Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: tUXry3Pex6K/e0L357lb/C7H3ZMGb/++anTNg9yqBFc=
Subject key identifier: 0D:36:8C:D9:3A:AD:A1:87:CC:69:B4:B6:C4:B6:45:66:56:51:F5:47
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 019D2929209337C35BA45256605217E80C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:54 +0000
Manifest this update: Thu 26 Mar 2026 08:00:54 +0000
Manifest next update: Fri 27 Mar 2026 08:00:54 +0000
Files and hashes: 1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: qrHwP2+CNleZRhu5dfT5l47h4r1v1iKhYPlaaZTmj3Q=)
2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:20:93:37:c3:5b:a4:52:56:60:52:17:e8:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Mar 26 08:00:54 2026 GMT
Not After : Mar 27 08:00:54 2026 GMT
Subject: CN=0d368cd93aada187cc69b4b6c4b645665651f547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:44:b3:f1:86:ef:97:db:90:67:2f:0f:88:
43:fd:27:f8:99:90:97:4d:e8:bc:b9:70:f2:23:d3:
e3:78:4d:c9:c8:0b:9c:4f:f3:fe:c0:b7:2a:4d:83:
03:00:84:11:86:81:82:06:7b:56:8d:a5:37:8b:69:
6d:1e:6f:c6:b7:55:2d:11:ff:53:a3:fa:de:2d:db:
2d:17:e0:08:17:66:4a:d7:83:f8:39:43:7d:85:85:
84:d3:eb:16:5e:c0:1b:e6:f4:e2:c8:11:ec:28:80:
b5:a6:94:d7:8e:27:9a:e4:9f:d1:ea:97:5f:40:c1:
75:51:fa:69:af:d6:7d:d2:c9:58:13:29:87:89:49:
94:55:9f:9a:88:13:56:8f:83:b5:dd:a9:f5:a9:b2:
dc:3c:48:e5:8a:e7:f5:9f:d6:ea:32:32:ad:fa:d7:
b1:75:c2:54:af:c3:a3:ca:54:01:f1:7d:46:4c:bd:
9d:72:fb:ee:b1:f8:52:83:e2:ee:2a:33:93:83:39:
96:68:9e:33:4d:4f:b0:37:5f:2b:79:c7:c3:34:51:
7c:ae:b3:0e:73:cd:5e:e2:02:4e:96:e8:fd:58:75:
fb:36:89:0f:9b:6e:63:2a:33:79:67:56:3c:47:0c:
93:92:08:72:3d:f0:74:03:55:c7:32:f7:80:cf:95:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:8C:D9:3A:AD:A1:87:CC:69:B4:B6:C4:B6:45:66:56:51:F5:47
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4f:dc:7f:c1:04:5e:b7:03:b0:82:80:df:6b:93:94:d6:a4:
09:12:24:bf:a4:a9:ce:ee:c1:48:24:7d:da:18:f0:3e:72:88:
53:82:e8:91:82:f7:bc:b5:ed:53:08:13:50:31:97:59:86:70:
b6:76:94:4b:b2:15:3e:19:75:1d:15:66:e6:28:55:4f:84:a4:
17:27:5f:c3:48:a7:58:49:cd:53:9c:53:df:aa:ca:93:c8:7a:
26:1a:bf:dd:ef:24:6c:30:c5:77:20:e1:95:45:ef:35:d7:be:
a2:dd:f6:e6:5c:dc:b8:bb:11:47:3f:cb:31:7a:db:1a:fb:18:
60:a8:d3:cd:14:1f:d1:9c:82:17:a8:8a:60:8f:25:e1:b3:29:
03:34:c9:7a:ae:02:36:1a:00:ab:df:89:7c:3f:c4:46:ea:84:
3d:3f:c2:4a:68:4a:f4:41:ef:6a:d7:be:6d:91:df:44:c5:a6:
fa:3b:4c:02:2c:43:80:ea:2a:df:31:d7:97:0e:cb:3c:26:72:
a9:af:2f:85:90:b7:d2:28:db:07:a1:5a:0d:18:74:86:57:78:
3a:11:f8:53:a6:4b:8d:94:4e:be:a0:32:a1:ab:c0:5e:3d:83:
37:5d:cc:f5:55:2f:c0:2e:8e:22:b6:e5:6a:ca:88:67:03:33:
d7:63:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:47 2026 by rpki-client