Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: jN+oSLaCypJsr6pPPx7Hxfl8GYIkhi7bXUlfZu0laWs=
Subject key identifier: 15:71:FF:60:58:03:83:25:B0:70:25:33:EE:53:AC:44:D9:A1:43:94
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019D27A90C315AAE0197E1C572B60DACFFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: F+uglKmSPLkX35F2H3zODRGz3UTsdWooekJRd8BS/7I=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0c:31:5a:ae:01:97:e1:c5:72:b6:0d:ac:ff:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=1571ff6058038325b0702533ee53ac44d9a14394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:94:cb:f7:91:0d:a2:02:46:fd:d2:ec:05:
f1:d3:ab:43:dd:49:8d:5a:ef:ff:87:93:bf:99:db:
7f:97:12:ca:28:24:ca:82:5c:19:34:74:fe:42:86:
b6:ff:22:4c:35:17:93:0a:50:dd:71:94:85:cb:a4:
62:33:9e:9d:8d:c2:ca:1b:5f:6d:81:a2:bd:b7:f8:
c6:16:15:c8:f5:47:ad:29:9e:00:45:f4:a8:2b:c1:
41:9d:33:bf:8e:66:47:c5:4f:81:db:bf:06:8a:3f:
97:ca:7f:fd:a9:c5:25:b7:b2:9e:7b:c1:a6:21:22:
8a:61:67:36:e6:82:64:64:ae:f4:14:d6:a0:62:02:
3f:78:16:44:40:12:a5:ab:fb:db:52:78:63:de:8f:
d6:75:a8:71:83:c3:4c:be:01:59:42:e2:f3:62:6f:
51:9c:79:e6:01:1b:77:b7:92:a7:1b:9a:c9:84:ea:
a6:42:19:d8:9d:c6:c9:33:fb:1a:8e:d0:28:d9:85:
6d:18:0f:eb:c3:82:6c:8e:48:64:7a:6d:70:8e:7c:
81:37:b0:cd:fa:ee:6f:f8:d7:f8:5b:b9:1e:b3:eb:
23:a1:57:b1:d3:16:8e:74:61:7c:c4:07:a3:ef:86:
f3:c9:44:17:4e:bc:77:75:6d:a2:77:3b:2c:94:89:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:FF:60:58:03:83:25:B0:70:25:33:EE:53:AC:44:D9:A1:43:94
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:02:08:8e:2f:76:06:cd:d3:df:09:b3:e5:bb:ae:4a:06:ef:
68:cb:d3:2f:84:d9:2b:3b:a6:32:db:06:4b:e7:2e:b1:34:90:
a3:e6:13:d2:b1:3e:4e:ee:d1:ee:bc:74:66:1f:ca:48:12:2f:
2a:26:94:c5:dc:f3:4b:bb:36:1c:82:a5:bd:0a:65:aa:31:00:
d1:d5:2b:65:8e:cb:a5:ce:6d:69:2f:7d:49:10:66:85:5e:61:
7c:86:c6:b4:5a:ac:34:1a:d2:2c:6d:1f:e4:e8:de:60:f2:38:
17:67:2b:e6:90:f8:b9:cb:fa:71:9e:6c:08:24:37:bf:49:3b:
2b:30:32:93:f0:42:18:a8:8e:0a:8a:cd:9b:29:70:85:8b:64:
fe:55:44:b1:86:e7:a7:58:80:31:d5:0c:8f:bc:e4:2b:4e:a7:
f3:99:73:9f:92:c5:ba:0a:9e:63:0b:38:2c:14:66:c2:de:d7:
dd:e8:3f:ac:23:7f:98:a8:fa:b5:21:39:92:fd:01:97:11:3e:
b8:bf:f5:ef:93:2e:a2:31:55:41:8d:48:78:e7:0d:d4:34:49:
c8:47:c4:4f:79:d3:06:2c:71:d6:03:39:b3:0e:fc:13:3a:d7:
80:a4:23:b8:c9:35:e7:db:39:9d:2c:c2:e8:2e:c9:55:f5:93:
b3:60:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:26 2026 by rpki-client