Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: LqiPycj7oHbHVOsibkOQy5dKOe1GF9583KDMPH7+E58=
Subject key identifier: BE:D3:71:3A:33:08:35:10:BB:45:8E:ED:61:80:76:AD:93:1D:3F:DB
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019CA97CCA945D432DE8EAEC233116118A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0CE3
Signing time: Sun 01 Mar 2026 13:00:53 +0000
Manifest this update: Sun 01 Mar 2026 13:00:53 +0000
Manifest next update: Mon 02 Mar 2026 13:00:53 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: 3D98FjvXgyrUtXtsn2cKqx76/WsAPN8T20lnzYXG5tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ca:94:5d:43:2d:e8:ea:ec:23:31:16:11:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Mar 1 13:00:53 2026 GMT
Not After : Mar 2 13:00:53 2026 GMT
Subject: CN=bed3713a33083510bb458eed618076ad931d3fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:4a:1e:d1:7d:b2:5a:e0:47:11:a6:46:5c:
45:48:a8:b5:31:e0:57:bf:01:4e:d2:3e:93:42:0d:
c0:ee:c4:ee:e5:87:d0:0e:4b:c4:3a:21:77:86:11:
4f:31:1f:9f:77:41:76:83:54:b3:16:b1:80:02:c9:
36:37:02:5a:fc:f8:d1:ac:cf:2f:1c:0d:dd:c1:2c:
e1:ac:37:34:38:40:8a:3a:a8:18:1f:75:05:88:f5:
31:79:a6:e7:85:f6:aa:21:a0:e2:95:01:14:a0:ea:
54:d4:b0:86:5b:f5:69:ad:c7:16:a9:a2:96:f2:5a:
63:41:c1:ae:0c:4e:52:3c:63:36:df:4d:b8:5d:f4:
5f:ee:09:c9:3e:45:0a:c2:c4:b5:8e:f4:61:ba:e8:
21:09:64:5b:fa:32:20:8a:ab:08:20:5a:a4:07:85:
40:8a:2e:dc:27:1a:ae:9c:f1:3f:67:14:86:0a:8d:
cd:33:3d:c2:8b:41:9b:66:d0:47:aa:c7:26:ef:ce:
a7:73:12:dc:83:a4:12:d5:1c:30:1b:de:a2:0e:71:
97:4c:92:c4:d5:a2:c5:d0:25:ec:5c:e8:ef:16:46:
b4:b4:43:86:80:fd:13:a3:75:e1:bc:4d:ca:52:2a:
01:36:9e:a4:bb:99:a5:5e:ed:38:d1:dc:d0:a2:1c:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:71:3A:33:08:35:10:BB:45:8E:ED:61:80:76:AD:93:1D:3F:DB
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c5:7b:6f:86:02:38:61:bb:4e:b4:a5:87:53:6a:da:22:ce:
a7:ce:57:6f:a6:e5:75:57:85:63:ac:06:be:c3:dc:93:32:bb:
4d:d6:44:c5:b6:fc:67:57:ef:6b:84:69:9a:e1:b9:75:43:d1:
0f:4d:5e:89:a7:dc:2e:72:47:ad:4e:1f:b2:ad:b3:9a:c8:9f:
2d:90:ad:6d:4a:bf:d5:cf:c4:da:f4:31:47:d6:24:4b:5d:54:
41:2e:fd:51:bc:18:f6:26:00:14:5f:01:9c:2a:a3:e7:21:91:
63:5f:07:f4:8f:c8:65:04:1b:7d:9c:68:82:7b:c2:d2:01:80:
ef:3b:15:65:d7:ee:e1:4e:12:5e:3a:59:90:a7:e1:20:5d:3c:
6f:34:d5:be:f0:24:8a:60:14:25:09:31:c9:b5:aa:66:19:4a:
fd:e8:39:5d:54:66:d7:1d:0f:5b:8f:35:00:80:d1:bc:75:1a:
56:87:a7:00:0e:6c:4b:6c:1a:94:20:f5:11:fa:7c:39:fe:7c:
99:bf:04:8c:1d:82:31:1a:1d:c7:a3:c5:99:fa:17:de:9d:70:
e1:61:55:21:0a:a7:b4:4a:7c:dd:d0:c3:11:bf:60:27:e2:16:
48:15:46:cc:28:3c:99:c6:ff:d5:df:39:23:68:3c:54:ef:a9:
cb:e3:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:16 2026 by rpki-client