Subject key identifier: 80:16:48:1E:B5:9F:EB:C0:C3:25:0B:6E:9F:0D:F5:7F:91:AC:30:CC
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019CAE6C3E8D07E2362D063E295F19CD834B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: FD
Signing time: Mon 02 Mar 2026 12:00:55 +0000
Manifest this update: Mon 02 Mar 2026 12:00:55 +0000
Manifest next update: Tue 03 Mar 2026 12:00:55 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: Kwk9u2tGwaZyBbdQLeUH+ozt2bflDpvnzCilERQLozg=)
2: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:3e:8d:07:e2:36:2d:06:3e:29:5f:19:cd:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Mar 2 12:00:55 2026 GMT
Not After : Mar 3 12:00:55 2026 GMT
Subject: CN=8016481eb59febc0c3250b6e9f0df57f91ac30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:7c:77:4a:2f:f3:8c:d6:e6:b0:9a:29:23:
6c:dc:4c:a5:c8:c0:46:e2:b2:90:9d:f6:ab:6d:15:
5c:94:1b:1f:c5:b8:f3:cb:57:51:a7:ac:66:d5:a0:
b5:84:56:63:04:7f:02:ff:d8:50:2a:0c:c1:3e:03:
d4:ad:2d:b5:f5:f2:34:0c:ec:57:9f:94:da:92:bf:
7a:cf:07:56:a1:0a:08:7d:a5:03:23:fe:65:3d:96:
18:65:01:e1:f5:25:fe:56:27:a7:90:35:49:5b:98:
84:7f:e3:3d:68:79:c0:cf:6e:d3:76:fe:7c:02:ce:
0a:b9:74:79:52:b3:ce:30:ca:cb:6b:21:44:41:0f:
d5:e6:1b:97:ce:ba:fa:4c:07:85:e6:be:0b:50:bf:
b8:58:80:ae:1c:42:56:68:62:e2:76:a3:6e:a4:4f:
9b:74:88:a5:7e:d4:91:7c:70:58:31:77:a1:1c:c6:
bb:29:1f:b0:98:ca:cf:78:70:1e:8f:dc:85:43:72:
d6:31:7d:a3:ee:59:92:31:8e:76:d3:a3:8d:41:63:
4f:a7:25:2c:2d:f6:0f:b6:6d:9e:9a:bd:12:23:59:
2b:ad:a3:c1:06:66:a0:ee:e2:12:6c:c3:62:6f:7c:
d4:3d:fd:dc:39:fc:15:1a:51:a0:14:b4:de:60:50:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:48:1E:B5:9F:EB:C0:C3:25:0B:6E:9F:0D:F5:7F:91:AC:30:CC
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:75:95:10:f1:a5:25:8e:85:5f:38:34:c4:aa:61:39:20:
e8:31:c9:99:24:57:5f:7d:88:64:b3:94:c1:6a:29:a5:ea:1b:
ab:18:c1:40:f3:47:53:28:73:84:6e:6b:41:b9:ad:d4:ea:0f:
17:86:a1:cf:a6:4e:80:05:31:76:e3:69:d3:38:a6:a6:54:21:
96:df:79:26:47:7b:3a:cc:21:3b:b6:f8:ba:cc:70:96:64:00:
2c:35:42:b9:7a:f5:77:18:a8:d6:ad:aa:a9:a6:2a:c6:bb:94:
78:8f:c7:28:4c:b2:d3:a3:16:c1:52:b0:94:2f:0e:2f:2b:68:
76:6f:df:bb:3d:18:60:b4:ae:d3:59:77:ff:ce:b1:f2:b1:99:
15:cc:69:7d:b8:fa:c2:28:27:72:29:f4:2e:4f:15:3c:3a:68:
3e:e5:ce:d2:74:02:2b:6e:76:06:c3:6b:ca:39:3c:a6:e4:fb:
2f:b4:8d:07:0b:99:5d:52:0b:84:f0:1b:71:1c:92:11:b2:11:
82:b4:4c:57:2e:32:68:c6:a3:a7:cc:18:c8:3f:94:27:23:26:
71:1c:d9:f6:70:31:3d:da:25:88:77:00:03:e9:eb:80:3e:1e:
4e:75:12:07:15:b2:6f:76:33:d9:57:af:c9:c5:99:9d:30:63:
4b:a6:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:40 2026 by rpki-client