Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: UceqgoezReL8gwqlKYwBeABpWeT9j/xuhxH4Trvsp9g=
Subject key identifier: 46:4E:04:11:49:AF:7C:09:FE:6B:69:0A:EB:33:5D:6D:BD:A4:AF:8A
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 019D992B9A4EF6E4B9DFBDCD86DD881C9638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 02:01:04 +0000
Manifest this update: Fri 17 Apr 2026 02:01:04 +0000
Manifest next update: Sat 18 Apr 2026 02:01:04 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: Zs5J7QJjy2tvVHvkkWsKjYC5wNgkn3ygT2AtrHjlGCk=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:9a:4e:f6:e4:b9:df:bd:cd:86:dd:88:1c:96:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Apr 17 02:01:04 2026 GMT
Not After : Apr 18 02:01:04 2026 GMT
Subject: CN=464e041149af7c09fe6b690aeb335d6dbda4af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:c2:5d:b5:b6:23:ba:8c:b7:0e:58:13:d6:
49:46:11:56:68:3a:72:e1:eb:e9:f6:07:5f:b1:fd:
ed:81:9f:84:4b:c3:97:86:db:75:ef:37:31:73:af:
61:fc:61:e7:ea:f3:0c:ad:80:ca:5f:bf:cd:db:b2:
00:bf:8c:8d:47:13:e1:cf:2b:50:29:98:d4:b9:c2:
64:85:1a:af:e4:83:ae:7d:8f:37:7e:05:b7:a9:f5:
a4:e8:af:7c:cd:5b:10:d2:63:04:43:cc:e6:0a:02:
95:89:00:ba:b5:60:7c:9a:a6:80:9d:4d:b9:21:d5:
1c:af:27:08:95:e1:29:6e:cb:7e:67:83:67:1e:91:
89:7f:0c:e4:66:d5:d2:ae:a0:53:22:39:d6:32:e3:
82:a1:fa:85:34:4b:76:64:9b:a8:98:9b:76:5a:a4:
b9:55:3e:57:88:bc:02:8e:31:d2:c7:b4:a4:a1:44:
0e:4d:76:a8:dc:19:c9:dd:d4:64:9c:c4:c6:46:63:
fe:77:f1:ee:b1:a8:0f:d2:2c:04:95:ca:79:e7:b9:
e8:4e:be:25:c0:2a:47:22:55:8e:f4:a8:dc:c3:92:
c8:ff:f9:e4:b3:e7:f6:4d:23:7c:96:06:3e:70:5f:
3a:67:19:8d:de:b0:1b:8c:72:32:b6:8e:21:43:c1:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:04:11:49:AF:7C:09:FE:6B:69:0A:EB:33:5D:6D:BD:A4:AF:8A
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:9e:44:75:a0:cf:c5:05:5e:a1:9a:39:db:03:bf:af:e1:4c:
cd:35:50:7a:21:fb:21:b9:1e:ca:81:d4:46:13:de:c9:03:17:
13:4f:03:ef:2c:26:ce:bb:cc:f8:08:af:57:f0:64:16:ac:67:
b3:da:16:6b:cc:b8:24:ae:db:80:4e:d5:a3:86:13:b3:5d:20:
6a:d9:64:47:94:09:ad:20:e6:22:71:91:6a:24:6e:c6:92:77:
7c:32:27:b6:3f:0f:f5:c0:68:5c:05:94:78:be:14:e1:e6:49:
8a:db:71:dd:07:69:18:1c:e3:90:6b:2b:f1:6e:9a:13:9d:37:
e2:bf:18:b8:da:78:d2:7e:e9:a6:6b:7a:c6:49:aa:45:c7:d3:
9f:76:48:95:0c:59:44:db:28:60:00:ee:b6:f7:08:f6:9a:78:
c5:39:44:95:6a:5f:f7:cc:6e:e8:69:3a:9f:bd:06:a3:e5:6c:
c1:91:38:c5:8f:63:c5:d5:67:2d:83:ee:f6:df:ab:f0:0a:8c:
72:39:53:c3:61:59:62:c9:6a:6a:a5:50:ac:c5:46:37:9e:69:
57:7b:91:8e:f6:6f:2d:b6:c6:8c:a1:2d:1d:bd:42:17:b2:3c:
0b:1a:72:97:7a:d1:01:90:5e:d8:c1:ab:54:c2:8e:e8:65:c5:
69:7a:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:53 2026 by rpki-client