Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: AkWntOgDhRSPm0XJp0VaGm2q4dazFabTcePVZYKzBsQ=
Subject key identifier: 98:EC:D9:4E:6B:D2:02:6F:43:22:99:2E:3C:D3:E3:A2:27:D2:AB:49
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019D9EBFBC144B475A6CE9DD0D771F0B6D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 91
Signing time: Sat 18 Apr 2026 04:00:58 +0000
Manifest this update: Sat 18 Apr 2026 04:00:58 +0000
Manifest next update: Sun 19 Apr 2026 04:00:58 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: WNZdkmDZXVFUdmG2M5nNdcohG2VEc1YsPF5/hfpvriA=)
2: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:bc:14:4b:47:5a:6c:e9:dd:0d:77:1f:0b:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Apr 18 04:00:58 2026 GMT
Not After : Apr 19 04:00:58 2026 GMT
Subject: CN=98ecd94e6bd2026f4322992e3cd3e3a227d2ab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:ee:f7:c8:18:dd:5e:0b:55:33:d1:f2:96:
8b:b2:0d:f6:ef:b7:67:bd:08:82:98:2c:5c:99:31:
ea:0f:28:a7:c4:0f:7c:b7:57:f6:34:42:d3:e4:60:
9e:74:75:56:0d:87:4c:2c:e4:61:83:57:3b:dd:6a:
a6:75:50:69:a7:c2:97:4d:78:13:fc:95:d5:b5:9f:
f0:06:36:6d:41:33:2c:57:f4:ff:1d:06:95:4d:5f:
0d:0a:c8:df:c6:b6:f6:93:ef:d8:8c:59:7f:eb:2c:
d3:52:12:62:26:e9:f6:33:76:a3:37:f4:6e:61:4c:
c4:8b:32:20:9c:69:1f:9b:2a:f7:fd:17:2e:47:de:
3d:1b:f2:db:7c:48:f7:49:66:2e:7c:ef:ab:3a:e3:
72:86:2f:25:bf:8d:62:b7:f4:e7:b4:5c:12:93:0a:
7b:bb:bd:ee:fb:2f:cc:58:76:37:fd:15:79:c7:1e:
d5:5b:95:e7:84:b3:3c:d0:46:64:25:19:6f:0c:a2:
72:4d:98:f1:dd:bb:ba:2e:88:d2:c9:09:a3:16:5f:
2e:60:02:18:f4:e8:2e:62:4b:3c:3b:f2:92:cd:31:
d8:0f:a4:7b:46:ff:0a:53:ab:d5:72:97:a7:d9:45:
09:eb:08:d2:7e:48:e2:34:8f:d2:53:ea:2e:03:7f:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EC:D9:4E:6B:D2:02:6F:43:22:99:2E:3C:D3:E3:A2:27:D2:AB:49
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a1:e4:b9:ec:e0:18:50:12:8f:5a:ee:9b:be:56:47:10:1b:
e5:28:cd:8d:e7:b1:8b:32:89:60:da:5e:8a:dd:27:5a:8e:36:
16:6b:79:01:8e:66:1a:d5:43:b0:12:f7:8a:f4:b5:db:23:44:
10:86:be:98:f4:c2:6b:1a:df:10:39:26:7e:f2:36:8d:0f:1f:
eb:b0:00:67:a0:01:e2:f3:f4:33:a7:63:50:3e:41:95:10:7c:
31:96:ac:12:e6:d4:4f:b0:9c:dd:53:c5:67:65:41:24:0e:e4:
b0:8b:ab:89:81:2d:b7:7e:cf:61:d5:8c:06:b0:56:95:35:d5:
b3:47:2d:18:1d:e6:c2:75:19:8b:09:a6:1a:6f:94:6d:1b:ea:
d7:58:ba:b2:35:fb:86:b0:09:9a:2d:51:e3:1d:cc:eb:ae:ee:
f6:84:13:75:5a:cc:2e:c6:4c:76:c9:11:c2:90:63:c0:9c:a8:
ed:eb:0a:52:dc:27:74:38:dd:0d:c5:b5:eb:09:66:49:fe:91:
54:4a:ed:96:e7:1b:38:56:9d:ce:7a:d1:54:3d:a1:34:cf:07:
b8:22:75:d3:3a:82:57:b9:29:91:5b:dc:36:69:a8:1b:36:9b:
1b:d1:9d:a8:86:34:08:72:97:ee:61:86:79:d2:f8:ec:2d:49:
68:03:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:28:10 2026 by rpki-client