Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: 4rOo5gbTuNoHWrZv5/XiuSxN+3EAUfV1SZku8J2HvuU=
Subject key identifier: D3:DB:FA:88:DD:40:8F:B2:B1:5E:66:D3:3A:8C:78:60:53:4A:CF:87
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019D27A8B5EB5CEA482ED72763BF58B52337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0E78
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: h5pbJFe4D1xx9uqCggfBk6NzwgrQtRyiQ6r0at9ajkw=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b5:eb:5c:ea:48:2e:d7:27:63:bf:58:b5:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=d3dbfa88dd408fb2b15e66d33a8c7860534acf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:30:08:2a:e2:e5:71:49:99:42:21:64:a7:
13:05:77:20:d6:ce:94:e0:be:e3:b1:b2:6d:b4:5a:
76:63:28:bb:83:2d:9c:2a:84:db:68:4b:78:14:e5:
53:1c:44:f0:a4:55:a1:5b:37:fb:03:af:7b:9c:0d:
5a:d4:d8:bf:ad:68:a3:34:f7:9f:1a:61:cd:f8:30:
5b:67:5f:66:60:5e:72:9a:d7:05:c0:07:32:58:ba:
9a:bb:89:db:8e:b1:b7:df:04:e5:05:14:c2:0c:8a:
fd:47:3d:08:1a:05:dd:10:11:8d:f1:a2:e5:fb:70:
40:08:25:97:3b:99:f8:7e:d4:eb:b8:ed:06:e7:18:
b3:b0:86:db:17:7f:23:89:af:a7:83:13:78:f3:d4:
0c:a2:2d:30:f1:ad:f9:0f:68:22:26:9c:25:38:86:
54:35:f7:b8:3b:c0:27:ab:0c:3d:ec:c4:c9:5a:58:
f6:39:a5:a8:36:32:6f:02:7c:49:a1:f9:ee:fd:f8:
2c:db:26:d8:1e:f2:2a:1b:5c:a1:c5:d8:f2:a9:ff:
bc:04:29:57:16:af:b5:4d:a8:d5:69:70:2c:a9:84:
f3:64:04:43:ed:db:d0:a5:4e:25:c0:58:73:47:da:
07:e1:59:4f:1c:8e:00:ff:b3:80:17:83:99:16:95:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DB:FA:88:DD:40:8F:B2:B1:5E:66:D3:3A:8C:78:60:53:4A:CF:87
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0e:9c:62:b7:55:28:cc:9c:10:97:05:64:73:01:5d:af:af:
25:e4:47:71:10:63:1d:3c:1a:04:13:62:9b:93:d9:d7:00:c3:
5b:17:be:27:ae:fe:40:b1:2e:f8:84:b0:d9:03:bb:98:d5:dd:
73:7b:8b:e3:60:b9:93:dd:a9:74:c3:12:d6:0d:b3:26:2f:7c:
4f:57:d6:84:4e:2f:c3:15:6c:f1:df:d9:69:25:e5:11:d1:2b:
6a:92:fe:d9:21:90:20:35:33:e4:a7:cd:68:b7:c6:2c:d6:72:
54:93:67:c4:44:84:7a:80:bd:01:dd:25:1a:9a:d6:e9:53:6b:
6f:ee:22:9a:d6:dd:96:4b:2b:a1:85:6e:16:d3:33:3c:a8:bc:
e1:d9:ef:ba:84:0c:d1:71:23:95:27:99:ab:d1:08:a6:3d:46:
bc:25:f2:f0:b7:17:8b:86:c6:e4:a0:c8:31:53:5e:ea:16:02:
41:2c:36:e8:d5:7f:a6:8f:03:94:77:6e:f0:4b:0e:59:e6:32:
48:be:aa:68:0e:a0:c3:b3:b3:70:fd:5c:19:1a:b1:e7:7e:a4:
31:a9:12:03:73:c5:d0:c6:58:02:d7:df:c7:56:45:66:96:6d:
23:d0:3f:49:36:41:44:1c:d7:c9:6a:ed:83:50:00:23:bd:13:
41:54:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:16 2026 by rpki-client