Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: qa6+h8B9ibZcKpoJ+zUy/H13qPpFrV1V1kt/R1ma8M8=
Subject key identifier: C1:3F:FC:DA:A7:F4:8F:45:C7:9A:B8:85:7F:50:5E:4B:EB:02:3D:A8
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 019D2960C7FFF3094F17602739FD97A20D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: oxBhOgJnhOKEVcEueFTB9J7Sqsu0q2Ej1HkWcNU8SBg=)
2: VEbdeDBfoS7OV3q8Pyt7XMZlTvw.roa (hash: ryGpV2N0yjPTa2J+772hPmPtDVApuFyLbz9EHlqw2ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c7:ff:f3:09:4f:17:60:27:39:fd:97:a2:0d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=c13ffcdaa7f48f45c79ab8857f505e4beb023da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:85:69:16:35:81:26:41:e8:07:61:74:41:
ae:4f:9b:c8:f9:0f:cb:3d:25:4a:8e:b4:53:3c:f1:
c0:54:b0:37:66:c3:56:89:75:16:d6:0c:d5:19:b2:
46:54:1f:c0:cb:94:b0:77:9d:67:f1:c7:e3:04:94:
ca:c9:7e:f6:07:ec:dd:68:86:35:ee:3e:0c:2f:bc:
11:da:5a:cb:1e:a2:5d:9d:e1:dc:bb:f5:b5:cf:b7:
73:a7:d3:e6:13:21:3f:33:df:fe:50:8d:df:24:1e:
9c:ce:24:9d:e7:53:d4:30:32:f3:17:6c:81:94:b3:
c8:24:2b:d6:72:68:b6:20:5f:10:f0:59:6f:d8:a0:
6f:b9:be:2c:d1:1c:eb:a8:36:a8:95:12:ef:1e:c0:
60:e3:be:67:4e:b7:59:48:58:83:a7:0c:02:6c:93:
97:57:ed:e9:e8:7a:5f:65:74:e5:c8:47:0c:8b:43:
3d:41:b9:a1:2f:ac:c6:b6:3f:2d:43:11:19:26:00:
0b:82:1b:9a:75:19:cb:a3:6d:9e:be:57:a0:ee:9c:
d5:ce:6c:83:91:4b:fe:d1:e1:a3:f3:cf:7b:f1:76:
15:4f:38:b4:92:9f:ef:99:59:76:40:00:c9:10:7e:
cc:36:ad:25:64:70:7c:4a:ea:b0:d0:71:f6:6e:15:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:FC:DA:A7:F4:8F:45:C7:9A:B8:85:7F:50:5E:4B:EB:02:3D:A8
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:49:1d:7b:2f:8a:81:15:fd:d0:5d:fd:0e:56:aa:33:ed:
04:b1:9a:1d:dd:2b:62:13:e0:69:2d:bb:80:c0:c2:f1:22:77:
85:ef:cc:35:24:f1:9d:0c:6c:fb:18:40:91:ef:49:0e:f3:00:
b4:1a:b9:32:b0:1e:65:2e:74:ba:21:b0:52:0b:39:b2:e7:b7:
18:2c:12:9b:29:35:e6:6d:d6:f3:d6:3e:80:c3:80:70:52:50:
b0:ff:f6:8d:37:cc:df:e6:de:b7:7d:70:84:de:87:6a:37:62:
66:e8:2d:65:9c:62:ff:7a:7c:84:bb:f1:de:61:18:2a:4f:7e:
6d:b5:26:0b:3f:9a:ff:88:69:0d:5f:86:72:ea:cb:58:90:df:
80:63:d0:c5:fa:40:1b:a8:fa:71:58:d0:44:84:8f:5d:df:9e:
c3:1b:18:4e:33:cc:85:bd:98:26:80:3d:f6:55:bd:63:d6:ee:
88:5f:4d:92:5b:12:27:3a:f4:e9:3c:86:f4:3f:95:eb:78:0e:
d7:3b:6e:81:ac:2b:d5:8a:ac:7c:21:b8:23:04:ab:0f:a9:f1:
d2:4c:6d:ba:91:fe:d6:e8:f5:c4:39:16:2c:34:7d:0c:f2:1e:
12:fa:7e:99:ed:af:91:b2:0a:8d:af:76:dc:eb:68:55:4e:bd:
4b:e3:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:45 2026 by rpki-client