Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json)
Hash identifier: WxhS1TKPji5sXKzFIUvRL/0JrqAJXShSNlQygNxW/Zw=
Subject key identifier: 1C:1D:33:42:19:24:65:0D:28:8F:64:31:58:99:8C:4C:2A:94:AE:0B
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 019D2772E8F9DA605C4F6C5C61767039FE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
Manifest number: 01F9
Signing time: Thu 26 Mar 2026 00:02:15 +0000
Manifest this update: Thu 26 Mar 2026 00:02:15 +0000
Manifest next update: Fri 27 Mar 2026 00:02:15 +0000
Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: fGI05aKTLVUCEhdrkkT7m+bvqeIBUhPqBIwLcSNKaqg=)
2: a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa (hash: b6V6y+CXqrM02r7OcRC1ExEpm/JNxjRqEeNbqYxgF44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e8:f9:da:60:5c:4f:6c:5c:61:76:70:39:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Mar 26 00:02:15 2026 GMT
Not After : Mar 27 00:02:15 2026 GMT
Subject: CN=1c1d33421924650d288f643158998c4c2a94ae0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:4d:1a:84:1b:17:31:b9:fb:37:5f:47:48:
b2:ff:2f:1c:76:c5:15:5c:0b:45:dd:26:31:be:e0:
5e:b7:e4:f4:d7:5d:27:40:13:1d:fc:0d:bb:db:1a:
12:87:3f:6f:e3:78:84:a8:dd:27:13:6f:f3:e3:dc:
fb:9d:4d:b1:b8:80:07:21:e1:74:63:4a:17:88:1f:
f3:9c:f4:26:e5:c3:47:d8:5a:66:b1:9a:c1:54:10:
4b:0a:a2:01:17:31:a4:54:17:d3:d1:b3:d3:58:d8:
53:a7:27:bb:ac:74:34:e3:a3:36:74:39:e9:d3:89:
94:f1:4d:3e:df:6d:1c:b8:ad:fe:09:06:9a:60:ab:
cd:75:4a:dd:81:1b:0e:c0:f3:19:d7:89:10:78:63:
ab:d8:59:48:3f:30:90:bb:3b:cf:5a:4a:16:a1:42:
5e:8c:ed:27:12:44:4a:2b:aa:c9:12:f5:c8:9f:b2:
41:ab:67:de:70:e6:d9:90:76:0a:01:b1:19:f7:c1:
8d:c7:c4:86:6d:56:e0:9d:b5:5a:be:06:6d:5f:3f:
b3:86:ca:55:b5:76:ba:a9:c8:85:ee:18:d3:64:ac:
49:91:50:83:0b:3e:0d:f6:53:ec:95:d7:b2:74:50:
fb:7b:01:47:8e:12:83:6a:d3:6f:5e:2b:d0:b1:11:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:33:42:19:24:65:0D:28:8F:64:31:58:99:8C:4C:2A:94:AE:0B
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:1c:c1:10:3b:17:b9:d8:2a:df:b4:42:11:23:c5:8a:2a:
89:7c:fa:c0:1a:bf:22:ea:ef:75:e2:78:db:ae:c8:07:07:1f:
eb:c4:5a:2f:23:7f:ce:69:81:2f:85:0a:d8:8f:3a:e5:95:59:
d3:2a:63:60:05:07:a0:61:c5:95:1f:c2:79:d7:b3:3f:c7:d4:
a7:e1:ec:5b:10:3d:51:6e:05:5e:af:b4:56:b4:d5:19:8d:b1:
51:33:97:a7:1f:fc:07:53:c3:00:6a:51:1f:be:b8:77:18:aa:
52:52:e2:08:77:97:35:b7:06:e6:c9:02:e3:26:23:8a:4a:d0:
9b:8a:34:26:8d:65:c5:cf:fb:64:ef:c8:d4:21:5c:3c:63:42:
78:75:c4:e0:fe:a1:ef:8f:0b:f3:d0:db:e2:14:55:46:6e:aa:
0d:57:bd:43:c1:3b:81:2f:05:5e:bc:8b:5a:87:38:93:d7:c7:
8c:2f:45:76:7a:62:4f:e8:5b:e6:9e:c4:43:d4:ce:f1:cf:05:
6a:98:0a:fa:be:ff:08:0e:87:36:5f:d4:e1:01:06:d8:ee:f7:
de:2e:52:94:59:fe:b7:0c:5d:ee:5c:35:4c:8b:b0:a0:e3:ea:
4d:5e:44:c6:69:e1:c2:02:16:e6:35:97:76:8e:f1:4c:a6:f8:
e9:3e:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:00 2026 by rpki-client