Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: ykoOFTY+I/L0FJI8GgUycdplIT+EpZx9rK7YavjVgSk=
Subject key identifier: 24:41:D1:C5:1C:27:79:03:26:71:CF:48:32:A5:86:3C:B6:B4:0A:B5
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019D2583A6A188292BA4E67AAB70C659DEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:17 +0000
Manifest this update: Wed 25 Mar 2026 15:01:17 +0000
Manifest next update: Thu 26 Mar 2026 15:01:17 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: /+y9m1BvD4gkkcfUu8nIc/maIjHcz4IkStqhy9Z6PgM=)
2: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (hash: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a6:a1:88:29:2b:a4:e6:7a:ab:70:c6:59:de:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Mar 25 15:01:17 2026 GMT
Not After : Mar 26 15:01:17 2026 GMT
Subject: CN=2441d1c51c2779032671cf4832a5863cb6b40ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:ec:ce:09:01:3b:62:16:2d:44:1f:7d:aa:
8c:aa:84:5f:81:c7:e2:4d:0f:75:e7:42:69:42:08:
3f:6c:61:36:17:c0:26:4b:71:bd:3f:07:9d:6d:3c:
f5:e3:3a:d3:e3:f8:11:38:f5:86:af:2f:c9:9f:e9:
3c:fe:3a:4f:08:79:bf:6c:6e:db:fb:b6:b4:0b:41:
32:89:4a:c3:47:6b:8b:11:9e:78:b6:93:29:52:26:
13:09:cc:86:14:f7:9a:ad:42:e8:60:0f:1f:04:81:
dc:ee:76:fb:c8:5c:c3:22:ce:32:b8:29:70:7b:39:
12:51:2e:87:ef:cf:67:9c:dc:e8:89:b6:0d:13:38:
e1:3b:08:ca:02:d8:c6:e4:3c:a8:10:32:b8:34:ce:
2c:b3:60:5c:22:3b:14:45:46:a6:55:eb:04:3d:be:
66:6b:84:50:28:49:f3:d6:f1:01:5d:13:20:70:9b:
8a:05:a2:f2:53:ce:5c:2d:c8:80:f0:f1:0f:d0:92:
4b:dd:a4:fd:da:c2:b3:db:77:b1:d9:34:b9:10:53:
e4:2a:3a:7e:fe:01:54:d0:43:50:71:3e:17:92:e5:
1a:54:eb:fb:bf:27:0e:94:54:1f:f5:16:cc:a9:5a:
27:62:b7:fa:2b:ed:22:76:74:2c:0b:48:2f:8a:17:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:D1:C5:1C:27:79:03:26:71:CF:48:32:A5:86:3C:B6:B4:0A:B5
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2e:de:c2:68:d4:9d:49:ab:a6:95:d1:13:be:ef:cf:b3:1f:
c0:6a:06:50:61:5d:f5:d2:55:c6:cb:7d:02:65:ae:34:b0:74:
8a:5c:77:a5:20:e6:c6:e0:1c:dd:5d:81:30:df:88:d7:85:75:
67:1f:ae:d7:ce:61:35:62:34:75:3a:8b:5a:95:dd:44:fc:14:
52:0f:0f:39:d9:23:82:5d:1f:a0:9f:76:31:33:bf:27:7c:91:
d4:08:c8:94:af:ce:e0:d1:61:38:46:6f:5d:e5:59:d0:ff:aa:
c3:7c:4e:99:b3:9b:81:d4:e2:5c:85:5f:eb:07:43:16:e4:e4:
21:e3:46:77:61:c0:44:3c:c5:09:8d:8a:7e:84:37:5e:24:e5:
73:92:21:92:53:fb:66:2b:cf:ee:0d:d1:76:f2:c6:e2:f9:95:
6d:0b:f2:83:01:bc:5f:cb:c8:9f:14:dc:a5:db:42:b4:7a:b3:
b4:71:4a:f7:bc:d8:7d:00:00:6a:b2:ad:6d:44:41:6d:e0:28:
13:78:e3:ef:44:0b:05:f6:d5:c5:32:50:5f:25:9f:0b:97:ff:
8d:db:18:cb:9d:be:f5:1b:eb:6d:60:97:6a:cf:c2:85:ab:9a:
f5:c0:e8:1e:48:68:c8:af:92:ed:a3:50:91:e6:92:75:0f:11:
29:31:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:18 2026 by rpki-client