Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: CpXrD4d2pqR4SPzkengkbPk8ps5d+M2/yc3N3SsPIC4=
Subject key identifier: 95:78:45:EA:A6:A4:35:DA:CC:80:BD:16:18:4C:C6:75:90:B2:17:7C
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 019D27DF71FBA38140C174C5755B8B859205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: jv9URt4JWotRFgvKfXfj9QE/4yMmdmlAbZAK/AXCgIE=)
2: JqePAdgixxFWqA5Nk9EhxTVUR1w.roa (hash: 8V9B6G/PlO/tuR8Ihfw8dzc5qWqPg0dd9Oy1jXd8ubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:71:fb:a3:81:40:c1:74:c5:75:5b:8b:85:92:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=957845eaa6a435dacc80bd16184cc67590b2177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:20:c0:4c:7c:af:9c:6b:e4:6b:e2:c9:07:
49:47:92:eb:0b:f7:f4:d4:e7:b2:2c:70:e1:6f:74:
8d:85:75:44:7b:f7:ef:79:d5:1d:65:a4:79:19:56:
9d:d8:bd:54:e7:6b:fe:1d:b5:d8:00:5f:99:a3:03:
98:ce:06:d6:3f:87:11:33:62:47:52:f4:70:ce:7a:
88:e4:7a:b2:d5:d3:4d:96:41:2e:5d:98:5b:47:1a:
b8:4d:aa:38:29:01:46:04:18:17:8b:98:4d:81:71:
d6:53:23:15:d2:5d:bc:11:03:d0:31:a9:6b:7b:6d:
59:d4:ae:9e:58:56:41:d3:63:21:10:ca:5f:7a:a7:
96:73:a7:2e:49:db:18:42:dc:cd:50:7d:cb:94:c5:
e2:29:92:99:41:1b:6b:91:03:b4:07:44:20:dd:03:
ea:93:17:db:84:39:d5:9d:65:71:b6:68:f0:8e:6d:
25:cf:20:cc:59:5d:29:f9:60:ae:59:52:e0:44:e1:
18:c5:25:63:d8:16:11:02:16:8a:e8:03:e2:d8:09:
95:9a:13:69:03:84:2c:ad:f9:30:08:d9:85:d4:09:
ad:b5:f4:ca:58:1f:4e:58:ef:95:87:a7:e3:b0:95:
ee:24:a5:94:72:45:d9:b5:d8:d4:95:58:4c:79:93:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:45:EA:A6:A4:35:DA:CC:80:BD:16:18:4C:C6:75:90:B2:17:7C
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:2f:f2:91:d2:9b:19:92:5a:a5:ad:d2:7d:b1:f9:f3:21:
0d:76:72:3e:46:b9:9e:ac:12:e5:72:13:49:df:29:62:e3:c5:
86:33:d7:28:4f:33:7d:69:61:97:97:ea:df:84:26:ca:03:a5:
5c:03:4e:e1:0a:34:db:19:6b:86:42:27:5f:00:9f:91:3a:7c:
38:42:fd:d7:8d:71:9d:27:5c:f6:d9:e0:95:fa:f9:e1:1c:2e:
c7:1b:ea:2f:9e:ef:c7:84:ea:20:63:46:57:63:c7:06:d3:cd:
12:c9:3d:31:2a:80:42:80:1a:83:75:ab:6b:91:f2:92:02:ee:
74:d6:16:9b:8e:02:bc:4d:f1:97:d3:e4:fa:d8:5d:4a:10:48:
40:dc:f7:be:23:f0:69:8d:9d:4f:7b:83:53:91:8d:22:4f:b2:
d6:23:85:ca:b9:b0:1b:91:c7:de:b2:56:58:d1:6c:06:3e:b4:
fc:69:1f:50:29:0d:5d:ae:49:a1:08:9b:40:bd:8f:11:54:a0:
9f:6f:8c:d1:33:10:f0:ee:f6:bb:59:b4:6d:75:8a:90:ec:3d:
d7:40:00:cd:d5:ae:95:95:32:20:13:c7:08:19:8d:d5:fb:b0:
12:78:d8:90:1a:e7:5a:fc:56:68:1e:15:7d:da:02:30:1b:ea:
01:45:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:15 2026 by rpki-client