Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: xDMCDfH3WQNdlygjin61Ki4qni7VpgIkV4AM3/fH6o8=
Subject key identifier: A2:28:3B:BA:FD:62:6C:EF:49:0B:25:D1:D4:45:4E:7D:EB:F3:5D:1A
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 019CAC473F833650D688CF1EBEA9CE0708C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 02:01:16 +0000
Manifest this update: Mon 02 Mar 2026 02:01:16 +0000
Manifest next update: Tue 03 Mar 2026 02:01:16 +0000
Files and hashes: 1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: +HJ8fIFlcVqFkVBJPpR4XfSr8mXIdq23irFYorqpp18=)
2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3f:83:36:50:d6:88:cf:1e:be:a9:ce:07:08:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Mar 2 02:01:16 2026 GMT
Not After : Mar 3 02:01:16 2026 GMT
Subject: CN=a2283bbafd626cef490b25d1d4454e7debf35d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:82:aa:3c:37:52:cb:a1:ee:23:56:b4:27:
e7:e3:1c:a2:61:bd:86:22:42:02:f9:c7:d2:cc:10:
b4:65:71:a7:59:66:03:19:a1:68:fa:6d:1f:4c:25:
5f:bc:b5:92:9a:22:4e:97:5b:7e:ae:ab:cd:a6:90:
d7:31:d5:d4:db:0c:c8:1d:f3:24:3d:8a:4f:18:31:
6f:18:66:1c:a6:1d:c2:89:13:bf:a8:19:93:fc:7d:
b8:d0:13:b9:ac:5c:93:82:b0:6d:c2:af:c4:d5:8d:
d7:7f:62:5f:16:3a:6c:a6:0e:23:3a:ab:6b:01:5c:
1b:37:d2:f1:7d:80:ce:93:8a:70:a7:94:c0:fe:f2:
df:1b:2f:a5:53:62:b0:9c:c6:5b:6e:f2:9f:77:7f:
3e:9c:a0:45:ff:79:dd:94:91:1a:80:e1:04:d4:19:
b5:f1:c6:20:38:0f:35:c3:82:1f:3e:33:8a:ef:c4:
a3:80:4f:06:74:26:ab:aa:88:b7:39:38:90:e3:67:
56:d0:0f:50:1a:5b:3b:bb:8c:1b:17:83:62:f7:a9:
d3:1f:ca:d3:b5:e1:77:9a:99:3f:f1:34:c2:29:fd:
80:84:9f:2f:af:86:3c:14:03:ef:d1:4f:a2:ae:12:
7b:13:51:3e:9e:b2:30:b4:ea:51:eb:ad:93:b9:2d:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:3B:BA:FD:62:6C:EF:49:0B:25:D1:D4:45:4E:7D:EB:F3:5D:1A
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1c:4b:2c:0d:92:37:ae:c8:47:53:be:49:df:5a:2c:bd:ed:
10:36:9b:95:04:83:fd:4e:27:0a:8b:84:09:0f:29:1c:bb:03:
4c:c5:fa:66:b6:30:c4:5d:1b:c7:dd:a4:c9:b0:a0:1f:2e:6a:
0e:80:1a:44:82:8b:3b:f5:cc:98:ad:76:09:4b:be:26:8d:e6:
8c:e5:7c:cb:78:70:4c:e8:b8:ff:81:26:3d:4c:63:47:eb:5f:
12:4d:01:00:66:ca:e1:6f:ad:33:41:86:98:bb:c1:77:7c:dd:
4f:ca:62:bf:8e:fd:96:c5:e3:8a:08:8b:27:9e:f2:9f:63:2d:
7c:a2:31:10:5e:bd:93:a4:61:ee:d4:3c:2f:84:30:22:6e:50:
e5:b5:ac:53:b3:aa:8b:13:86:40:d1:4a:87:64:d3:aa:28:bf:
a1:64:36:c6:8f:d6:e8:3d:3f:a2:54:91:4c:bd:43:83:19:eb:
68:93:ed:33:74:d3:7d:cc:d4:34:d2:e6:8f:73:90:cc:51:0d:
e9:91:e1:ac:8e:1f:d2:24:3a:b7:cd:e0:b1:d0:93:8e:96:f5:
3d:72:97:98:e9:d8:8f:c5:ad:42:c3:dc:de:ed:36:27:02:33:
c1:e3:97:0e:b2:f7:9f:f2:68:c8:6c:f8:16:5a:d8:6d:20:fe:
9a:34:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:29 2026 by rpki-client