Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: zDtcfV7P8+3WAPhQ2V9XUFVl+sS337v1eJutOTh3WcA=
Subject key identifier: BC:DF:B3:47:0E:D5:7E:EF:44:4B:13:AB:B5:5A:72:E6:EB:2B:EE:83
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 019D29292DF9048342120312C139E0AD45BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: tMG6ytSuOYK5GjszMIvguxbcsgMjzju6OKEbQ3f7Yhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2d:f9:04:83:42:12:03:12:c1:39:e0:ad:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=bcdfb3470ed57eef444b13abb55a72e6eb2bee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:4e:72:46:86:c3:2b:cb:c2:a8:aa:99:3a:
e7:c6:62:3d:39:f8:1b:c9:6a:0c:b5:78:32:78:3b:
48:c4:f7:62:b1:fe:2a:54:0f:62:3d:6a:ab:29:26:
71:fe:a4:e9:4d:58:7b:d2:27:56:a6:43:cb:27:82:
08:82:24:71:11:28:67:fd:11:50:b5:f8:8c:e7:89:
a8:d4:51:88:93:d5:3c:91:c6:63:b3:9e:f3:60:b0:
df:67:e2:f6:44:f3:cb:ab:51:77:2f:e5:18:4e:6f:
ec:ce:a0:b0:c8:64:bd:c8:1e:04:42:51:6e:23:0b:
e9:74:4a:de:89:73:95:1d:20:be:28:98:9e:a5:24:
c9:f0:51:5f:4d:82:c6:54:cc:0f:e9:f0:2a:a0:3f:
e2:43:1a:6d:a0:45:ae:80:3c:02:df:4a:47:0a:5d:
c0:d1:bd:73:d1:27:0e:f0:29:6f:d8:fd:ae:a4:51:
53:15:bf:b6:ed:2b:e9:6c:34:17:0e:1c:86:a0:9a:
1b:aa:e5:8b:98:f1:50:fd:76:d1:ae:73:f0:e9:26:
b9:0a:a6:c0:cd:35:4f:19:41:29:0b:96:3f:7d:3a:
dc:19:32:c1:70:6f:74:00:99:3d:9d:93:a1:31:c8:
cc:79:e4:f3:5b:f9:f4:5a:d9:79:2e:6d:fc:3d:a9:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:B3:47:0E:D5:7E:EF:44:4B:13:AB:B5:5A:72:E6:EB:2B:EE:83
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:b9:68:35:d5:e4:ac:b7:67:73:a3:15:aa:01:f8:a3:09:
5f:ab:f3:7e:41:10:3b:74:d7:ec:df:7a:d6:8d:af:d2:01:9a:
f3:e6:08:9b:f6:3f:ca:14:c1:f4:20:91:db:43:b5:d1:1c:4c:
f7:70:c3:ad:8d:55:79:92:c6:92:bf:1e:e4:b0:92:ec:87:1b:
af:05:eb:c9:d2:a6:b1:18:31:f3:6c:b7:c4:d0:40:51:91:fb:
58:2a:2d:d8:72:12:1b:27:d5:b8:07:7b:47:c5:2a:06:2e:21:
b9:e4:e0:bf:75:8a:b4:41:ed:1d:5f:d0:8e:e2:03:51:55:b9:
99:cf:96:d8:b8:85:a4:fa:bd:65:8e:64:ef:1d:5b:9e:65:1d:
ed:4f:44:6b:de:ea:21:c9:54:e3:22:89:7d:63:09:82:9f:0e:
ff:15:a9:64:f5:33:08:65:96:d5:87:44:32:44:10:ab:a0:87:
cf:3e:04:2e:ab:b5:3f:99:6e:92:74:46:4d:5b:65:31:ef:b2:
5c:65:58:80:ab:e6:a5:d4:ff:06:42:40:f0:c6:7d:6b:f2:d1:
df:67:c4:7d:1a:c6:e1:07:71:f2:40:43:86:59:ed:d9:5e:47:
d2:5b:eb:cb:f6:01:ce:d7:28:a2:ca:a9:61:f5:c1:e3:94:0a:
99:bc:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:55 2026 by rpki-client