Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier: T3d8UMkH/mfDdXVIz7kQyHuEt5eajlXA03ZM5I6btk4=
Subject key identifier: 99:98:39:46:A6:9F:40:A4:95:76:88:CD:4E:51:18:47:3A:77:5E:10
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 019D28BB1341F8922B19C4513794501E2B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: vhSlQZOtTDZEE0O84f69DLUMHHx93dtaze8RyhpfOLw=)
2: kX0ln8n5R4ckT5blpr2Q8T6dxyw.roa (hash: m+DqRW/7H7lJLeLV4xP2QSBsOS0wlhVWEX4nGDQ/zJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:13:41:f8:92:2b:19:c4:51:37:94:50:1e:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=99983946a69f40a4957688cd4e5118473a775e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:49:a9:6b:cd:dd:df:3d:39:eb:05:9b:1f:
b9:36:19:32:6f:a1:99:db:31:e1:9c:95:64:2f:e3:
7e:b5:81:52:0b:eb:c1:3f:52:16:7e:f8:4e:16:4d:
15:de:46:84:db:8a:46:b9:15:2c:b7:4c:89:48:33:
8b:21:29:e8:6b:8b:eb:3e:04:00:f6:39:d4:cd:6a:
63:2c:43:1b:47:ed:b8:61:44:1d:97:96:c5:5b:7a:
6b:a0:ca:c7:61:81:d6:6c:6a:fa:1a:ad:e7:de:68:
6f:31:33:e6:14:ee:52:b8:f3:a1:bd:ec:7d:1c:7d:
61:70:f4:53:de:07:ca:37:76:c0:17:cd:d7:fa:07:
e0:c4:d2:a0:a7:b8:8b:40:d8:f4:f2:0e:16:ff:e3:
7d:c5:4e:b2:1f:6a:04:4e:7d:8a:cb:16:58:67:bf:
d5:70:7c:ba:fe:36:8c:9e:5a:2f:f8:c6:a9:88:32:
d2:a0:1c:c1:ba:73:60:5e:ab:96:17:0f:7d:1d:75:
17:41:64:62:4f:48:0f:a1:3b:28:f5:80:a1:2a:cb:
df:2e:d2:ff:c4:34:8a:ab:c2:1f:5d:4c:cb:50:35:
17:4a:bf:4c:21:bf:9b:7f:8e:39:ba:59:98:ac:42:
40:fc:a2:60:73:98:7f:2d:ec:85:9b:f8:e9:d4:3f:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:39:46:A6:9F:40:A4:95:76:88:CD:4E:51:18:47:3A:77:5E:10
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:42:c7:f5:51:b3:c0:89:f2:cb:3a:62:8e:23:59:73:99:94:
4f:0a:5f:c9:97:41:22:04:f4:86:bb:e2:f8:40:b8:7e:ef:d6:
85:f2:e2:32:b4:d4:aa:85:ed:ff:1b:04:44:1e:6e:6c:dc:b8:
7b:fc:4d:7e:38:35:d4:08:47:4d:45:0e:c6:79:d0:32:7d:90:
db:ec:60:cc:ce:ea:a2:21:e7:79:14:d8:51:cf:37:c2:9c:9e:
01:7a:1e:10:1a:cb:0c:7e:b5:1a:41:ad:58:75:cc:c9:27:a0:
37:da:ad:3b:f8:cc:2a:33:87:25:a6:f7:79:92:3f:4b:73:57:
4a:e0:5e:34:e7:83:eb:27:ce:26:72:59:10:a3:d2:9e:fc:57:
47:36:7f:72:12:6a:5b:29:1e:2d:3e:e6:4a:83:14:de:12:12:
12:b1:27:ee:40:3c:ac:c2:b2:e7:86:81:39:25:ed:24:af:ef:
51:bf:33:ac:45:cf:bf:b7:0a:60:07:2a:37:dc:68:61:03:2a:
ba:39:ee:0e:c2:cf:a7:6f:30:7a:bc:f2:a8:4d:56:45:c7:b3:
05:ab:d7:0e:7b:21:6b:18:40:d1:80:a1:ab:9a:14:e6:bb:52:
ce:c6:58:1d:2a:5b:4d:b0:a1:10:b0:95:26:66:bf:d2:61:5b:
55:c7:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:23 2026 by rpki-client