Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: aX7dnjSgV178hU62zIMRjG8EP64jXEJyX/8EoSMIWoE=
Subject key identifier: 51:7A:F4:F5:B5:16:10:43:E3:6A:5D:FD:9D:5C:9C:8A:E3:26:7A:5A
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 019CABDA06A0DBBA9010751CCD416B9CE838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 042B
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: R/Q96MQPodtWKsZW6dVNFoPryG+g3kEi9ibuYgf7k0E=)
2: oPgMAi_-EmiOlppJM0s65xmeflo.roa (hash: AY2dJHoY3JrtcePk6obcHFCfyE5blcFF6JMAQBSwLWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:06:a0:db:ba:90:10:75:1c:cd:41:6b:9c:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=517af4f5b5161043e36a5dfd9d5c9c8ae3267a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:8a:a3:33:95:c3:5f:65:57:ed:6b:73:24:
24:78:2e:8d:f1:c5:fa:12:f6:6c:aa:f4:31:46:36:
09:a9:e5:50:74:34:3f:b2:53:e6:76:92:d5:99:c2:
21:e5:d7:c2:94:5e:00:04:f6:cb:b7:07:04:3e:84:
a6:0e:79:50:bc:15:a9:ea:06:ee:7c:55:94:54:89:
b8:f1:b8:43:d0:54:62:fc:52:1d:34:5d:91:82:e7:
86:fd:15:78:5d:c8:a1:65:78:de:d2:a6:ff:a6:ac:
6e:36:60:10:9f:a0:b7:48:56:ab:bc:b6:38:6e:e2:
d2:dd:dc:05:92:c9:66:20:20:9c:db:d8:d1:e1:fd:
d1:87:54:77:96:d2:ed:1b:db:45:31:a2:19:85:c0:
6f:ac:96:4b:58:8d:fc:77:a1:2e:9a:da:03:8b:f4:
d0:9b:5e:4c:d3:c3:59:14:94:98:d7:02:8d:7c:5b:
99:ee:1d:1d:82:96:da:d2:26:f3:37:16:89:b3:97:
00:02:65:41:6a:fe:49:8f:34:a0:99:88:70:42:50:
3f:62:e8:27:72:33:60:74:52:69:35:e8:ab:2d:bf:
74:eb:a6:d4:1a:1e:45:03:79:95:c8:b5:59:7a:df:
af:99:0f:3b:db:f1:9e:7d:44:7c:84:da:ff:e4:85:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:F4:F5:B5:16:10:43:E3:6A:5D:FD:9D:5C:9C:8A:E3:26:7A:5A
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:f9:91:c3:84:e9:f2:8d:aa:cb:67:9e:63:ee:dd:14:77:
91:87:d2:ee:c5:c5:48:ca:77:36:0f:76:97:c3:9e:61:93:83:
86:b6:b6:d0:84:37:a5:ca:73:f7:0b:fb:6c:2c:31:c9:8d:96:
9e:37:49:e0:06:dd:9e:a8:ab:22:60:8b:45:3a:cd:dc:45:de:
42:85:ae:03:62:5c:06:b1:b8:0a:60:c2:73:20:f9:80:6b:13:
ef:6e:40:cd:5f:88:8d:39:cb:fe:a9:5f:40:86:4c:8b:5f:21:
1b:0f:74:6b:62:2a:f8:80:6a:25:56:5c:b3:18:44:f5:61:ae:
5b:93:b9:ff:67:70:d4:6c:a4:f6:5f:d2:5a:f4:00:68:d7:80:
75:74:43:60:df:29:10:90:08:c9:5d:01:90:c9:d5:c8:2e:0c:
11:7c:3a:4a:2b:a4:f4:ce:68:0c:07:73:ff:ce:8f:55:a6:c1:
5a:ba:b5:e1:fd:21:04:e6:e1:56:2c:32:6b:c9:58:f4:00:0e:
75:c2:76:15:8d:42:f2:33:50:9e:64:54:cc:2a:b1:6c:2d:e3:
bb:50:f2:2b:f8:cc:d9:c5:74:97:5a:f4:f2:3b:d0:42:68:fd:
9e:8e:57:b6:bf:a3:3b:92:85:e6:34:be:dd:6b:3a:03:ad:47:
1d:03:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:43 2026 by rpki-client