Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: qTbpo+aJQ+TQRdlvDrGQUu+hl0+FwDLR0mQ85GYOs8A=
Subject key identifier: 9B:57:F3:23:C9:0C:09:FF:B7:D0:97:5B:D1:6B:4A:2F:B3:A6:D3:80
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 019D258367A64FAF8128285A38840B707BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 1815
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: Z340ge/LqiRoPrzuqjw6lcrmV+8GR2CBw99LzOAWuG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:67:a6:4f:af:81:28:28:5a:38:84:0b:70:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=9b57f323c90c09ffb7d0975bd16b4a2fb3a6d380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:a1:ec:f5:52:f9:05:65:12:d5:80:5f:1a:
de:33:a2:ec:ae:a7:4c:b8:eb:7f:43:80:08:76:08:
5a:66:6a:ae:ce:91:11:59:6b:20:99:a6:fc:98:7e:
a3:55:e3:8c:ec:fb:b3:ce:c9:0f:31:38:34:44:12:
d1:88:f5:5d:13:a0:95:e1:5f:6a:dd:6a:16:94:5e:
74:cb:02:86:46:3f:bf:3d:3b:00:bc:e4:79:af:7c:
24:fb:65:ac:f3:b5:91:5c:43:44:1b:80:44:be:79:
1a:57:3f:75:b4:dc:ae:98:4e:e7:0a:5f:ca:ed:9d:
66:73:79:6b:5e:d4:07:18:06:d8:8b:13:cf:0b:1c:
25:3d:52:f3:17:ce:6b:fc:ac:0c:f0:ef:3f:2b:0a:
5e:ca:f0:35:95:c5:4e:c1:1a:94:92:f4:6e:09:73:
b9:5b:19:5c:34:2d:21:a6:7c:a4:c9:f7:56:41:ab:
ed:df:a7:bd:71:d3:8f:fc:1c:26:62:81:0e:a6:cd:
d1:61:8a:ed:63:58:c2:bd:17:b7:6d:32:b6:4d:92:
37:6b:a3:8a:86:d2:e5:8a:ab:ed:6d:99:c5:0e:e3:
7c:82:64:31:8c:9b:8e:b6:07:1e:12:a5:d2:f9:7b:
aa:3e:22:03:dd:32:b5:fc:02:a8:99:48:ea:4a:e5:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:57:F3:23:C9:0C:09:FF:B7:D0:97:5B:D1:6B:4A:2F:B3:A6:D3:80
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a4:fb:b3:ef:e7:06:4f:70:cc:f3:d9:ac:9e:a9:c6:b6:20:
45:31:85:b1:b1:00:06:b2:0a:5c:de:7c:12:11:50:34:e3:b5:
df:c6:82:b3:f7:0c:28:c7:6f:76:61:e0:b4:ce:1f:1d:77:63:
0d:62:e6:93:24:e2:c4:a8:68:9f:33:7b:c1:fd:83:b0:cb:76:
e8:4d:ae:f4:2d:66:34:23:69:b1:be:66:fc:9d:20:4c:b0:5d:
dd:7f:e5:7a:6b:00:4f:38:f5:45:07:39:77:5c:82:85:e0:20:
4f:21:55:46:35:fc:6f:58:29:c9:a3:f9:2f:26:78:20:63:89:
71:f3:20:68:f4:58:0f:3f:23:ab:16:e1:7f:d6:fe:40:b8:19:
0a:ff:a7:25:e5:57:84:03:55:5f:a5:d3:19:a5:1c:e5:e4:4b:
ee:8a:36:29:a2:f8:f7:d9:4e:34:f5:1b:1c:25:3a:ac:19:3f:
62:b3:52:e2:38:69:36:5e:0a:86:8c:e1:d2:7c:11:fe:14:f9:
90:cc:92:b9:65:f3:93:93:6c:bf:65:d7:0a:fd:20:d3:6b:70:
8a:fb:42:ab:f5:94:70:dd:0c:76:9e:59:0e:da:96:50:a5:7c:
d5:2b:04:bb:ec:e5:1d:7f:37:da:39:03:3d:79:36:35:56:5d:
5a:7d:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:39 2026 by rpki-client