Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: 1ea3U8gEqoz6Gy4ToQIA11B3WSqxeLcq4ACMJyaP17A=
Subject key identifier: C2:C9:AB:A0:AE:BF:BA:70:65:33:C6:DA:7F:02:B8:27:71:F0:16:57
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019D2A3BE97A655FF8DB95923E0A54178EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 085F
Signing time: Thu 26 Mar 2026 13:01:02 +0000
Manifest this update: Thu 26 Mar 2026 13:01:02 +0000
Manifest next update: Fri 27 Mar 2026 13:01:02 +0000
Files and hashes: 1: 2VWgK395Xq-hl0LiHskgzImJg8c.roa (hash: 1Spcx7D9L809cgYKQE6qvo1/o5vO9pV81u+jQPAflTI=)
2: dCfhouV-L6NBX1Zdltg4CTcqsVY.roa (hash: q66wLSt9qJ4QLsmrcoF6I4u4fYrxEp3xLBONHaR17ko=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: 0RrBnGp+oBT+o10NZNbickBX/xyRAdmLatu0eCiKPu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e9:7a:65:5f:f8:db:95:92:3e:0a:54:17:8e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Mar 26 13:01:02 2026 GMT
Not After : Mar 27 13:01:02 2026 GMT
Subject: CN=c2c9aba0aebfba706533c6da7f02b82771f01657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:c4:f1:c6:ca:ce:93:1e:39:a4:bd:09:9f:
e3:c7:f7:e5:2e:22:02:d8:b7:38:34:bf:03:3d:e0:
57:8a:eb:8f:c3:b7:37:9a:5f:40:f3:0f:3a:2f:0c:
14:a5:13:e5:56:cb:52:ed:a2:6d:f3:47:ba:d0:a5:
19:2a:02:15:6b:55:d4:a9:56:98:51:09:d2:c1:98:
80:72:8a:4f:6c:78:2a:ef:1f:bd:68:fa:78:30:75:
07:e0:08:30:62:1e:43:8d:ac:70:f2:b9:9d:88:3f:
80:6a:a6:a9:ce:9d:09:0e:2b:c9:5a:b1:e0:07:95:
ee:3b:cb:5f:3f:e8:00:1c:e9:52:5c:b1:53:e0:8d:
b2:fe:31:e3:cd:4e:8c:6d:af:bb:3d:b0:9a:1a:d0:
dc:37:58:ba:b3:f2:b8:16:4d:2c:97:ee:67:ed:ac:
aa:a5:b9:ea:60:d4:6e:2e:28:50:a6:93:16:83:c9:
d0:72:16:71:3d:af:2f:36:cf:09:9c:3b:3a:7f:64:
8a:62:d1:9c:e4:2e:a3:47:6c:a4:9f:9f:ca:d9:5d:
b5:6e:73:92:1c:3f:c7:f1:26:d5:e0:16:05:b5:ad:
23:85:72:f2:28:a5:8e:a2:a8:74:32:55:0a:92:4c:
b7:71:c5:34:a6:8f:dd:a1:37:65:5e:a1:a5:6b:cb:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C9:AB:A0:AE:BF:BA:70:65:33:C6:DA:7F:02:B8:27:71:F0:16:57
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fc:92:2c:dc:8a:42:a6:f1:93:50:7f:f1:fe:e4:8f:13:3c:
8f:a0:a0:d5:bc:2e:10:02:c8:e8:52:21:af:1f:5f:bf:63:36:
00:b6:74:03:ba:71:a4:67:a1:17:db:12:ee:cb:cd:10:9e:d9:
6c:de:20:08:1b:97:0c:60:ca:0f:32:72:fc:89:75:c7:cc:42:
62:2d:e9:bb:1f:15:35:13:11:66:ec:39:ca:4e:19:29:45:c3:
4b:5f:c6:82:be:9c:67:69:a4:aa:63:c7:c6:cd:01:82:49:16:
1a:29:91:2c:f4:8f:86:69:2c:52:29:38:43:17:fb:50:83:35:
3e:0c:ea:3f:ac:6c:9f:1f:8e:78:ea:51:2b:fa:c7:2f:4f:bb:
34:e1:69:f8:48:83:11:09:3d:91:c5:be:64:7e:81:56:cf:6a:
97:c5:a4:79:25:6b:7a:50:8a:d2:de:8f:81:de:36:9b:10:9a:
e6:93:12:ea:a5:ce:92:4e:70:ad:33:98:7d:71:f0:4b:c4:6e:
f5:10:bf:7a:94:ec:67:29:1c:48:d2:14:6a:3f:60:b6:36:9e:
75:78:1f:d9:ee:92:14:57:79:bd:ed:a0:16:a0:7b:8e:4d:36:
5c:6e:04:95:f4:d0:29:22:7f:38:3b:d5:5a:e6:f5:b9:93:dc:
b2:2e:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:32 2026 by rpki-client