Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: A/k5+qyBKUEEZgpCuqfnSQQ/e8XFz0IIVyoAUefRtrc=
Subject key identifier: 53:38:39:38:C3:4D:B2:94:2B:07:DA:0C:73:41:A3:F5:BB:3D:9B:AB
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 019D2A04A022A8A2EC9648EBDA017CB7943A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:00:39 +0000
Manifest this update: Thu 26 Mar 2026 12:00:39 +0000
Manifest next update: Fri 27 Mar 2026 12:00:39 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: 5u29qLF1d9e6ZuVZaZOfCapQObdshn2L/dPjbJQOqgg=)
2: Ini83UPVBFujNi82mFdTbIeLJ_M.roa (hash: hQSzKgBjrspgpke+S+SyF68tGyGh2lr/WJ9Pf7DCYOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a0:22:a8:a2:ec:96:48:eb:da:01:7c:b7:94:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Mar 26 12:00:39 2026 GMT
Not After : Mar 27 12:00:39 2026 GMT
Subject: CN=53383938c34db2942b07da0c7341a3f5bb3d9bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:51:e8:11:79:9a:1d:e9:1e:a1:1a:bb:7b:
da:d5:1a:79:7b:7d:d7:2d:a8:d7:cc:34:a6:3f:bb:
f5:d3:b8:e6:85:c9:37:12:02:52:f7:56:4c:de:fa:
fb:dc:7f:70:3c:6a:3c:79:37:ee:f9:5d:15:fb:91:
0a:bf:ea:d6:10:9f:e4:e1:22:93:00:e0:30:81:ea:
6f:bd:5a:bd:64:cf:c9:2a:68:ca:38:b8:f7:22:8c:
93:c6:13:30:36:f8:6f:9c:d1:f7:ac:5f:45:4d:36:
f3:1f:df:b2:85:31:70:82:bb:b1:f4:53:0b:09:4c:
9a:41:5d:51:c7:c3:3f:c7:a6:de:0c:40:0f:e3:9a:
cd:c3:da:39:ed:88:8b:f1:2b:dd:3d:48:8d:03:72:
31:e2:15:67:0f:df:16:46:74:d3:af:fb:74:e1:96:
86:26:1b:3b:7e:bd:4d:79:c4:92:3f:3f:da:6b:ca:
df:c6:c1:72:96:69:76:d8:49:00:0b:97:03:83:94:
5a:55:97:e9:e9:1a:c6:3d:3b:77:93:81:b5:60:d0:
b8:00:eb:08:e7:de:68:9c:74:ad:ca:06:e3:26:8a:
f0:1e:9d:bc:05:cf:c1:b9:dd:ca:75:4e:fe:23:10:
f9:9c:a9:40:3f:27:f9:05:4a:0e:05:a2:c5:08:e1:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:39:38:C3:4D:B2:94:2B:07:DA:0C:73:41:A3:F5:BB:3D:9B:AB
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:85:76:26:ce:15:1c:57:43:a4:76:0f:26:75:ce:fb:d9:
dd:ff:27:df:03:35:9f:44:98:4f:d4:30:c8:cd:f2:0b:1f:38:
62:6a:14:34:1d:75:c9:86:6a:08:3e:7f:2a:15:47:0c:d5:25:
72:d9:d3:dc:75:0a:2b:ed:92:5e:70:a2:3c:01:f9:34:10:4a:
4f:15:9f:52:a6:51:50:d8:f3:22:bf:17:a9:88:27:f7:df:3c:
ec:3f:5c:01:ba:dc:3c:72:a2:51:0f:c4:47:e4:de:51:bc:d9:
32:46:09:09:2a:1e:4b:05:38:95:20:de:ed:c1:0f:08:56:a0:
29:c7:57:c0:4f:82:34:98:08:7a:0b:08:37:78:f1:c0:e3:90:
59:c1:2b:0c:18:3d:7b:fb:41:6d:f4:29:23:38:a3:d8:78:04:
6a:17:fd:dc:b0:a1:3d:8c:dc:6f:e9:e9:1c:2b:a7:47:ba:12:
64:1a:a2:5d:c5:bb:73:5c:e5:e6:c1:06:5b:44:90:16:94:5d:
e0:d6:e2:b1:82:eb:2c:06:9b:e5:7a:59:38:48:20:ec:f0:be:
92:7f:20:35:84:41:af:27:7b:e2:91:aa:d2:86:c2:95:ac:6a:
c1:4b:8f:73:85:88:45:fa:a6:51:9a:d3:43:1f:93:bc:cb:9a:
25:11:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:35 2026 by rpki-client