Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: bB4t/+bj8r3n+phhkYeE4oL7MVCRku20Nm2vgEMW1fs=
Subject key identifier: 7A:39:42:2E:B5:37:5B:E0:03:E6:51:FE:3C:6F:B2:73:3B:A0:67:23
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019D27A8D8BABAC301F8322D3054B4BD77C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: dDfqbrPPRUq5cU9dQK3tOsjiHSopyVqrPJitX46aSWc=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d8:ba:ba:c3:01:f8:32:2d:30:54:b4:bd:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=7a39422eb5375be003e651fe3c6fb2733ba06723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:f4:6b:a9:6f:de:42:36:6b:b1:9e:65:56:
dc:10:34:21:f2:b6:a3:de:b3:81:16:4d:cb:89:49:
1f:d4:44:8b:aa:b2:4b:82:d8:9d:a6:78:53:d6:15:
ad:1a:20:41:02:ac:b3:83:82:71:0d:d3:7b:5a:24:
68:86:81:25:f8:47:b4:6d:3c:18:a0:4d:c2:c5:71:
be:c2:91:92:84:c2:97:07:23:02:3e:d4:c4:61:9c:
38:be:73:df:e6:a3:32:40:05:cb:b7:93:fe:cd:0c:
d0:91:80:e3:62:c4:b7:ef:fe:98:20:89:51:ed:15:
72:19:9c:ba:c6:3b:98:2c:17:f5:56:0a:6c:5c:33:
da:45:a9:e8:f5:e8:82:b7:7e:24:30:bc:27:3d:1a:
70:bd:2d:0c:cd:2e:c2:1e:bd:3b:43:c8:70:6e:95:
59:39:7e:3c:29:56:04:97:e4:f3:5e:5e:c3:b4:75:
7e:09:05:80:91:5f:88:f4:6a:00:ea:8c:94:df:2d:
b8:c0:fd:4b:e2:d6:e1:2a:83:3f:fd:53:39:d9:4e:
75:db:7d:7e:e6:55:de:e5:5b:22:52:fd:2c:a5:67:
f0:c9:31:24:62:f0:52:55:f9:a7:08:5e:ff:f5:e9:
50:01:19:de:a8:1f:fe:19:73:33:bd:50:df:2a:bb:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:42:2E:B5:37:5B:E0:03:E6:51:FE:3C:6F:B2:73:3B:A0:67:23
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:af:fc:c2:41:78:04:70:67:3a:47:b9:29:a4:ec:b4:42:aa:
c0:b1:a6:9f:ec:65:87:a6:73:d2:03:97:44:95:f5:cc:56:7c:
4b:75:db:b5:35:3f:f0:14:ed:b9:ce:70:19:7c:78:51:01:66:
3a:da:bf:6e:d8:23:69:e2:89:9b:2f:03:e6:96:87:c3:ee:52:
84:38:e0:00:f0:72:cc:b9:5f:67:33:9b:22:64:7e:9a:91:b4:
81:39:08:78:d0:09:71:7d:be:31:73:c7:04:23:f2:db:fa:ff:
fe:38:26:49:b0:de:6f:bb:04:21:53:23:52:b6:8c:fd:a5:78:
21:22:dc:2b:6e:0f:80:a8:b3:1a:5b:71:4e:b4:9c:d5:8e:5a:
e9:17:6f:fc:b7:22:da:0f:ed:0f:dc:5f:a6:00:e5:da:89:b1:
37:74:6f:99:53:22:5d:91:e9:a2:5d:10:d8:b3:25:04:fd:3b:
74:19:1d:7b:25:3f:60:1e:ab:df:99:b9:0f:b8:12:68:bf:ae:
82:eb:5a:7f:dc:62:a0:9b:d0:ef:2a:2e:dd:fc:20:09:03:c7:
09:6d:7f:26:7d:a6:1b:4f:9b:70:0f:d3:95:41:2f:42:eb:7a:
bf:0b:32:d0:22:d1:84:bb:11:f1:10:37:5b:45:d9:e7:f3:72:
b7:0e:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:36 2026 by rpki-client