Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: hiYPfrnD4wnsgfe0Ervq0v5pqKxwC3uG2A3USoNcOpw=
Subject key identifier: B4:3C:13:84:3E:4D:F1:69:8E:35:52:43:29:ED:8C:E3:6C:1D:FA:19
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019CA97CA5EDC42BD7E9CA16986EE9D2FE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 04B8
Signing time: Sun 01 Mar 2026 13:00:44 +0000
Manifest this update: Sun 01 Mar 2026 13:00:44 +0000
Manifest next update: Mon 02 Mar 2026 13:00:44 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: DJ6Rc7ujRYRrcd0wdPL71asDet9d+w3772+FkOvLipE=)
2: QIVGwWpDhmP0Lt1vWLEMeupfAyk.roa (hash: OEQd4UwgEr9+CWSpGLqPnKGVZ8XYzfyB9h22FefazmM=)
3: r6WgsUq6jiFumRINyEG5GV6II-U.roa (hash: NWG/33AP1v+nUP2w6gJBO4n+5g2mG5UrFdSFRba11Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:a5:ed:c4:2b:d7:e9:ca:16:98:6e:e9:d2:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Mar 1 13:00:44 2026 GMT
Not After : Mar 2 13:00:44 2026 GMT
Subject: CN=b43c13843e4df1698e35524329ed8ce36c1dfa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:fb:c5:b0:e2:f9:d9:66:46:2a:9a:74:a7:
4d:7a:d8:6d:1c:ac:eb:1d:84:b3:3e:86:93:bd:11:
8b:d1:e8:b8:cc:cb:11:80:92:23:b2:a9:09:c5:fe:
40:79:97:41:f7:88:26:26:20:2c:36:2f:e7:b6:8a:
e4:1a:88:b5:0d:a6:13:bf:2b:31:c4:1f:6f:31:ac:
06:37:d0:76:d1:30:4c:d2:64:fc:d6:0f:fc:51:bc:
0e:9e:6b:42:93:a7:3a:f7:ce:f1:02:f1:7c:c9:53:
9a:bd:03:2b:6b:04:b2:3f:08:af:bf:f9:ee:00:4c:
83:df:32:fb:37:44:f1:fb:4c:fc:65:08:cd:9c:3e:
4a:11:91:ba:76:25:38:69:54:6f:54:f8:fb:6f:dc:
fa:57:b3:fd:74:c4:2f:00:8f:66:7b:f8:9a:11:cb:
4f:36:ed:b9:c9:0f:2c:89:70:25:b3:91:4b:12:9e:
2b:f5:75:48:f8:61:12:a7:c6:f5:2c:73:a3:74:77:
b1:8a:08:ee:12:af:91:09:18:66:41:d7:ef:a9:25:
3b:82:36:b1:ab:b1:40:3b:33:f6:29:2f:8e:9e:22:
d6:18:02:13:aa:c1:87:d6:41:a1:4d:fa:71:b0:76:
a5:b3:83:c4:6b:4e:07:0e:2d:37:63:61:89:48:5d:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:13:84:3E:4D:F1:69:8E:35:52:43:29:ED:8C:E3:6C:1D:FA:19
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:25:b4:1a:69:06:bd:56:57:38:19:8f:f2:72:68:a7:cb:
27:51:e4:03:a8:3a:f6:d3:86:82:66:4c:df:b5:f1:9c:69:85:
a6:4a:84:13:14:dc:5f:61:7e:87:5c:8f:de:0b:13:34:9e:23:
3f:b8:bb:d8:00:a5:96:2c:a5:47:06:7c:6f:07:52:66:43:20:
8a:c3:41:a3:8d:7f:8d:8e:af:ae:f0:bb:60:da:6e:c9:d9:6c:
48:de:07:bd:5c:24:a6:7d:56:21:fa:16:41:ea:c7:8e:f8:0b:
3f:e6:fd:20:74:d5:67:ce:9e:2b:53:7e:be:ff:01:59:af:3a:
07:69:b7:b8:8f:ec:0c:fe:bc:8f:71:d0:6f:c1:7b:f5:65:d4:
e9:3e:39:66:2f:49:ab:22:0b:0e:c3:79:e7:e1:2a:ab:11:f5:
11:2d:9b:96:c2:91:f0:0a:77:c7:4c:33:5c:31:61:45:de:f6:
de:3b:fe:7a:13:cc:d9:8b:15:39:f5:02:d2:c5:fd:d1:35:dd:
7f:e6:09:35:d4:97:5b:ee:e2:2c:83:c7:48:33:e6:9a:21:7f:
20:53:db:21:1d:13:67:68:97:a0:7d:c2:57:6e:16:0f:2b:1a:
d6:26:48:20:08:02:3b:1e:c1:e8:55:56:29:ed:f4:0e:3f:9a:
36:29:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:42 2026 by rpki-client