Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: BnPSB+sSfBRMFZUUwu3qMJfQk7ytU4g2UML7MJuOfNo=
Subject key identifier: FB:48:86:1E:91:3C:1D:F2:64:5F:5A:B7:6A:EE:79:42:F6:C3:96:D5
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019D25BA148B95F7B8498F0E1EB2B8186A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0E77
Signing time: Wed 25 Mar 2026 16:00:44 +0000
Manifest this update: Wed 25 Mar 2026 16:00:44 +0000
Manifest next update: Thu 26 Mar 2026 16:00:44 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: S/5fRpM+s2Vkg3Sz5M0OmAl1J3H2Ue5EuY2sDkYBmYE=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:14:8b:95:f7:b8:49:8f:0e:1e:b2:b8:18:6a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Mar 25 16:00:44 2026 GMT
Not After : Mar 26 16:00:44 2026 GMT
Subject: CN=fb48861e913c1df2645f5ab76aee7942f6c396d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:31:4f:95:24:5b:e8:c4:45:c5:a9:a5:25:65:
d3:71:80:67:18:20:e2:4c:f3:c0:10:f4:28:ce:27:
49:2b:1b:7b:df:62:6a:84:2c:bb:04:06:07:e9:f5:
2f:05:8f:7f:dc:97:f5:e4:3b:91:9b:fe:75:36:3e:
c2:b2:f9:c4:6a:b3:8d:e0:39:df:3a:0b:73:62:f9:
e9:60:07:40:ba:25:dd:93:08:4e:07:0e:7b:b3:e2:
15:2d:a6:1f:e8:7a:db:21:50:2b:bb:2e:b5:4b:63:
45:f9:df:b3:6f:5b:67:7c:f5:d7:02:94:b1:22:43:
38:26:b8:52:9c:0a:dd:24:fe:2c:da:52:93:91:9b:
cf:8a:de:17:72:88:f8:e0:26:f0:98:9c:fb:22:b7:
2b:5f:b9:fb:00:f5:cf:84:7a:80:2d:26:4f:71:2c:
e6:57:71:c5:e0:f2:d3:cb:6e:a8:0f:df:4f:1d:92:
6f:8c:0e:61:9c:29:a7:dc:10:26:e1:27:cc:65:7f:
06:09:24:40:c9:ac:8a:e3:6f:00:54:74:e6:48:a0:
e2:6e:07:16:07:60:5e:b3:15:1b:74:f5:8c:32:b3:
81:28:d8:94:17:2e:53:46:0c:0b:0e:a0:5d:65:d6:
42:00:ee:c6:31:1a:29:4c:5a:8e:5d:f1:98:60:60:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:86:1E:91:3C:1D:F2:64:5F:5A:B7:6A:EE:79:42:F6:C3:96:D5
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1b:f5:36:eb:e9:eb:62:bb:e0:a6:a5:71:56:e4:73:76:ea:
91:50:b5:1d:7d:0a:1f:bc:28:c7:5d:2c:78:b0:cc:ed:2b:5c:
f1:7f:8d:f6:bd:16:72:49:b1:cd:86:78:ea:82:92:f5:06:d3:
fa:3a:78:8f:97:4d:09:12:81:28:fb:01:8c:33:52:15:67:51:
c0:1d:be:a9:0e:39:c6:f3:ce:ed:9d:e9:35:ae:e1:3b:91:30:
49:77:04:37:45:7a:a5:15:e2:95:d9:64:f1:13:11:a1:3e:15:
55:90:41:a2:4e:bd:08:1d:83:69:11:60:52:1a:29:54:9b:dd:
19:22:e5:c9:c9:2d:7e:d4:ea:dd:4f:02:81:c6:3e:44:cd:ba:
fc:d9:72:00:bb:a3:92:05:d5:d0:3b:2e:36:bb:be:2a:d7:a2:
05:dd:65:e1:94:cf:0b:49:4a:5a:63:a3:11:13:81:93:9e:39:
65:08:51:b8:e5:86:29:81:97:1d:fc:88:1a:f7:98:09:a3:46:
0e:a9:51:62:39:ba:00:82:62:e1:83:bb:d0:51:e6:a7:7e:0f:
2b:41:f2:83:79:7a:af:70:14:f5:83:7c:74:e2:98:74:74:98:
af:1a:66:6d:08:da:1e:5e:e8:cc:10:9b:ef:1a:7c:44:d7:3d:
e8:86:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client