Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: 0Vas19zB7EGLgKVfe0T0RGh9um7CRstx75p5abYlqGo=
Subject key identifier: 18:01:38:CE:EA:CD:37:A6:B2:FA:03:BB:F5:D8:CE:44:88:BF:EC:DD
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019D2960F9160CAF660C9C3C811B974A1680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: UzOFA5EcaKw+fsmN0hfQfSWIdcOS8qEWlAImCeEmLtg=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f9:16:0c:af:66:0c:9c:3c:81:1b:97:4a:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=180138ceeacd37a6b2fa03bbf5d8ce4488bfecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:19:ea:40:22:6c:88:86:ca:00:c3:77:1d:
db:6b:b1:2c:30:5d:32:5f:36:3c:f8:0e:f9:74:9f:
00:4d:76:fa:41:0a:cb:66:89:a5:86:16:86:81:96:
8d:80:3c:04:6a:f1:2b:1a:7f:e7:6b:a6:c7:76:f3:
88:47:47:1d:00:78:74:0c:e4:78:cf:09:ee:b6:23:
a0:be:1a:18:f2:27:a8:21:2a:cc:57:37:c0:40:7e:
b7:01:db:ee:f2:8a:c7:03:c7:6c:80:3a:28:57:58:
ab:a8:d6:79:31:f2:4c:fe:c9:bc:d0:6e:96:ee:11:
22:35:6e:3c:3f:ce:ba:d4:a2:a9:e2:01:dc:d3:c8:
2a:23:46:92:a4:4e:ad:6e:39:7b:7e:8d:a7:c9:dd:
6a:c6:55:3b:8b:73:50:c7:76:e2:21:52:ee:8a:76:
06:94:a7:ad:38:92:f8:14:aa:11:b4:84:55:c0:2d:
42:46:3c:29:a3:54:19:1b:c7:d3:be:5a:6a:6d:3f:
5f:66:1f:b0:fa:63:ad:3c:31:b0:28:66:75:5f:00:
df:b0:cd:8f:e7:08:6f:37:5a:bf:9f:5d:c6:c1:44:
fa:26:af:09:da:11:49:8d:15:fa:72:97:d7:f9:42:
14:63:cc:4d:5d:d4:42:c5:94:ad:81:69:6a:e3:95:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:01:38:CE:EA:CD:37:A6:B2:FA:03:BB:F5:D8:CE:44:88:BF:EC:DD
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e2:28:cd:d3:95:07:a8:19:73:b5:42:62:01:46:17:a8:26:
b9:01:2c:e5:6e:ee:a1:e3:c9:7c:86:7f:f7:1f:2c:b8:0f:f9:
41:25:53:29:a8:f7:be:d4:67:be:2d:cd:81:0f:97:ea:fc:1a:
a4:b2:e0:ec:6e:0a:3d:68:24:71:1d:de:5f:a1:d3:07:69:72:
79:2b:06:a7:59:b5:8e:6d:57:3b:1e:20:75:3a:43:26:a8:1e:
5f:b3:19:e6:de:45:d0:df:3e:97:dc:6a:67:fd:d0:31:d5:56:
44:6d:9a:2a:03:08:08:0b:3a:3a:75:b4:5e:d4:4f:d4:e5:b9:
40:ad:3e:ab:93:34:16:f1:c7:1e:51:9b:8d:0c:b4:c3:4a:a6:
96:09:01:cb:a9:9b:11:b9:4b:f4:3a:d3:21:52:ae:39:e0:22:
56:0b:25:00:a3:b1:d3:8b:af:d7:89:6f:5c:03:65:34:23:f4:
1c:9a:9f:8d:7a:5a:fc:27:8b:e0:20:6b:69:14:59:0c:28:a8:
fa:36:21:39:10:65:47:22:dd:7a:10:b9:f3:79:05:d3:6c:8a:
d8:4e:ec:32:30:4e:4c:31:e8:7e:02:6e:de:9d:37:db:a3:da:
49:77:71:62:69:e9:8d:a9:ec:01:36:54:a1:7e:e0:d3:1e:52:
b5:61:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:26 2026 by rpki-client