Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: Bs4Q4U73C6B5BAqHMTyFt78nqRjAZEwLDaRRsbXe6GQ=
Subject key identifier: A3:AF:D3:F5:AD:7A:62:E9:CB:60:0E:57:EB:D1:60:E2:59:FA:81:96
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019D9818EEA21BF85E59A52B811F2F2DBB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0C44
Signing time: Thu 16 Apr 2026 21:01:03 +0000
Manifest this update: Thu 16 Apr 2026 21:01:03 +0000
Manifest next update: Fri 17 Apr 2026 21:01:03 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: twDA6XRlOeXj+T3SYx/L9Q6vUqH5HRc4xQ9cbzVY3jo=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:ee:a2:1b:f8:5e:59:a5:2b:81:1f:2f:2d:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Apr 16 21:01:03 2026 GMT
Not After : Apr 17 21:01:03 2026 GMT
Subject: CN=a3afd3f5ad7a62e9cb600e57ebd160e259fa8196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:30:d1:62:df:bd:a5:a3:ad:d2:0f:de:98:
d3:44:64:83:78:97:fb:5d:51:c6:e2:6f:02:b7:5c:
05:73:fa:45:0a:c1:a7:a1:49:4d:0a:23:af:6d:65:
f3:76:f2:b5:6a:b0:2f:d1:d4:38:16:72:34:3b:1d:
3f:ec:be:21:ee:d9:5f:cd:17:45:02:44:8e:4a:89:
c6:ab:f0:26:5f:ae:39:7c:92:d1:ed:8c:4a:fa:d5:
4c:53:78:be:74:65:2d:a1:39:3b:0a:a7:c9:f7:9e:
c3:5e:93:63:b0:a7:ed:9c:28:85:c0:8a:28:78:12:
8d:ea:f5:a7:8c:d9:22:f9:71:b9:57:ba:5b:f8:17:
f3:18:dc:1f:2a:60:22:42:99:52:47:c2:67:03:d8:
db:4a:ad:fb:c6:13:86:98:59:88:16:ae:02:35:22:
28:50:1d:bb:f9:a1:9e:f3:38:bb:28:3d:62:5f:ee:
65:01:47:a0:1b:d9:bd:fb:a9:bc:d2:bd:de:44:0c:
50:69:bc:ea:eb:8c:02:62:3a:f1:f0:24:23:c1:83:
d7:0e:76:a3:52:d1:8f:de:c9:0b:5d:d7:bb:e2:8c:
0b:05:c6:ea:5c:97:ae:98:63:ab:62:86:0e:22:06:
a9:db:2d:cf:2b:a6:73:cb:a0:ed:df:17:d8:e2:27:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:D3:F5:AD:7A:62:E9:CB:60:0E:57:EB:D1:60:E2:59:FA:81:96
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:7d:c0:23:d1:0c:7c:2d:6d:9f:ec:c5:97:63:51:78:ea:
a0:d0:83:82:20:8b:67:11:e1:e2:b6:5d:ea:16:04:79:df:44:
d1:1c:b0:1a:e8:f6:3d:c5:5e:88:2f:e4:5f:9b:41:5a:f0:f3:
51:09:f3:90:29:2a:a4:b2:88:f2:15:29:5a:80:18:80:1b:9f:
14:22:2f:53:7b:a2:d5:d1:de:12:fa:51:fa:b5:b7:07:91:a2:
f4:cc:ab:71:64:39:32:9c:24:1b:d3:f7:65:62:0e:88:98:7b:
ed:a9:2a:2b:eb:29:f5:8f:0f:0c:be:1e:50:c3:f6:61:93:4e:
fa:c5:6c:50:87:e4:70:5f:40:5e:f8:6d:0b:dd:af:47:a4:48:
fc:b5:07:da:e5:75:ab:c5:14:ca:87:52:5d:94:54:9e:02:7e:
52:9c:80:19:c6:90:d8:fc:b0:61:0d:78:a2:8f:fd:a6:6e:40:
b4:3c:35:8f:aa:05:95:50:64:80:f5:b5:98:ee:55:41:ca:e6:
b5:94:cf:17:be:55:45:20:d9:85:95:9b:1c:df:d5:ac:22:27:
6b:a9:9e:2a:5e:64:da:bc:d0:5f:38:84:71:f2:eb:a5:a0:71:
e7:db:16:ae:97:5b:8c:e9:b1:51:d5:0a:64:0f:93:c3:cc:73:
22:9e:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:59 2026 by rpki-client