Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: WJrjFis8clG/WQXXXRk6oXPSvb/0uAeo8oRyN/dbjA8=
Subject key identifier: A5:28:A7:F1:09:F0:CF:B0:24:D3:37:E6:21:B1:27:D5:6E:C0:02:C9
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019CAA58E961991401F5724D5D246D0BE843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 17:01:19 +0000
Manifest this update: Sun 01 Mar 2026 17:01:19 +0000
Manifest next update: Mon 02 Mar 2026 17:01:19 +0000
Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: KT+vAFu0s6VCxX9iBMQMrNKOAn2g+ZfOfcbVMIMlQc0=)
3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
8: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
9: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e9:61:99:14:01:f5:72:4d:5d:24:6d:0b:e8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Mar 1 17:01:19 2026 GMT
Not After : Mar 2 17:01:19 2026 GMT
Subject: CN=a528a7f109f0cfb024d337e621b127d56ec002c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:4d:ad:0d:12:b6:3a:a4:b1:d7:8c:a4:97:
67:04:61:3d:bd:b2:39:cb:b2:9f:9c:4f:cc:8e:6a:
31:67:a3:84:bf:af:db:b9:06:69:32:2c:99:17:a1:
58:ec:2f:e8:ac:ed:38:d0:de:49:03:23:23:bb:49:
51:e2:cf:35:22:55:40:2d:b7:b8:75:a7:dd:59:90:
a8:0f:39:72:7d:76:74:72:07:4a:65:57:67:86:b9:
3d:6d:f1:0d:c4:38:b7:ab:dc:e3:41:7b:be:a8:28:
f9:75:7a:84:59:96:39:bf:75:59:6a:fa:0a:1d:31:
82:e6:36:c2:b6:0d:7e:da:f1:24:4d:94:bd:4f:d7:
4c:57:4a:4d:49:09:4b:c7:35:3e:ca:c8:83:fa:49:
32:ae:76:8e:bf:f7:f2:4f:2f:dc:04:1e:72:05:6b:
41:6e:4e:3e:82:f3:09:73:85:ca:1f:7b:17:7e:fd:
97:83:e9:7b:29:4c:6f:68:f0:73:85:0a:54:4b:dd:
46:f6:87:f5:40:11:3a:12:c2:3f:19:7e:79:e2:02:
9c:17:c0:0e:2c:3c:d5:62:61:b0:82:c9:dd:90:bf:
56:5a:41:ba:b2:dd:27:8d:ea:c4:a1:b9:f0:83:52:
65:67:a2:d4:cc:03:84:6c:59:4c:5d:8b:d4:94:40:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:28:A7:F1:09:F0:CF:B0:24:D3:37:E6:21:B1:27:D5:6E:C0:02:C9
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:67:45:11:7e:4a:eb:52:28:5a:a8:21:b1:04:f0:c7:63:
2a:be:8d:55:cc:42:b1:78:c1:1f:03:6f:8c:68:4f:42:e1:f3:
55:35:b7:a5:e2:d5:0d:9e:1f:3b:a5:fe:67:04:9b:43:0a:e3:
4c:e2:5d:04:d2:1b:7d:ea:23:41:3c:f1:62:b2:4a:b2:97:77:
0b:49:fe:28:7b:d0:c8:d4:8a:60:5c:46:9a:d3:56:b0:79:27:
3e:83:4c:b7:04:9d:5d:f1:e4:9a:ba:ea:03:1d:0e:27:85:18:
06:2b:4c:92:d4:bf:34:ac:4c:80:a6:9f:14:0e:8d:37:e6:c3:
28:75:31:c3:09:18:8b:e2:0d:76:54:8c:f1:33:1a:ad:21:44:
0b:f7:25:09:0b:dc:b4:90:32:3f:78:5a:f3:ec:3f:c7:39:80:
4f:bd:b6:52:89:a7:d4:8d:62:df:6f:04:03:65:e8:78:64:1e:
43:e6:9a:9d:7d:fb:5e:3a:64:7c:90:88:51:e9:dd:67:f8:5b:
88:ef:fa:af:2e:7c:77:65:48:18:3d:92:9f:81:e8:93:a5:09:
8e:3f:77:55:c6:dc:62:85:fc:49:d3:d1:1a:f8:3f:03:3d:44:
c5:d5:dc:da:2f:af:ac:44:23:38:46:73:99:95:cd:d0:66:8a:
dd:b9:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:13 2026 by rpki-client