Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: 6mBqMWY5bs7M3/c1IxsNz6SVRF04gzXX3JpeAPXN9tA=
Subject key identifier: C2:22:6C:3C:E1:03:FB:64:F8:98:44:E5:4E:D8:43:16:78:0C:23:5B
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 019CAEDA54CCD181804E384E8B7FB6E711A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0FA2
Signing time: Mon 02 Mar 2026 14:01:10 +0000
Manifest this update: Mon 02 Mar 2026 14:01:10 +0000
Manifest next update: Tue 03 Mar 2026 14:01:10 +0000
Files and hashes: 1: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: MpPeEeAZjCpuiazA8Zl1O3FvIyO+q6QvX7dEcKB8h9o=)
2: 5O4Qywr4G5vGR4CnllsAHoHXE3c.roa (hash: 6B27b88IAgFkDxTqELlXG1aRObgI7R0ZM10hy8DvOwQ=)
3: WBH_fF6t3I2iXHzxgrxzCAX-XRA.roa (hash: cYtszWc1seVCwv311jPJcm6UWAtEmkWFzWyQin67xig=)
4: bfxZ3U8LPQDqD4igv8w1c53B7_g.roa (hash: wODIH/0xkpwmueRo+Rlw/VFlBWpKNaGnZK/vy02MrTM=)
5: bsYgzcPZezJ2gYbc8PKOspEFG4c.roa (hash: MpgIeeEXTiyIocenUfFnFL+sMDiBogWiOdN5+ESRb/E=)
6: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
7: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
8: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
9: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:54:cc:d1:81:80:4e:38:4e:8b:7f:b6:e7:11:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Mar 2 14:01:10 2026 GMT
Not After : Mar 3 14:01:10 2026 GMT
Subject: CN=c2226c3ce103fb64f89844e54ed84316780c235b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:aa:c9:1c:12:ca:79:b3:3e:ad:2a:33:20:
cb:10:b3:ea:f8:03:45:c5:74:c6:f8:68:7d:ce:fb:
3e:dc:25:ef:f7:35:89:a4:4b:6d:4b:95:7a:8d:b2:
22:fa:ca:60:11:8f:62:5d:be:e8:7c:93:b1:ef:10:
8d:9a:fe:b9:79:5a:db:f0:b3:1a:ac:8e:58:bb:2e:
3b:a1:8d:17:45:9c:ba:7d:18:e6:71:26:6f:4d:5f:
49:70:21:10:da:a2:0d:da:5a:d3:89:2a:e1:6d:bc:
1c:a5:29:f6:b0:6c:02:31:8c:dc:dd:73:69:8d:de:
b4:36:4c:8a:54:88:23:e5:c9:45:e6:25:43:ae:a1:
28:3b:80:9a:c7:3f:10:b1:a3:45:4a:dc:be:c0:54:
9e:17:e1:a2:c7:50:ff:f8:9b:4b:72:94:79:90:64:
70:3f:59:7b:2a:42:c3:8f:51:cf:79:e0:4f:0f:d1:
92:bd:29:d1:e1:37:92:63:16:4f:1c:57:93:a8:8c:
de:99:de:e9:96:7b:7e:cc:e4:d2:d8:88:e5:c6:b5:
64:d0:29:0d:63:01:a9:d2:db:a9:f5:bc:a4:39:8d:
62:60:d0:26:21:c9:00:f9:e9:1c:5f:62:e1:fd:b1:
75:d5:fd:fe:ac:0e:e1:1e:7c:dc:46:f6:45:61:a5:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:22:6C:3C:E1:03:FB:64:F8:98:44:E5:4E:D8:43:16:78:0C:23:5B
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:9a:7e:9d:89:18:55:41:c2:8e:27:09:d0:92:cb:18:6c:
a6:6f:8d:ca:07:56:57:29:12:00:8c:68:76:26:62:5e:3c:09:
7f:36:27:8b:fb:3f:ff:e8:8a:25:60:e2:19:e8:61:b2:77:50:
81:f9:d2:a8:6c:ed:31:b8:21:f2:b9:c0:30:ed:72:d9:04:c0:
d8:2e:45:69:e1:cc:1d:2b:7a:8f:db:e5:1f:0a:c5:ea:40:13:
e4:0c:7f:5b:82:a4:bd:5a:e9:31:84:b4:6c:cd:63:a9:15:00:
b6:1c:e6:80:52:11:f5:5d:fc:79:62:7d:de:10:33:f0:0a:cf:
65:55:aa:ff:55:8b:35:9c:a7:b8:d5:d1:ea:2c:5b:8d:29:7b:
ae:7f:de:71:0e:e5:93:47:13:54:68:cc:c1:30:31:4c:4f:05:
99:34:0e:67:f3:54:e6:b3:5e:d1:77:21:72:72:a1:7a:0f:9d:
7b:9a:20:35:80:ad:2c:6f:cb:34:f5:1e:4e:53:64:5a:f2:46:
3f:ba:83:bc:65:82:a0:87:bf:42:e4:38:a6:ac:2a:ed:59:8f:
a1:b1:af:23:83:4b:e8:a6:8f:f5:dd:51:c5:27:1c:29:e7:32:
0b:9b:2b:eb:c9:c7:40:f1:02:6f:21:62:b4:0f:35:82:80:2f:
38:b8:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:41 2026 by rpki-client