Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: oKPJLAIUYbILy7rCUlhR1huJxCY0d65p0lxx3QxY3zg=
Subject key identifier: 8F:15:15:65:F3:97:6D:A2:4F:36:CB:7E:1B:02:D0:BC:35:B3:5E:11
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 019D2704DC5BE403CF14C80CA2F096F4138F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: 7kNULjTdudf56hQr+FjjQIOxqmIqAn3b+u1j6kk5Wto=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:dc:5b:e4:03:cf:14:c8:0c:a2:f0:96:f4:13:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=8f151565f3976da24f36cb7e1b02d0bc35b35e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:ac:76:f1:e5:ad:04:d9:fc:88:0f:6b:72:
59:05:b9:6e:bd:1c:c3:a1:09:99:4f:a3:c7:9b:78:
89:c4:f7:de:1a:35:e2:59:c2:f4:77:52:f4:67:b5:
5d:aa:3f:c9:20:b8:fe:e7:83:4b:b6:32:94:f2:79:
6c:60:0e:0c:fd:10:6b:ce:b4:28:ae:64:26:54:d4:
cc:81:82:f8:39:e3:7f:ac:62:7a:a1:4e:cb:20:4e:
dc:d0:ea:05:26:01:f0:fb:61:18:1a:6f:1f:65:e6:
29:18:53:88:70:eb:27:6c:6e:32:5c:90:c3:42:5d:
5e:08:a5:31:8f:41:96:be:e3:10:f5:c0:19:ee:e0:
b5:6c:f7:17:94:1c:3f:22:2d:2c:02:47:69:35:e9:
f1:6b:6a:df:64:41:df:84:85:b6:8f:c7:aa:fa:d6:
57:c9:92:8c:5c:2d:19:8e:52:56:62:cb:95:c8:03:
59:47:00:90:61:e0:54:c8:b2:e3:41:4f:59:1e:72:
f8:54:9d:3d:b5:60:a4:14:f0:51:71:a9:61:88:5e:
fe:b5:f9:d8:1d:eb:22:e0:b1:77:5e:24:68:11:b7:
af:67:93:f0:79:26:db:86:50:a4:6d:7d:b6:3f:f9:
2a:6c:55:d5:d6:ea:36:b1:0c:f5:d4:5d:15:ae:e2:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:15:65:F3:97:6D:A2:4F:36:CB:7E:1B:02:D0:BC:35:B3:5E:11
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:de:6c:c2:12:b2:c6:1e:ba:49:d4:4c:34:71:03:81:40:4e:
2f:59:18:c1:24:de:c6:36:de:35:fc:1f:86:32:ff:ce:e3:d7:
5a:88:78:d0:d5:e4:17:bf:dc:ca:c3:23:4e:40:6f:95:20:ea:
e6:4c:32:99:15:db:af:3c:38:b9:51:4f:9e:69:bb:ff:4e:d5:
95:5f:99:9c:b9:3e:17:70:dd:f2:6e:1f:4c:8f:5c:de:16:60:
09:38:f4:63:cd:7f:7a:ff:bd:da:32:d8:1e:f3:6a:04:99:fe:
3b:f6:a9:b9:78:d8:e2:4a:ad:f8:27:f9:96:98:fa:98:eb:98:
17:05:4d:70:5f:54:34:0b:d9:d1:cc:3f:6e:8a:50:41:68:f1:
b1:2d:92:9c:7f:c1:65:f0:73:ad:f2:3a:0d:f9:b2:19:2b:e9:
2b:85:11:82:b5:52:0f:c9:45:c4:a0:78:1f:18:ab:0b:5a:9d:
8e:b5:03:98:48:5e:b3:2a:1a:31:1a:df:d0:e3:24:b2:9d:e6:
bd:3e:a4:7c:87:ac:94:7a:db:73:6c:1a:d9:ec:0d:81:bb:81:
5a:a5:9d:ad:c8:6f:56:d3:5c:4d:4e:72:69:b4:00:35:62:58:
ae:1f:39:3b:3f:b1:cb:8f:a9:1e:fa:e0:26:a7:9e:c1:b5:b2:
1c:4d:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:48 2026 by rpki-client