Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: ENRZwXAFC+CyeXDg+tuk/Q7THmvXO1LM0x2DKL+4fPo=
Subject key identifier: 40:28:11:78:1C:25:C0:4E:EE:24:1B:37:A7:85:D1:7B:F3:71:29:34
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 019CABA1EB7100A4AB3A04024E43D51035CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 16DE
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: fzh8RfNC2ag0xP2TZ+cqMNvgrnp+DOCM5cleSn+KgE4=)
2: BHIfo0SUvriKZsyFCXiSME1_wPg.roa (hash: yw3xzgJDYvAe05HAZHE3RD577H1UTSvrT/Xm9tpbxKg=)
3: NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa (hash: k4M73AdKqWqWSQkTMso46G2VUYiguHQrtP/UOxmaNHc=)
4: f_5vf3q7C7ELxTwv6wBQUewDWgw.roa (hash: O4+DioXtLDVmGcPO2WyW0jSnAleYxRmF3dcn2FLUeDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:eb:71:00:a4:ab:3a:04:02:4e:43:d5:10:35:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=402811781c25c04eee241b37a785d17bf3712934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:52:88:cc:24:46:bc:2d:ab:46:7a:fb:cd:
44:52:5d:bf:7d:05:d3:b7:69:36:40:b2:6d:95:55:
93:fe:99:6a:d2:5e:f1:34:f1:03:15:9e:5a:6e:58:
64:36:1c:65:77:54:68:fc:3f:14:50:d1:5b:31:fc:
a3:82:4e:99:7e:9f:6d:f5:33:5d:62:50:8b:d2:bf:
93:70:5a:de:59:db:5f:b9:a4:9b:d6:f1:f6:84:1b:
37:a9:3f:8a:7d:32:58:db:08:7d:c0:c2:a7:50:bc:
05:12:ca:a4:f1:08:8f:2e:e0:49:29:5d:54:84:4b:
57:e2:a6:dc:eb:f2:52:57:ae:cd:d2:c0:bb:7e:08:
08:ca:45:82:2e:12:7f:bc:e3:a1:1f:9a:aa:44:bf:
29:7e:6d:ef:f8:6a:82:df:81:a6:40:72:6e:65:a4:
7b:cb:86:00:bb:00:50:58:1f:4a:c9:fd:63:5e:be:
8e:2b:e2:ca:ad:68:2c:ad:1d:af:f6:46:73:3c:44:
71:c2:3c:8d:4c:af:20:2d:88:f6:36:93:98:72:3b:
b6:1b:2a:9e:50:fb:e9:a5:14:6b:1d:b9:f2:f9:a9:
72:72:30:c3:44:cb:0c:00:84:c7:7d:7b:89:cc:11:
d8:fa:38:d4:0b:7e:63:81:71:b8:1c:c2:ac:22:a3:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:11:78:1C:25:C0:4E:EE:24:1B:37:A7:85:D1:7B:F3:71:29:34
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:02:f7:03:ec:97:b6:2d:17:de:09:54:e2:e1:2e:29:9f:
69:f6:80:b4:74:63:37:c0:2c:4a:5a:cb:2e:6d:5d:bd:ed:7c:
dd:dc:07:8e:68:88:ca:8f:48:2b:55:2c:da:3c:6d:a5:76:f6:
05:f1:73:73:b9:6b:0e:2c:72:30:ce:11:90:c5:ee:dc:6c:51:
a6:2a:9b:61:17:93:7a:a9:01:4c:6b:85:0d:8d:01:2a:5e:8e:
c8:1b:58:07:d2:68:da:8f:32:65:5f:8f:b0:ca:5b:c0:7f:d2:
df:a0:31:69:f3:ba:c8:61:6d:11:aa:a9:85:db:f3:d0:11:07:
58:2d:65:78:af:2e:7a:c9:d7:ad:10:77:66:3a:5c:66:c2:e9:
a0:60:37:75:37:56:e9:a4:74:4a:df:a8:2a:2b:94:d8:70:cb:
94:75:90:ff:af:49:ae:85:34:33:dc:60:f9:17:0b:01:ab:0e:
39:0b:44:40:b8:2b:9f:2d:f6:bf:82:5d:88:77:a5:dd:4e:5b:
01:ea:f6:6a:ec:a5:55:5a:d1:df:5d:37:a5:a0:6b:49:c1:00:
4d:f8:d0:de:6f:76:47:84:c2:c9:01:59:fe:cb:44:1d:22:20:
aa:8c:9f:7a:63:57:71:a0:85:b3:3e:01:52:da:fb:3e:8b:ec:
a6:42:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:53 2026 by rpki-client