Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: 1kjVPxWyF0kZSMow37Q2Tida2WKzA3PYedAbTtoge44=
Subject key identifier: BF:C3:DC:11:A0:3E:0B:A0:69:CC:2C:D9:EA:E9:46:B6:64:A8:CD:EA
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 019D27E068B8B32884FAB2D3782607800BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 02:01:51 +0000
Manifest this update: Thu 26 Mar 2026 02:01:51 +0000
Manifest next update: Fri 27 Mar 2026 02:01:51 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: J1i73TQbVV2H/98iTveRVK19CNoL351MOrSey4xAfPg=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:68:b8:b3:28:84:fa:b2:d3:78:26:07:80:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Mar 26 02:01:51 2026 GMT
Not After : Mar 27 02:01:51 2026 GMT
Subject: CN=bfc3dc11a03e0ba069cc2cd9eae946b664a8cdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:75:c1:91:53:fd:e5:7f:26:b0:e6:0d:33:
41:39:3a:1d:a2:a5:df:44:d5:bd:33:ef:93:a7:2c:
6f:73:ff:53:f8:d0:e9:db:df:96:50:ee:f8:85:63:
0c:91:34:86:3e:ef:be:f6:08:5b:2e:a2:e8:f9:ce:
e2:c2:33:8f:1b:12:e9:1c:15:a3:2c:c5:69:ca:d3:
80:3c:18:ff:83:1a:a0:58:3f:0a:5a:80:f1:c0:22:
65:ff:ab:4e:e6:64:3e:38:fd:22:8c:c2:0e:8a:77:
7c:6e:00:85:ef:42:48:a1:d6:0f:ea:3b:1b:ea:21:
10:d8:48:2a:a1:c4:0f:0e:a7:11:a0:ec:d0:17:2a:
c2:88:4a:32:88:45:fd:a5:08:bb:2e:94:03:62:5e:
c3:a0:50:5f:53:db:f4:de:2d:37:4a:c8:82:2b:b3:
65:96:44:43:d6:ea:eb:48:f4:aa:96:86:3e:7c:c5:
e0:e4:c5:40:d6:19:aa:58:f5:59:4c:9d:1b:ba:19:
c8:22:94:0e:9a:67:b1:b3:41:92:a3:0e:55:33:f2:
fd:c1:6e:f3:bd:32:da:5b:02:74:a4:bc:7b:48:19:
99:eb:41:84:cd:8e:2f:12:09:bc:c3:04:e5:b8:41:
7f:d9:72:2b:88:8c:b6:f3:38:6c:df:09:3a:59:5a:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:DC:11:A0:3E:0B:A0:69:CC:2C:D9:EA:E9:46:B6:64:A8:CD:EA
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:1e:d7:f3:28:fe:10:21:35:54:a4:fb:4e:14:ff:65:0f:
10:6b:10:85:89:8e:ed:c7:3a:d9:db:dc:7d:12:62:f4:9c:b8:
bd:ff:59:c5:0f:98:8e:45:2b:e9:72:85:3a:e9:f8:a3:b6:10:
63:40:d3:0b:df:97:96:09:5b:19:08:21:fe:66:75:bd:ae:96:
ea:c2:fe:10:be:2f:9f:81:af:89:9e:cc:96:2c:27:de:2d:11:
2b:9f:ac:82:2d:bb:0d:be:53:ee:ff:88:82:f9:e4:40:eb:64:
81:b3:3e:26:5c:01:ad:73:bd:78:bc:53:f3:40:75:5f:15:1b:
11:da:f6:d6:ac:09:78:4f:32:08:44:49:98:20:50:fc:c3:33:
77:61:c7:32:26:d8:7a:69:4e:02:a7:fc:d5:11:3d:1a:1e:61:
a9:5d:cf:49:28:09:29:3e:21:a1:5b:3d:48:d1:da:1d:53:9f:
36:4e:99:af:cd:ea:28:03:d2:4d:0b:b1:2d:1b:03:e5:22:a6:
12:b7:5d:a6:d6:9b:63:32:de:c0:10:a3:14:9a:cc:37:8f:9a:
20:1b:22:1c:2a:a6:15:f3:2c:e8:75:2d:a9:bf:46:53:15:73:
7d:cf:b7:1d:1f:fb:71:3c:4d:b7:54:9a:18:c1:64:13:de:92:
f0:c7:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:21 2026 by rpki-client