Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: fJgXx2nTEaNGklzWu8j47vVX/8ij2usfXHgz0kml5hc=
Subject key identifier: 2C:48:40:04:02:48:14:29:31:41:51:3D:F4:E4:A8:B5:F0:A4:CD:7F
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019D99D084E73644FC1553B91FEC72CA17D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 05:01:12 +0000
Manifest this update: Fri 17 Apr 2026 05:01:12 +0000
Manifest next update: Sat 18 Apr 2026 05:01:12 +0000
Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: ssNbD3oa5l1q5J9ITU03KcL0l8J/Y8s2XRB6BahRMhE=)
3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
8: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
9: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:84:e7:36:44:fc:15:53:b9:1f:ec:72:ca:17:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Apr 17 05:01:12 2026 GMT
Not After : Apr 18 05:01:12 2026 GMT
Subject: CN=2c484004024814293141513df4e4a8b5f0a4cd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:b5:1b:5b:dc:ae:9a:52:41:a6:9d:ab:29:
c6:dd:a4:74:8d:ce:29:91:e4:ef:1c:c3:17:7c:34:
72:c8:56:30:22:c9:9c:ce:3e:c1:a7:60:1d:81:fb:
97:48:6d:6f:7c:53:ae:e0:45:bd:13:6a:4b:c4:5a:
a4:ae:26:aa:01:e0:8f:8b:d0:b0:e6:f9:ec:8c:a1:
d3:c6:c9:a2:62:53:17:c1:ef:90:cb:88:5b:c9:40:
09:56:b3:7c:e2:22:49:e8:f8:ef:37:d7:5c:d1:6f:
fc:53:a7:2e:39:f2:29:b3:fc:bb:bc:47:49:a3:f3:
1c:8f:bf:6d:44:f7:29:ab:6a:c2:91:7d:d2:e2:7d:
88:16:c4:8e:45:30:a8:43:5c:7a:47:b3:5c:ae:f5:
ec:ca:17:7b:cd:b8:ef:2f:ed:ea:c0:86:53:a3:67:
29:f1:16:c5:dc:b8:f9:93:f0:d6:f3:ad:97:50:b1:
52:51:10:21:b8:28:fa:d9:20:ee:73:10:8e:89:9f:
9e:50:51:75:ad:66:5e:a0:8c:b6:32:18:1c:5b:2a:
a0:a5:01:2f:60:f7:97:0f:54:1f:e7:9f:67:12:80:
90:55:7b:b3:e0:27:14:17:5d:a8:4e:9d:de:b3:97:
2a:8b:d9:84:9d:cf:08:b4:19:36:4c:26:52:94:8f:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:40:04:02:48:14:29:31:41:51:3D:F4:E4:A8:B5:F0:A4:CD:7F
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ac:d5:bc:ba:5f:8d:d1:b4:b1:4e:d2:33:b7:2a:ee:dd:ca:
11:71:1a:6b:75:b7:12:73:e3:a8:d3:80:52:a4:8f:90:b2:52:
e5:ae:a8:cf:cc:7a:dd:03:1f:7d:63:e0:63:5f:57:05:39:d4:
71:37:57:36:10:57:01:f4:f5:1c:e5:b1:cb:cc:da:e2:39:33:
86:89:3d:57:dd:23:48:e5:b3:da:e8:c2:aa:12:ef:7c:84:94:
fa:6d:ce:2c:f9:d0:06:40:22:86:a6:8f:04:38:1e:5c:8f:57:
40:5b:90:6d:f1:fc:e2:5d:ba:6a:17:7b:97:26:d2:52:48:ff:
a7:21:ac:bc:10:c9:78:bd:12:1d:0a:4a:1c:4a:8a:69:ca:59:
bb:dc:38:ed:50:ab:7c:4c:e4:f3:b2:3a:6e:c4:62:f7:7d:60:
fc:47:ce:36:09:e3:dc:0e:c3:9b:dd:e9:d6:00:cf:c6:ea:26:
bc:6e:7e:3c:39:81:a1:07:8a:91:d3:77:81:c2:00:49:bc:04:
fa:82:57:14:bc:f7:d1:ac:40:51:9e:42:42:6f:b8:fe:2c:14:
da:01:2a:33:2d:53:99:52:e8:2a:43:33:f8:1f:f3:37:60:11:
ec:80:d1:83:4f:aa:91:13:99:6c:79:2a:a7:39:b6:33:05:fa:
04:2b:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:41 2026 by rpki-client