Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: 1Xda16wAgOwk+ftWkwxc05sdMd39xzjTSDNMVRxROsQ=
Subject key identifier: AA:3E:3B:FC:8A:0B:59:58:12:89:9C:94:1A:C9:F0:DB:E2:6F:E2:C9
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019D28BB9CF8732841397A508885A631A63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: YgTx0XJaK4Tckv0IK4gX1l/N/z2Lch5Uh6LNJnT6ZEs=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9c:f8:73:28:41:39:7a:50:88:85:a6:31:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=aa3e3bfc8a0b595812899c941ac9f0dbe26fe2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:cf:30:2a:64:5e:bc:22:b8:82:36:bd:c3:
15:a6:23:3c:99:03:82:ab:6a:98:5e:88:99:bc:1b:
36:e9:4e:59:18:3a:e8:98:9d:85:21:b2:1d:91:33:
d7:68:0a:ae:1e:52:ea:8a:f5:7e:49:c3:43:e9:55:
37:8e:f5:40:c0:19:5c:0f:4c:20:8e:ae:6d:14:d4:
93:54:58:bc:c1:07:de:75:8b:3a:d8:b7:45:0c:01:
33:84:49:67:70:be:11:85:96:47:6a:1c:ba:c9:3e:
48:6d:c8:ff:16:78:8e:e2:8d:61:16:ee:eb:51:51:
94:43:db:b8:a8:13:20:50:19:6a:f9:a8:29:94:a3:
14:25:7c:2f:5c:a6:60:8b:52:2f:12:ea:48:49:00:
4a:9f:79:b6:76:ae:1d:c5:f5:f0:d3:1e:27:22:21:
fe:ab:06:d4:4b:eb:a7:46:a2:8b:c1:60:39:7b:eb:
d2:ac:46:ce:fc:66:5a:03:7d:00:1e:5d:05:34:e1:
87:64:9b:a2:9c:20:7b:41:78:49:44:ff:45:39:be:
7f:76:9f:5e:35:eb:5f:ec:92:01:be:09:03:77:bd:
84:53:0d:06:f6:0d:78:c4:69:ae:3c:1f:16:25:18:
07:d4:42:e1:fe:ff:01:cc:9a:43:13:f2:91:c5:9a:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:3B:FC:8A:0B:59:58:12:89:9C:94:1A:C9:F0:DB:E2:6F:E2:C9
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:84:6c:d6:6b:84:b5:1d:16:61:8a:a5:fd:d9:3e:50:0e:
80:77:e9:67:fa:d9:22:5b:70:4c:8d:88:15:50:90:08:f0:24:
a8:d6:02:ac:23:51:56:39:79:0d:fe:dc:dc:4c:e2:90:1a:73:
7b:4c:c8:d0:07:28:78:b5:50:8c:74:6c:7e:79:b8:4c:fa:83:
6f:74:31:70:64:93:b3:2e:d3:82:33:db:f7:47:a2:11:1f:b0:
5a:92:ef:9b:18:07:ae:bd:7f:e3:22:c0:8a:49:f5:3c:6d:e9:
17:ef:f2:0a:91:13:0d:a9:f1:dc:5a:43:59:74:bb:9d:cc:78:
16:14:07:99:36:a1:a8:45:d2:87:a1:cd:14:bc:65:23:eb:94:
9d:5a:85:6f:55:a6:57:f6:1e:1a:93:3d:3b:ed:cb:64:c6:91:
4e:5e:4f:49:c6:1d:78:7e:ae:25:d0:f7:a0:97:32:49:9a:0f:
c9:1c:49:b8:d1:a1:df:4e:2e:8a:b2:87:ef:a4:cf:15:0d:56:
78:de:01:5d:ea:e0:71:a1:11:43:b9:95:70:e1:b8:02:d1:36:
8c:8c:66:08:fc:d8:d7:b4:80:d7:0c:50:6e:3d:64:e2:ee:75:
13:f1:ba:98:4a:29:94:51:d9:2b:c0:dc:fa:c4:93:2c:8b:1a:
6d:0a:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:14 2026 by rpki-client