Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: 90XainWeh2t4WLw8RLgLPWZJp1gSawSpiawsl3n6nf4=
Subject key identifier: 18:B4:B9:43:F6:0D:80:8A:23:32:27:1C:53:BF:71:1E:05:D6:4B:1B
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019CAA58CD4BDC5727C9F316660236D67379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 11EA
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: 3a5H19e2nTsd7YqgvXTGzI9w/6ZpSPHYSTJihVpeT5k=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cd:4b:dc:57:27:c9:f3:16:66:02:36:d6:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=18b4b943f60d808a2332271c53bf711e05d64b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:fa:bf:4a:e1:5c:5a:35:5a:dc:2c:39:d0:
4a:1c:54:ca:87:a9:3d:7f:af:32:82:d7:4c:45:40:
28:16:3a:42:fa:45:e2:24:4f:d7:99:99:27:c2:d4:
7d:62:bc:f6:7f:9b:30:05:b7:a6:00:11:b5:85:01:
c5:b3:99:79:0a:99:be:ff:57:f5:54:52:cd:10:53:
8f:a0:81:a3:7d:eb:b6:c0:ee:82:5c:4f:46:68:db:
08:4f:38:8e:30:ff:ba:00:45:d2:f7:85:ef:a5:41:
1f:66:9e:05:af:61:6c:02:72:84:74:18:c0:4f:a6:
f4:5a:ac:03:40:64:cd:a7:91:3e:16:7d:dc:77:cc:
29:5e:85:53:fe:14:b3:ee:23:f9:32:08:80:7e:65:
fe:00:f4:28:12:cb:fa:91:e0:e2:f0:09:a0:1d:e2:
2c:f0:be:80:ad:ff:a7:a8:8f:60:e8:a2:63:b1:aa:
61:74:d6:4a:34:14:e0:f8:1b:9b:ec:e1:ab:c0:bb:
98:b2:3a:b4:bf:e1:3d:82:ba:4b:27:d9:c5:34:98:
de:66:7e:02:89:cb:59:7e:6b:4a:64:47:58:1c:29:
99:c4:5c:98:f5:d6:fb:ad:70:05:fb:20:6b:da:75:
86:c5:6e:44:fe:ef:16:c2:96:a3:f3:29:1b:c2:10:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B4:B9:43:F6:0D:80:8A:23:32:27:1C:53:BF:71:1E:05:D6:4B:1B
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:49:42:91:6c:d1:27:8c:57:fd:87:6e:ca:aa:d5:cb:a6:
57:14:95:a0:32:1e:d9:52:73:fb:cd:c4:a8:12:6f:3b:b0:4f:
52:98:8e:ac:2e:10:99:fd:24:e2:0a:6f:1d:02:82:ca:e8:48:
23:1a:3c:07:9b:ce:c5:e8:f1:a3:c1:8c:f5:bd:33:3e:82:eb:
82:31:da:28:90:21:3b:cc:c6:16:14:2b:e5:13:0e:0a:67:d3:
be:53:09:ba:bb:1e:5b:72:0a:34:bc:d8:1c:3a:d1:f4:43:0f:
c3:a2:89:18:fa:f3:4a:e3:19:81:7d:3c:a7:a0:ed:e9:26:16:
7a:bc:ce:a3:24:31:8b:11:38:a7:17:04:51:d5:0e:05:0e:3d:
3c:71:cf:39:9c:d2:b6:b1:0d:56:0c:17:43:9a:1c:f3:d0:94:
e0:5f:72:2c:45:0d:97:73:f3:65:39:fa:b2:4c:13:fc:7f:80:
a9:ae:08:aa:3f:b6:e1:3b:3a:c5:1a:f9:dc:9e:37:8d:64:2f:
fd:98:55:97:8f:27:6d:71:5b:25:1c:c1:37:e4:2e:e5:06:3e:
64:96:6e:75:af:76:be:c2:6d:c2:ce:58:3c:4c:25:18:92:90:
26:25:0e:29:29:ce:57:f9:5c:91:b2:c2:84:ef:d5:ea:94:ca:
dc:06:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:51 2026 by rpki-client