Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: FRbv6Kyg9y8JLAoTNHHZcoIn2AdjXzWz7vw9IAu3Pb0=
Subject key identifier: 94:8A:1F:7A:0D:C1:0E:32:CA:8D:03:1E:DC:57:D1:7A:84:DE:CB:3C
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019D2961731A43631317CDA8C12CB600AFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: hBT6rBHA5HB1H5YI8QZQ/yIaDd4s0dztxzScW6snz9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:73:1a:43:63:13:17:cd:a8:c1:2c:b6:00:af:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=948a1f7a0dc10e32ca8d031edc57d17a84decb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:8b:c3:6a:21:0b:51:82:89:ab:41:eb:df:
c0:46:b4:19:d7:20:e4:c8:98:db:64:5f:00:a6:76:
69:c4:d8:d7:3c:68:39:56:54:fa:40:72:be:38:27:
ee:e9:7f:cb:48:ae:9e:0b:ee:65:3f:4b:82:c5:f3:
0e:d0:16:d3:a5:0e:8c:8f:3b:02:16:40:cd:6d:44:
e5:88:44:7c:55:7b:65:a7:9a:f9:8d:b6:2c:b8:1e:
bb:46:50:88:59:0b:3c:c0:99:6d:7a:aa:bf:b6:4e:
b1:bc:3d:fa:1e:d6:40:91:b1:e3:79:50:be:c5:e8:
e4:e2:5c:95:cc:12:6e:13:60:91:05:89:0c:9c:d8:
3c:3f:bf:c4:61:2b:22:6a:6a:e2:7a:bd:03:fc:56:
03:b2:85:24:f3:5c:57:d9:5c:24:d0:3d:50:e5:9e:
65:c2:5d:bb:30:7d:9e:50:db:5b:60:6b:01:fb:a9:
57:5b:99:45:5d:3e:49:ec:35:f8:2a:dc:db:91:14:
0d:45:bd:df:39:a2:ab:66:84:48:fe:71:1c:a0:20:
0a:50:c7:50:ff:be:2e:c8:27:90:e7:bb:d6:23:04:
34:fe:92:2b:65:66:23:a7:39:c1:cb:fa:69:96:27:
69:5a:74:4b:06:b7:bf:46:1a:8a:97:58:de:f4:7b:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:1F:7A:0D:C1:0E:32:CA:8D:03:1E:DC:57:D1:7A:84:DE:CB:3C
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:c4:f6:0e:02:9f:74:b0:15:db:47:3d:1c:3f:1f:e3:37:
7b:5f:e4:15:b5:fe:de:09:62:a5:0d:92:f3:aa:df:15:6a:7f:
d9:45:a5:ec:85:85:aa:10:50:f6:43:93:cc:14:ce:67:17:c6:
fd:78:fe:88:15:9d:e8:c2:a3:d3:a4:cc:e7:19:39:6c:89:57:
42:95:85:04:ae:3e:a8:19:4e:e0:05:b5:b5:4d:c6:37:26:5a:
d6:f0:bb:22:87:10:4c:c6:a0:f2:9d:bf:c9:69:5f:71:74:9e:
9d:82:5f:6a:66:5c:3a:50:f9:2c:6b:2e:43:78:20:59:78:43:
43:f9:8d:9e:e7:1d:21:36:bf:4f:5c:3e:26:f6:b4:74:5a:e7:
f1:9e:81:a9:9c:c4:5d:0c:8d:8a:50:8d:bc:35:d4:81:0b:8e:
93:bb:ab:47:d5:f8:87:01:40:57:ba:12:f0:a0:87:d1:a2:1d:
ed:82:17:c4:a7:12:d1:12:e6:a5:6a:f0:e6:32:88:6c:23:bc:
50:20:c0:ed:28:42:ee:14:e7:d1:35:5b:63:d7:67:99:71:69:
c8:11:96:76:33:45:ff:06:2d:b2:f2:c3:ba:13:03:74:71:ba:
6e:8a:38:6b:60:6e:34:b7:e3:0c:2e:7b:c0:69:c4:01:99:fa:
f6:6b:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:15:01 2026 by rpki-client