Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: X61oLgxe7B2/qEd+uM5Gtg/V6LiH01WNLU6U2NflgAw=
Subject key identifier: 9C:83:6E:DC:EF:22:83:C3:F9:8E:A3:92:62:8A:E0:93:32:78:A7:03
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 019D2628647EE5B7C7A0B9AB29AB155D5334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0AC2
Signing time: Wed 25 Mar 2026 18:01:14 +0000
Manifest this update: Wed 25 Mar 2026 18:01:14 +0000
Manifest next update: Thu 26 Mar 2026 18:01:14 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: gSvCa9uFrfS7kIoYCRwXJ8QQ03/8iXa+7WFIWYPoSrA=)
2: zuAP0P2ieWMLtXb48E1VVwKO93w.roa (hash: KzZQHMAxju4Nmcnntgy06fN2nxsFzdB0gSb36aOEgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:64:7e:e5:b7:c7:a0:b9:ab:29:ab:15:5d:53:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Mar 25 18:01:14 2026 GMT
Not After : Mar 26 18:01:14 2026 GMT
Subject: CN=9c836edcef2283c3f98ea392628ae0933278a703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:6f:2b:07:18:df:be:ed:8b:d6:15:39:ac:
60:fb:d6:a3:c2:92:18:5b:9b:da:43:7b:3a:47:ba:
01:23:b2:aa:13:ad:65:b0:a6:b3:d3:bc:03:eb:1d:
a7:02:69:b4:69:fc:0e:9b:ac:a2:f4:82:49:c1:d8:
77:4f:c1:a4:53:2a:ba:52:0f:28:be:57:d3:6b:2a:
c3:f0:eb:c3:6b:c5:d9:22:99:fb:05:d3:cb:d6:57:
84:e2:08:53:c8:ac:1b:3d:f7:20:d8:68:c6:2d:2f:
87:e9:bd:bb:19:de:d0:43:78:43:f4:16:ac:b2:90:
b7:e6:6c:c0:7b:38:48:4a:15:3a:66:d5:7d:e0:d7:
81:29:f6:55:a3:4a:e6:da:60:38:7c:48:1c:31:af:
99:e5:94:4e:d7:25:e9:1d:ad:f5:3a:b4:8f:4d:09:
5b:26:24:83:71:25:04:0e:be:27:eb:65:5a:76:e3:
5b:5d:ef:e8:91:f9:72:8e:5b:97:4f:0a:fa:06:e0:
49:8a:c2:bb:eb:ea:eb:08:8a:81:8e:1f:ad:d7:3f:
af:5b:e6:a9:6a:73:73:b1:ad:64:c8:4b:81:a9:18:
cb:45:0e:a0:be:a8:b2:4b:51:86:47:92:4f:74:fe:
62:36:c2:1a:54:28:5f:7d:61:ba:96:30:fc:b3:02:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:83:6E:DC:EF:22:83:C3:F9:8E:A3:92:62:8A:E0:93:32:78:A7:03
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:78:dd:43:b5:54:07:49:cf:0b:53:b5:03:30:4b:05:28:
2a:9a:69:e6:ab:a8:39:3d:d4:60:0e:e7:5d:63:35:68:ba:9e:
29:42:4c:23:be:68:4c:86:f1:1f:ce:96:4a:52:5f:50:cc:97:
21:b2:1c:84:83:dc:cf:d4:42:47:b1:73:27:a5:c7:1c:6b:cd:
59:7a:9b:38:a2:6a:51:da:f9:61:49:02:48:5b:4e:38:5b:f1:
32:09:42:aa:de:d0:d1:15:f0:4c:ba:7e:0d:db:e1:1c:ac:68:
09:ce:cc:40:9e:70:0e:ac:47:96:80:34:8e:db:97:96:a9:01:
a6:54:4d:e3:96:98:2b:21:9d:7f:4e:7a:d9:69:f4:8c:22:70:
cb:58:ce:2f:59:25:b3:81:33:cf:99:16:34:58:c8:e0:da:c8:
b3:33:4c:da:ff:ad:96:90:ce:ad:7b:34:1b:38:b6:4a:ed:96:
45:f5:2d:39:de:29:92:be:a3:5b:53:d1:f4:d4:43:80:42:1b:
c8:32:84:77:a6:d8:15:f1:6b:55:50:aa:69:94:65:08:8e:1e:
b8:9b:71:42:81:d3:b2:4d:ca:b4:63:42:d4:76:9d:26:62:11:
7a:b7:04:8b:3f:5b:14:1d:2a:8e:74:e5:f3:26:16:ae:9f:78:
bf:ed:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:26 2026 by rpki-client