Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: PyJ/Pi4Gq7mlPohToGS5m7pCeCjpMN290qSZnqV5dpY=
Subject key identifier: 17:4D:C9:C0:1C:3F:75:5C:56:58:D8:3C:D6:DA:3F:06:A0:44:6B:F9
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019CAB348C2DADBAC45FDEA7FD180A38D075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0F8D
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: yDUtm+2qUtLEVT7ozcsi9ZFDexS6GUOIptNyk+Jz0bQ=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8c:2d:ad:ba:c4:5f:de:a7:fd:18:0a:38:d0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=174dc9c01c3f755c5658d83cd6da3f06a0446bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:91:85:9c:6a:94:bf:72:79:8e:1f:9e:25:
17:2f:94:3c:b5:e3:f0:82:8b:d0:b0:7b:69:46:7f:
c1:c7:5b:07:f9:77:7d:89:ec:4a:8e:26:fb:db:6f:
a3:ac:08:3e:f0:2b:f9:b0:cc:27:1e:9e:2c:6f:8b:
dd:73:c3:05:82:f4:70:c1:2f:85:28:6f:5b:ac:62:
96:b9:47:c8:47:24:92:64:73:6c:32:7a:cf:e5:6c:
90:d1:63:0e:a5:dc:4b:b5:8e:06:db:2b:a7:93:90:
7f:3f:65:b1:a9:29:f8:d0:20:57:00:87:6c:4b:a0:
e0:ef:53:e9:08:c8:2f:ba:58:a2:d7:f8:5d:2d:eb:
53:36:ff:69:be:59:27:53:e5:7b:5d:b0:c4:1c:c4:
c6:19:d0:1c:aa:94:f6:f2:81:cd:d0:27:2d:bb:ea:
b2:e3:66:a4:30:95:9c:d7:3b:61:ef:54:af:0b:f8:
4a:12:d9:28:e8:6c:23:3b:3a:6c:55:bf:60:27:5b:
d3:b5:29:27:e9:27:c5:b5:e1:68:b7:8e:d8:72:4e:
ad:67:2c:56:57:91:2f:8b:1a:10:07:cd:e3:ca:8b:
fc:a7:70:b7:6a:6e:fb:fc:b2:78:d7:60:20:c0:41:
8f:78:11:6a:bb:89:8a:5c:65:b0:1b:c5:58:cf:82:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:C9:C0:1C:3F:75:5C:56:58:D8:3C:D6:DA:3F:06:A0:44:6B:F9
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:94:94:f1:62:dd:82:3a:dd:93:e3:78:c3:44:ad:14:79:
24:42:1f:0e:10:70:01:06:6b:6e:f7:df:5f:44:79:77:70:47:
c1:19:d2:94:04:d6:8f:87:86:f5:bb:1a:f5:da:de:38:a6:26:
a6:f5:17:5b:15:ec:0c:42:42:26:0b:83:b2:1a:a5:af:f2:cc:
ec:0f:b0:28:0e:b9:c6:e9:3d:d7:1f:b1:87:c1:14:fb:e7:aa:
ad:b8:d7:2a:f4:c3:63:2d:ef:1f:21:97:df:b6:f0:04:87:71:
16:68:ca:2a:8f:38:87:80:a1:3e:4e:ad:c1:1f:3c:f7:74:9e:
17:09:32:9d:c8:a6:3d:38:8e:bc:47:c9:92:5c:8a:25:7c:07:
64:39:0e:cf:29:40:85:c0:4e:69:74:d7:e6:b4:1c:04:1c:e2:
38:2f:98:3f:5e:8d:ef:eb:44:0f:af:4f:b7:8c:4b:29:da:12:
3b:fd:6a:50:7f:79:ce:68:e6:42:ae:16:63:68:37:b3:b8:5e:
85:74:41:42:a4:12:cd:64:a8:ad:fe:d3:84:95:43:87:bb:21:
95:32:b8:32:1a:3d:5f:36:83:a4:ff:f9:2f:2a:73:06:2a:a6:
fd:27:7e:e1:43:be:96:2d:6f:ea:ce:7e:e9:de:28:5e:e8:be:
15:0f:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:01 2026 by rpki-client