Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: U/9FMnGJYiCGx2lBbcS9XT3919VBvJU3BcwW8/7EYP0=
Subject key identifier: 64:89:D2:31:5E:CA:98:2B:5A:48:62:AD:52:B6:EF:7B:54:43:68:03
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019CAA587BE6E63FDE954402F9E1787D3839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 12B7
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: WislK/RoEfI/XMD5pOFKK38JB4pwNqkLXRu4YZwlt50=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7b:e6:e6:3f:de:95:44:02:f9:e1:78:7d:38:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=6489d2315eca982b5a4862ad52b6ef7b54436803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:32:c2:50:6c:b7:81:7a:52:4e:8d:a9:d1:
73:70:7b:18:98:38:0d:44:06:a7:11:dd:95:bc:f5:
3e:b7:41:40:bc:6c:0c:aa:66:d4:a5:ca:d0:cb:89:
53:d1:17:8a:99:b8:b4:07:9c:e8:be:38:ef:84:d4:
66:50:d5:bf:42:54:32:75:50:2d:07:0a:2e:0e:e6:
7d:fb:6f:d9:39:c4:ca:43:c4:e2:a0:f5:b6:91:02:
23:7d:0c:9d:30:5c:66:21:97:a3:81:52:14:44:6b:
16:16:f5:ed:8b:d2:99:b0:e3:70:89:4d:c1:6f:c5:
fc:e3:a0:da:7a:b5:81:2f:05:02:96:25:d7:6e:24:
95:79:91:de:76:4c:e4:3f:71:47:6c:96:32:48:be:
ed:5c:ed:b2:af:1c:6a:d4:ce:0f:23:95:45:ec:98:
a7:76:e1:c8:3a:19:4b:12:1a:89:bb:54:6d:45:66:
3f:27:e0:0a:07:fe:c6:ef:03:b0:eb:32:41:d1:9f:
13:38:35:b3:ef:a8:7d:06:ec:7c:22:5f:f4:d8:0f:
5d:a5:89:ff:fc:74:16:0e:62:34:51:d1:68:36:c4:
31:d4:5e:31:8a:2c:b9:12:d8:00:b5:62:5f:e4:9a:
7b:23:5e:b7:9c:e4:3a:64:92:53:25:1b:b6:52:5f:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:D2:31:5E:CA:98:2B:5A:48:62:AD:52:B6:EF:7B:54:43:68:03
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:2e:88:de:01:8f:96:f6:0f:db:97:1f:04:15:ed:49:0d:
19:e1:b9:77:75:91:a2:dd:d0:01:64:6d:a8:3f:3a:e2:cc:79:
bb:6c:d5:94:d0:08:82:1d:db:6f:70:7e:94:36:16:32:67:7d:
08:d4:7c:5c:15:e5:7e:88:89:c6:33:f5:b4:34:9c:ea:ea:37:
65:06:d7:2c:58:62:db:41:38:e4:54:02:dc:c8:ba:63:0e:39:
85:7d:33:fc:83:e5:e7:d6:a2:36:47:6b:61:38:7c:70:2a:c9:
78:c6:cf:5d:61:e0:da:dd:ca:3d:ee:15:b3:b0:0f:e2:d2:fd:
68:97:75:67:0d:0c:8d:9a:ee:44:f6:97:b9:89:ea:7a:32:7b:
ed:fb:ed:f7:e6:b8:3a:28:2a:dc:f9:74:ce:27:3d:26:d0:1e:
37:7a:81:42:50:98:1d:53:07:f2:ec:2d:09:88:98:c1:58:b8:
a6:2b:11:9f:c1:8a:8f:1e:90:31:f3:09:c1:ac:39:da:10:56:
74:da:8a:15:d8:8c:8e:34:9d:73:57:d7:34:8c:eb:bd:99:42:
c1:3d:75:38:c4:81:41:59:f5:c2:79:f4:e6:6e:ce:be:36:fe:
14:8b:fb:cc:72:76:b2:2e:01:51:55:a2:23:5c:5c:4f:b5:8a:
c2:e6:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:52 2026 by rpki-client