Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: 4WdsXjjuvQEsK1rlIS22whfnCELNyhhnZXEGeif8zKY=
Subject key identifier: E6:8B:70:BC:58:7C:0A:F0:79:ED:20:EF:64:61:E2:91:C8:7E:3F:22
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019CAA8F7F264CD6C0AADA2C45E7DDA8899B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0BC9
Signing time: Sun 01 Mar 2026 18:00:56 +0000
Manifest this update: Sun 01 Mar 2026 18:00:56 +0000
Manifest next update: Mon 02 Mar 2026 18:00:56 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: 78CKRDrYi3qNSCP5F/ZpOqREhiXoFRZQCR0gHaBC8aA=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7f:26:4c:d6:c0:aa:da:2c:45:e7:dd:a8:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Mar 1 18:00:56 2026 GMT
Not After : Mar 2 18:00:56 2026 GMT
Subject: CN=e68b70bc587c0af079ed20ef6461e291c87e3f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:6c:f2:e9:f3:6e:32:ac:9e:df:b3:73:17:
95:2d:50:b1:f1:64:ee:79:be:8f:3b:1f:e3:1c:fb:
9c:1d:3f:2c:fe:aa:55:2d:54:a3:bf:3a:ea:1d:90:
23:35:af:2f:ee:d2:c4:ac:31:8d:cb:2b:9d:8a:2e:
e8:31:bd:fa:af:7e:a0:c7:f5:e3:50:fc:8f:b7:09:
7b:9d:2b:b0:ba:1f:ca:57:9b:d2:b9:b0:1d:f6:15:
f5:97:f9:58:2f:b8:fb:39:9a:6d:a0:bc:3b:2f:a9:
a7:09:97:e8:e3:c4:99:ab:3b:f1:63:cf:dd:2e:e1:
7e:48:37:8c:c7:35:58:85:19:e0:d1:91:14:87:7b:
dc:7d:c0:e4:6d:c3:cd:5b:fc:d4:5d:b2:9e:dc:07:
b7:f2:bb:d7:b4:2f:2f:f1:30:d0:0f:ac:4a:e4:28:
21:a4:2d:70:04:da:cd:23:0f:7d:ae:04:a5:99:ff:
5d:35:9e:06:74:b5:d4:ac:b7:e1:5c:09:d3:0b:83:
e3:df:eb:91:52:73:22:2d:dc:db:b7:a2:0b:f0:ac:
c2:f1:76:14:3b:ce:fa:f9:a4:55:4d:8b:aa:5b:a3:
0d:35:0d:96:65:88:2b:94:44:21:3e:75:87:b7:73:
04:91:cd:77:db:23:61:14:55:74:fd:95:25:12:a7:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:70:BC:58:7C:0A:F0:79:ED:20:EF:64:61:E2:91:C8:7E:3F:22
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:be:cb:5c:b9:4d:dc:88:15:a7:dd:26:b1:f3:5c:27:54:02:
a0:ef:6a:4b:fc:4f:70:34:b6:3e:2e:a2:1a:05:50:13:3d:69:
72:93:4b:9f:b6:68:12:e8:2f:a0:fa:d4:d8:3a:0b:dc:21:d1:
13:6f:69:23:62:83:e2:3f:c3:09:12:39:12:1e:bc:17:af:13:
4c:f3:aa:ec:47:6e:4b:a4:72:2a:8f:85:a3:57:82:1d:70:da:
10:c7:fa:45:fe:d6:63:a5:38:71:c1:0c:24:19:16:57:90:7b:
ce:04:a3:18:16:a0:32:1c:df:2f:62:44:67:16:26:70:97:e5:
43:c3:ae:61:86:6d:86:52:18:8c:81:0e:e2:71:f7:f6:e0:ec:
b6:47:35:29:d0:c8:c1:d6:ab:c5:e8:c4:6b:e4:ed:4d:15:f0:
f7:6d:c0:a9:e8:f8:18:da:a7:30:47:6f:48:ce:c9:e0:a5:e5:
5d:36:3b:46:6f:59:f6:04:d4:e5:98:4e:19:57:b5:27:84:31:
68:89:e7:0d:fb:4e:66:31:ce:c8:56:46:fa:98:9a:18:d5:2e:
6a:fb:62:c1:19:21:20:0e:ec:f5:92:f7:c6:cf:cc:56:8d:33:
69:76:5c:1d:5a:6f:63:73:ad:51:81:16:e1:c4:ff:97:26:c9:
43:f4:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client