Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: xeep7bdUd2l1zR8iOYbatdgyqVKXaQwnjZG6PtQA2Qg=
Subject key identifier: 0B:76:46:29:D3:01:07:19:32:0C:4D:1A:36:4B:90:D6:FF:E1:23:07
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 019D269616F58AF8DEC9D5D042A0C66BD877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: KyyRzWfwav9QUBHxmyL3z+S0DpYf+HOmL+oogRB1nk0=)
2: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (hash: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:16:f5:8a:f8:de:c9:d5:d0:42:a0:c6:6b:d8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=0b764629d3010719320c4d1a364b90d6ffe12307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:69:9a:cb:c4:9d:5c:74:8d:db:fb:2c:6c:
26:06:57:6d:b2:6f:18:0a:fd:3f:bd:e1:4f:68:56:
cd:34:a3:f0:dd:da:ce:f9:73:03:31:00:fd:d9:bf:
94:e0:a1:db:0a:50:36:68:6b:72:a1:6b:c7:cd:21:
4a:bd:4b:08:ff:66:f3:bb:49:1c:b3:1e:74:79:f9:
4b:2e:ce:04:6d:28:7d:10:4d:f3:b6:fc:12:7a:3c:
83:a9:a1:a5:15:1c:cb:9b:e4:97:5e:7b:2a:ea:b6:
ef:13:86:de:f2:09:49:aa:c1:54:75:0a:41:90:f1:
ef:d5:22:16:56:4d:bf:9a:10:f3:26:77:d8:eb:1f:
f1:11:9c:5c:01:6f:63:98:70:50:9e:18:7b:97:d6:
16:3a:81:33:5d:e7:60:c5:ff:a2:b6:5e:ba:43:31:
a7:ab:e6:f5:51:0c:36:c5:ff:08:87:db:20:76:b9:
64:d6:33:8e:b6:63:c7:e4:fb:8c:3a:cf:51:d0:ea:
ea:ad:42:cf:75:8a:12:68:e5:b4:3a:da:da:da:27:
99:e8:d0:20:f4:d9:a8:73:c3:c8:c5:17:73:6e:ef:
56:00:7d:30:c0:57:e3:c0:6a:0c:4f:fe:19:8c:8a:
51:85:14:ac:b5:e1:d7:c5:0e:d3:03:ca:59:e0:76:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:46:29:D3:01:07:19:32:0C:4D:1A:36:4B:90:D6:FF:E1:23:07
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:44:64:a0:6e:1b:b7:1f:e8:de:46:50:f8:0e:39:76:31:91:
f2:ff:b9:37:62:c8:c9:ec:31:fa:c2:46:44:8b:a1:24:8a:5a:
cc:55:0d:c4:dd:a0:ed:0c:bd:af:03:e9:17:b1:43:b8:d8:0e:
a4:75:19:ea:07:89:4d:0e:dd:a7:44:31:cb:a2:78:30:0e:58:
e3:38:8f:56:7e:e4:f7:d7:87:01:33:41:2a:52:c1:ca:f2:da:
e7:25:a0:9c:b2:f9:a3:5a:f0:e0:50:3d:66:06:38:6a:ae:af:
4c:79:b2:db:9d:3f:42:9e:60:57:8f:8a:83:d5:cf:51:b4:bb:
9e:93:e5:fc:b8:0f:a7:9d:8b:79:7d:92:11:14:48:ef:5f:05:
49:07:31:e2:0d:9f:c0:81:62:1a:f1:61:1e:ff:3a:51:b1:9f:
42:92:8f:aa:11:00:88:7e:ac:b4:fb:06:46:25:19:ba:81:dc:
df:a8:04:7d:cd:93:87:15:ef:1a:70:11:69:45:eb:3b:c6:1f:
81:e9:9d:31:fc:2e:dc:f1:38:35:64:e8:06:4e:d3:2f:59:a0:
41:ad:11:3e:39:9e:2f:92:f2:92:84:cb:c1:6f:00:10:e2:9d:
bc:a8:59:fc:3a:cd:f0:c2:05:f8:f1:c2:5e:ac:72:52:61:32:
4a:37:22:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:20 2026 by rpki-client