Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: qlmmsp34haET+OSu2x4VRATE19QZ05eLciEnYyTqauQ=
Subject key identifier: 55:4F:C6:FF:3F:EF:46:57:5F:5F:1F:BA:CD:B4:32:E5:5F:19:E5:57
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 019D25F1E8561F3AA9A8C4E4FE0123EFB954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0A2E
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: 6bPbYfI+MIbdRGKItvQb/Y95bW+v9qPU0W31pY1MOoo=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e8:56:1f:3a:a9:a8:c4:e4:fe:01:23:ef:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=554fc6ff3fef46575f5f1fbacdb432e55f19e557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:80:c5:9f:56:22:ae:e2:f6:02:9f:dc:dd:
31:46:40:e3:50:b6:2f:98:06:3a:12:f6:d5:17:f3:
1f:2e:66:da:ab:3c:36:4a:40:c7:41:a5:0f:6d:b3:
64:0e:c4:c9:ce:3d:1c:df:73:83:38:1a:9d:9c:6d:
97:24:0f:f6:49:b0:72:3e:a0:0f:75:c0:96:3c:36:
40:be:ab:07:00:46:0d:5a:e8:7e:da:df:8f:e1:1a:
89:06:02:37:46:cb:47:38:60:f5:f9:fb:3d:7d:ad:
a6:35:ac:54:95:77:47:ed:6c:a5:d8:54:5d:55:6e:
cd:cb:a4:47:9a:6a:d5:3d:c1:47:3f:32:2b:27:39:
79:dc:28:a2:cf:66:96:ee:e1:72:bb:74:c6:a0:40:
00:6f:83:1a:88:62:db:30:3c:f0:7d:f3:3a:e4:8e:
2d:a3:7e:4b:06:ed:22:63:30:67:27:e5:07:49:7b:
0b:b7:c0:aa:36:9a:8e:43:0d:c6:26:61:04:59:32:
e5:b5:dc:de:66:fe:44:cf:59:14:a0:18:1f:36:da:
8d:35:ea:66:24:a2:30:97:68:c8:ad:81:21:40:99:
d9:9d:a9:4e:32:37:fe:20:4e:f9:9b:d0:13:7f:55:
05:54:36:9f:3a:5a:9f:d2:f4:1d:0f:4b:1c:32:41:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:C6:FF:3F:EF:46:57:5F:5F:1F:BA:CD:B4:32:E5:5F:19:E5:57
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:56:4e:bc:e2:29:b1:26:f3:8a:be:6a:9f:42:0a:7b:17:fa:
f3:3b:e0:ef:92:77:50:f3:82:e3:7c:62:d9:de:74:07:f8:55:
67:e5:7e:2f:2b:36:07:a6:7e:25:fa:99:a0:fb:8a:bf:cd:39:
9e:65:cf:12:ec:88:41:74:54:7e:c8:30:f5:26:07:49:58:d5:
d0:cc:a4:50:0b:5b:87:cc:9c:da:c8:43:20:cf:e4:1a:47:a7:
69:e1:1a:c1:5f:87:c5:33:0a:94:09:05:fe:77:31:fe:87:13:
23:67:8b:74:67:82:0f:17:2d:91:6f:23:85:9b:30:19:69:e1:
35:47:f9:4d:26:1c:f2:0f:e5:9f:1b:4d:cc:12:b2:3d:ff:2a:
e4:4b:a1:da:84:30:9f:ca:26:f0:93:88:5b:8c:8a:9d:f7:da:
be:e4:b0:ef:0d:e8:d1:86:d1:5e:74:10:75:80:72:b9:f6:e1:
74:0f:34:a3:c0:38:bd:c2:aa:e3:ae:c2:ab:ff:36:83:1b:3e:
10:50:77:f5:96:e3:ce:da:ae:10:c2:49:0d:59:73:f7:07:6b:
e1:2e:9d:c9:1e:3b:37:44:ff:d0:4c:53:57:4e:20:3c:66:f7:
65:26:cd:cf:ab:56:32:c1:52:a5:55:d3:c2:16:7a:4a:31:7e:
9a:cf:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:43 2026 by rpki-client