Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: MqnttMw8h5L8wBSwYAlPVDFBV08CqyfSf+PMgBX/wPc=
Subject key identifier: 0C:84:89:B6:B4:CA:73:CC:EB:0C:4D:D3:A9:6D:7A:5E:AE:31:52:CD
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 019D28BB4DA6FB913300988277181CEFE216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: OSmLrmwSd+O3+/RtwB+r8P4JB5WaEIEhvW4o6rE8mM8=)
2: Fa2Vtt7OBxYgHIfhflgQOmFFexE.roa (hash: nsncXi1fM+9rcTyQmSh9C2tHMk0W4t5U2Q/c/sbGWGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4d:a6:fb:91:33:00:98:82:77:18:1c:ef:e2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=0c8489b6b4ca73cceb0c4dd3a96d7a5eae3152cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:f0:a6:44:54:e1:cc:da:03:1d:d0:10:73:
bf:c5:33:96:85:e8:4d:2b:ff:78:43:e7:03:e3:70:
b4:d3:f0:bc:7b:15:1b:5b:55:09:1f:c1:a8:8b:c8:
4a:5e:fc:c3:da:3d:1c:95:82:dc:8e:9c:e5:ba:67:
8f:a0:cb:71:8b:39:a1:63:5d:3a:22:f6:b2:e6:af:
56:d4:af:0b:7d:3a:91:38:d7:22:2d:74:f9:5f:e4:
af:98:11:ce:ed:a3:7d:59:42:51:a5:af:d6:ab:a4:
ed:c0:51:bf:a3:f0:a3:3d:8f:f3:a6:1d:18:47:4b:
9c:20:94:21:41:90:5a:3a:c3:5b:01:a4:0f:ed:bc:
f4:6a:a9:71:a4:40:c9:08:d4:7b:b5:39:85:d0:75:
37:a5:b1:49:76:e0:a0:e7:25:ff:1a:50:ac:99:15:
ed:9d:91:5b:5e:04:fb:35:6a:de:71:78:90:5a:4c:
39:22:8c:ef:3d:fa:06:9b:27:00:19:e3:d4:87:a3:
30:85:c7:3c:54:28:a8:a4:5a:cb:7c:66:14:39:16:
b6:66:42:48:8c:e6:59:f3:6e:41:49:83:eb:94:be:
30:b2:c2:87:90:9e:6e:93:1f:5b:d7:bc:f7:ff:51:
d1:64:a8:8b:55:4c:fa:05:08:6b:74:f1:a6:ae:56:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:89:B6:B4:CA:73:CC:EB:0C:4D:D3:A9:6D:7A:5E:AE:31:52:CD
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:11:5a:8d:03:8b:f3:b1:6d:ee:bc:36:1c:60:e5:0f:cd:31:
d7:36:29:40:95:4f:9f:7e:b5:52:92:35:2e:f1:44:3e:35:69:
14:0f:17:9b:a5:08:da:aa:12:9d:64:f5:3d:82:94:24:41:22:
08:74:cd:b8:41:fb:36:10:d9:3c:c0:80:38:7b:47:70:00:2e:
6e:b0:43:9b:f9:3f:d6:85:80:21:54:f7:51:f2:99:ea:7b:86:
5b:f5:e4:fe:16:19:5b:d2:6e:7c:e5:c7:92:57:ab:b8:0d:ad:
bd:36:ce:ec:5b:ec:8f:9d:e9:b7:2a:bb:67:f1:c4:4a:93:31:
d4:d6:ff:d2:9e:72:8e:13:de:c3:b6:7c:01:88:ce:de:b9:8d:
dd:71:55:c3:6b:d7:47:5a:b3:28:ee:b4:df:c0:42:bc:70:39:
2e:7d:39:42:41:55:9d:e5:0d:a0:af:a1:54:57:75:a3:26:b7:
36:b7:2d:99:85:f0:a0:53:b7:57:14:c9:bd:09:1a:97:fe:f1:
f0:ad:74:51:7e:bb:ac:ec:bf:8f:81:d2:a7:a1:d2:58:7e:05:
a0:68:b6:bb:72:d1:e5:c1:3f:5c:cd:a4:9a:d0:77:51:ef:f3:
79:34:10:0b:48:83:05:59:43:d0:65:64:42:4d:1a:a6:36:40:
d6:d2:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:45 2026 by rpki-client