Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File: 2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier: LslurM0W0Hg+UoOfBh/fdGm8htlpnvV6TZjX4/VqAq8=
Subject key identifier: 90:C8:44:6D:7B:A7:8E:D0:67:A0:71:4E:13:FD:09:6E:B6:35:E2:19
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial: 019D265F9A372A50C47EB3030C0667574496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number: AD
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: 5V+VH0d4Jx/Viu3poTeZhlmGMUHp67JfUOep/HAIWn4=)
2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
5: UD_HyZZU2C19IaFsZaCL4In6Jj0.roa (hash: rylHESPK2fj3KtkgDq6dsWyTS65oKT4JjrBMW31aQeo=)
6: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9a:37:2a:50:c4:7e:b3:03:0c:06:67:57:44:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=90c8446d7ba78ed067a0714e13fd096eb635e219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:04:92:eb:0c:43:6a:f2:eb:b0:5d:55:a6:
cf:41:e6:b6:61:06:40:a3:d1:68:78:af:7a:f4:a4:
f8:02:3b:41:19:8a:ae:12:59:99:e1:96:70:9a:00:
05:a2:a6:c7:f3:a0:00:85:70:f9:af:56:be:b0:35:
ca:fe:1f:1a:32:a6:18:00:99:1a:02:c4:56:02:ac:
4c:45:4f:65:41:60:25:d9:e1:9a:a7:ed:d7:28:43:
33:31:77:3b:6b:b2:2e:6b:27:87:f8:df:13:83:c8:
e1:29:9b:5b:47:72:f3:04:a2:ac:f8:d3:1b:62:a7:
d1:f0:f8:d7:d0:f6:8e:9c:f8:e3:d2:f1:12:3b:fb:
96:0d:0f:a1:f0:8f:34:83:a2:90:c5:c7:90:2e:08:
5f:3f:23:51:c7:87:67:2c:71:72:ab:7e:87:26:31:
4f:6f:61:54:05:5a:73:70:09:4d:f8:17:e1:de:83:
25:6e:4d:64:01:75:e5:67:7c:11:58:53:f2:e3:f3:
d4:f7:31:53:30:81:d4:2b:67:d4:bc:c7:3c:b9:1d:
c4:63:35:18:29:fc:74:0e:ca:50:f3:d5:d9:62:3a:
f2:48:78:38:6c:0e:7c:a2:15:d6:45:b6:bb:64:1f:
1a:77:39:b2:97:08:6d:0e:8a:7c:4b:34:04:e1:77:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:44:6D:7B:A7:8E:D0:67:A0:71:4E:13:FD:09:6E:B6:35:E2:19
X509v3 Authority Key Identifier:
keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:26:8c:35:56:fb:cd:15:2d:74:06:88:3b:03:02:d5:97:7d:
59:45:1c:7a:8e:7a:30:b6:41:68:dc:51:72:ec:93:ed:3b:df:
76:8b:b0:ac:43:29:c0:6b:56:ba:83:e4:df:2e:b0:f2:3b:17:
e1:92:3d:2e:3e:77:1c:a3:50:44:a9:11:7f:e4:64:7a:19:4a:
95:57:3f:88:39:73:cb:95:ea:c7:98:be:00:da:ed:14:b4:c4:
4a:6b:57:9a:29:d6:32:a2:4e:f3:37:c8:8b:51:e4:7a:aa:87:
80:d3:3e:8e:c4:ef:5c:92:5e:2a:78:98:68:de:5a:14:ec:16:
da:ec:79:20:5a:cd:28:92:3d:b8:90:46:32:05:d9:de:65:e3:
22:33:20:ac:5c:d8:b4:64:a8:a6:26:f7:bb:ce:79:ba:c2:57:
b7:2e:76:d7:3f:10:c7:53:41:bd:cf:22:ac:8c:0f:a9:8d:6c:
34:48:14:30:d3:d7:54:e6:7c:01:ab:55:c5:0a:6e:88:57:4e:
03:0e:53:5f:f8:99:e9:71:92:15:fd:20:17:64:89:92:a0:94:
e3:53:a7:62:85:cb:0a:c4:60:bc:84:c0:ea:0b:be:3c:fd:46:
7c:2a:e1:a6:e6:ec:ea:47:4b:26:0c:9d:45:f3:6d:31:63:f5:
a5:aa:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:48 2026 by rpki-client