Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: MCr1w0SAKzCyEjl4S/uClsAKNw1Nd8HI2Q0M6+wu8ew=
Subject key identifier: 27:D3:18:90:0B:50:08:B9:56:DF:53:93:9B:05:7D:13:8B:E0:29:2F
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 019D2772B98BBB5DFE43C490014E7A81DD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: VG6ytkFitNhPXRSFGJNmYfvmcKUO37nw5YEkxkiIpIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b9:8b:bb:5d:fe:43:c4:90:01:4e:7a:81:dd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=27d318900b5008b956df53939b057d138be0292f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:7e:33:2d:b9:42:8a:f4:27:82:12:05:d2:
08:8a:cf:52:f6:a9:29:2d:56:33:2e:4c:17:8e:5c:
e0:b4:70:b2:2c:80:9d:07:0a:2b:c7:6b:87:d2:27:
d2:d4:8f:51:66:7b:44:8f:9a:96:89:16:c0:8b:58:
5a:32:d1:d1:87:ee:ee:6e:86:fa:54:18:89:84:63:
90:a9:f6:8d:ea:25:c3:24:c1:d8:8e:df:f8:9d:31:
7f:f7:22:ea:ae:96:40:d3:e9:49:8a:0c:f6:41:e3:
30:49:84:37:ce:2e:58:36:83:9b:e2:0e:be:fb:08:
06:c0:1c:ef:f5:cd:70:b3:51:9e:ce:aa:45:c5:68:
ee:c1:c9:fb:42:b8:4b:33:c5:3d:c7:fb:45:2a:80:
e1:0a:da:22:70:d8:23:28:25:3b:df:25:13:07:44:
b7:d9:99:6d:dd:54:91:79:fb:10:86:ce:d5:44:8e:
d6:2a:cf:fe:c6:53:ba:e0:3a:4f:36:1e:41:27:82:
df:68:32:45:49:52:27:80:15:cd:20:43:dc:e4:b4:
22:0a:a1:04:7f:3e:aa:3d:39:57:3a:98:ca:36:d6:
ee:de:28:45:0c:a7:49:19:66:f4:c1:1e:8c:4d:40:
48:30:70:dc:42:2d:c5:03:55:f6:b4:af:d0:a5:86:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D3:18:90:0B:50:08:B9:56:DF:53:93:9B:05:7D:13:8B:E0:29:2F
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d6:cf:b3:0f:42:7b:36:99:23:6d:22:f6:ef:c5:a2:a8:c7:
f2:16:f1:5d:1e:f8:e2:02:64:e9:6d:91:21:58:bb:b4:87:5e:
1e:3d:b4:66:74:27:dd:dd:90:fa:cc:1d:b7:dd:bf:d2:7c:81:
ec:a0:de:e4:53:74:6b:29:fc:f8:0b:5f:bc:5b:aa:30:50:53:
b0:9b:9b:b0:6c:2e:ad:a3:35:08:86:e4:b2:ad:9f:11:f5:a7:
c9:dd:8e:f3:23:0f:b2:89:f8:ae:b8:e8:f5:24:37:8a:88:28:
3a:ec:f6:09:f3:b9:5c:a2:b1:ce:eb:b8:5f:da:da:b5:3d:2a:
a3:81:a2:fe:35:0f:02:ef:1e:45:9d:45:dd:c7:00:11:3f:0a:
ac:b9:84:96:66:18:f7:05:3c:a7:08:62:03:04:d1:46:84:2c:
0f:c9:5d:41:f1:b2:f0:1f:75:c3:26:18:a6:95:26:51:cb:c5:
85:6f:4c:5c:06:ae:a8:47:40:be:c9:76:47:ba:bf:ad:4b:c1:
3b:ad:94:79:0a:4d:f2:3c:8e:32:dd:fc:2e:89:60:1c:4b:08:
6f:be:df:35:d7:68:74:4c:f1:01:75:c6:79:47:f2:e6:8c:c9:
a6:f4:d3:17:e3:d9:74:d0:f5:6f:c1:f3:b1:4d:9f:a8:ac:75:
57:2d:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:17 2026 by rpki-client