Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: jPn5fQJjB9THtQGPaoG0NRI65ycyKLxPQPYl2I0bQ+0=
Subject key identifier: 9F:6E:48:29:A6:24:8E:77:FE:72:95:AF:7C:F8:CD:CA:DB:81:8E:60
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019D2B17A145AEA26E2F0EF365DE5A51FAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 1365
Signing time: Thu 26 Mar 2026 17:01:02 +0000
Manifest this update: Thu 26 Mar 2026 17:01:02 +0000
Manifest next update: Fri 27 Mar 2026 17:01:02 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: 2vCI+i8YqybtfaQvQb/5XSKj+s0EZDdniRjiU60hw5Q=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:a1:45:ae:a2:6e:2f:0e:f3:65:de:5a:51:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Mar 26 17:01:02 2026 GMT
Not After : Mar 27 17:01:02 2026 GMT
Subject: CN=9f6e4829a6248e77fe7295af7cf8cdcadb818e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:9e:1b:3b:5a:43:7e:fd:a2:ae:13:7d:33:
9f:99:9f:a6:78:74:e3:c3:15:54:06:f7:50:28:98:
94:af:cc:5f:68:5a:96:eb:a3:29:97:37:d4:e4:7a:
90:fd:a7:89:bf:0a:d3:6e:cd:79:cc:5c:4e:3b:08:
14:0a:b4:a1:c2:32:ab:ee:fd:6d:42:3f:fe:e6:89:
96:0a:00:08:3f:cb:20:23:96:32:e7:0d:2f:96:22:
2b:27:f6:06:54:17:7c:26:91:20:ff:c4:1d:b5:3b:
fe:aa:31:d4:0b:76:7e:e3:ea:e2:a8:46:6a:16:99:
6a:71:0d:2e:8e:1a:a3:12:38:36:33:a8:7d:0b:36:
1f:17:e2:bf:b8:ec:c0:45:19:e2:b7:fe:74:fe:ee:
61:fb:91:c6:01:07:0f:b9:58:79:d1:cc:90:92:a0:
ce:cf:d7:7f:34:fd:4a:ea:8b:ab:1b:26:1a:28:b1:
5f:a8:4b:b0:dd:a4:6b:b0:bb:dd:6f:4b:e1:2e:60:
6e:b2:91:8e:50:d8:93:44:26:74:59:8c:dd:20:1e:
19:4e:2a:f5:b8:2c:39:aa:53:43:c8:04:55:9e:2f:
7f:d6:e7:99:98:b9:9e:ab:0f:bd:88:ac:7b:70:66:
5f:fb:81:e5:c0:a9:d5:55:66:38:48:ef:40:dd:67:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:48:29:A6:24:8E:77:FE:72:95:AF:7C:F8:CD:CA:DB:81:8E:60
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:8b:a5:33:b7:a3:65:e2:12:34:6b:83:9d:5d:97:47:6e:
ad:06:03:78:b1:f5:73:1b:51:56:14:94:03:3c:d2:88:c5:0c:
c1:c4:40:45:ab:0b:2f:75:b8:d5:d0:c3:24:ce:b2:cd:c7:d3:
d9:42:0d:87:50:23:50:1e:16:cb:b7:1c:1d:72:94:fe:ab:ae:
2b:1a:85:75:b0:2b:7f:5a:90:5a:8b:58:2f:92:29:93:2e:ad:
da:9c:41:04:22:bb:55:49:ee:a7:53:40:c9:ff:b2:fc:d0:9c:
15:07:e0:b2:56:0b:a0:43:db:f0:4b:81:c0:00:a3:18:36:4b:
a8:4e:23:6a:26:bc:7e:99:6f:b2:c2:95:f1:ac:1e:76:16:9e:
b5:90:03:5a:a3:fc:1e:ce:c9:33:82:b4:e1:b6:db:fa:c6:9b:
53:ac:b0:d8:bb:b3:d3:82:41:50:20:28:d1:aa:a8:5e:c5:85:
72:05:6f:be:11:5b:43:6e:d1:4e:65:2b:ee:5e:5d:a9:e0:35:
df:29:fb:41:4a:35:20:32:7a:d7:84:4c:02:a2:b5:9a:5b:1c:
fb:7c:14:7c:44:51:28:10:f4:eb:de:a4:33:db:5c:2d:cc:67:
9a:50:2d:1e:af:25:53:30:c2:4f:92:54:4b:dd:11:fd:bc:f8:
23:66:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:24 2026 by rpki-client