
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: njKC5SDti/xaD2a15SouOnhHpA1GxEQUjU+jo91GEo8=
Subject key identifier: D9:11:44:C7:25:BB:A3:D0:99:7A:39:84:FA:C0:66:37:E5:3B:5E:E0
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 019D9C639B4728DA18F21E3673B734C15C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 101D
Signing time: Fri 17 Apr 2026 17:01:06 +0000
Manifest this update: Fri 17 Apr 2026 17:01:06 +0000
Manifest next update: Sat 18 Apr 2026 17:01:06 +0000
Files and hashes: 1: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: G//aGCjHH0uDim27xUffeaZ8xYUmWXigSZu2S/bjH3M=)
2: 5O4Qywr4G5vGR4CnllsAHoHXE3c.roa (hash: 6B27b88IAgFkDxTqELlXG1aRObgI7R0ZM10hy8DvOwQ=)
3: WBH_fF6t3I2iXHzxgrxzCAX-XRA.roa (hash: cYtszWc1seVCwv311jPJcm6UWAtEmkWFzWyQin67xig=)
4: bfxZ3U8LPQDqD4igv8w1c53B7_g.roa (hash: wODIH/0xkpwmueRo+Rlw/VFlBWpKNaGnZK/vy02MrTM=)
5: bsYgzcPZezJ2gYbc8PKOspEFG4c.roa (hash: MpgIeeEXTiyIocenUfFnFL+sMDiBogWiOdN5+ESRb/E=)
6: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
7: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
8: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
9: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:9b:47:28:da:18:f2:1e:36:73:b7:34:c1:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Apr 17 17:01:06 2026 GMT
Not After : Apr 18 17:01:06 2026 GMT
Subject: CN=d91144c725bba3d0997a3984fac06637e53b5ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:e0:a3:f9:54:75:4a:ff:db:8d:44:15:a9:
1b:78:5e:58:38:ba:d6:b9:37:1f:3c:78:d5:d1:e4:
57:2c:64:19:7b:02:85:e4:5a:1e:25:b9:7d:74:5a:
a1:09:c8:62:25:7c:1c:02:b3:e9:22:05:f7:00:31:
27:af:ef:4e:fb:b6:b4:ad:43:0c:c7:53:d6:ba:3d:
cb:ac:78:7c:b8:79:d0:25:f2:b1:0c:e5:6a:d8:ad:
f0:14:09:df:96:06:78:07:43:7a:94:ff:09:44:62:
15:32:3b:89:0f:5a:3f:15:ef:58:98:88:7d:cc:ae:
80:7a:73:d3:54:19:72:a5:d9:88:d9:9d:0c:35:d9:
32:c7:e8:62:b9:bf:b5:6f:39:85:00:a8:b8:8c:0d:
f4:cf:df:95:95:5e:b4:81:54:14:29:95:99:fe:82:
e4:65:42:ca:13:1d:01:09:85:f1:76:e2:f0:f8:05:
ab:b1:6a:4c:7f:38:ed:70:6c:54:cf:27:33:c9:f7:
cf:08:68:ba:52:72:eb:45:04:c8:9d:44:a9:7b:91:
e3:e2:92:c1:f4:33:fa:80:2c:84:f9:d7:04:f4:75:
cd:9d:77:45:67:ad:43:19:ec:e4:42:71:44:87:19:
cf:05:4a:4a:20:7e:4d:d7:e0:ee:02:f8:4e:07:4e:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:44:C7:25:BB:A3:D0:99:7A:39:84:FA:C0:66:37:E5:3B:5E:E0
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fa:a8:47:ed:cf:87:b6:f1:d6:f1:08:b0:36:07:bc:9d:1b:
6e:cd:79:ae:b7:fe:ab:02:84:c7:da:e2:89:ee:1d:97:29:fb:
40:6e:55:35:2a:fe:01:74:e6:01:b2:5a:99:a6:84:2c:f5:6e:
d6:b3:f4:34:d6:f6:b3:5e:dc:2f:e1:45:7d:96:70:19:5e:c1:
a5:c3:00:4a:fc:1f:19:f2:31:72:e2:f5:01:a5:ea:1d:74:9d:
dd:01:fa:4a:5c:4d:b3:ab:7a:be:0c:f6:04:30:7a:41:11:11:
05:c0:95:99:02:31:52:c2:0c:b8:58:0a:15:46:51:d0:f3:c4:
a4:43:ef:59:73:2c:86:57:7d:47:22:5b:cb:1e:1f:b0:88:e3:
25:a2:6d:f6:ad:65:0c:67:7e:8d:bf:3e:4f:2a:eb:05:8e:69:
31:50:c2:a6:f4:2e:33:03:63:05:7a:9b:b0:80:6d:76:15:52:
57:12:e3:cd:05:8f:9f:95:63:66:66:25:e3:29:51:ac:7a:ff:
e4:ab:84:03:04:3c:a1:d2:27:ee:88:da:47:c6:5a:45:0e:4a:
a1:09:af:ac:a5:4e:18:44:c6:21:0d:b4:32:5b:9d:a4:f1:70:
76:b2:94:eb:04:e2:4f:59:f3:f6:42:1a:44:74:27:8e:54:72:
42:2c:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:35 2026 by rpki-client