Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: Ej+ZA2IQB1D0e+J+wSPTE/NixzPytb3ho4WOnTFR4YM=
Subject key identifier: 28:9F:28:A1:B0:C2:5F:B6:16:64:FB:A3:51:28:01:F6:37:68:F1:A5
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019D27DF55205C1335760C75E9141B844ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: 6fkc9vbG8GlJ-ztun97m-zUYfg4.roa (hash: zRY0m0UC6TjY6n8pP6oxYqs0avAat2u0qcFHm3tj6MI=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: qaskm9WwPoHnTtiUuow0KeaAZJFukvieRah8Gr//xTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:55:20:5c:13:35:76:0c:75:e9:14:1b:84:4e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=289f28a1b0c25fb61664fba3512801f63768f1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:b7:5b:23:39:b3:75:00:e4:d2:10:32:ae:
2d:a3:b5:7b:0e:95:c3:1a:b9:bf:ee:49:b6:ff:c8:
7a:22:2b:ec:12:d3:3f:e5:16:52:53:9c:23:da:45:
82:e6:4b:da:24:03:22:f0:6c:dc:a3:40:88:14:86:
2d:f6:78:af:e5:d9:9a:07:62:bb:f3:27:db:90:be:
2d:09:57:e1:4b:e2:f9:21:18:64:8d:ae:c8:4f:9e:
36:db:00:1e:9e:ff:08:2d:1b:0a:ac:9d:36:ea:47:
91:f4:7b:46:2c:cf:60:4b:51:37:cf:44:8f:0f:c4:
26:13:79:36:6e:9e:68:00:8f:2e:2f:dc:46:d1:ce:
b2:ad:d2:01:87:ba:b5:19:f8:20:f3:c0:c2:d7:e5:
f7:64:28:84:cb:35:7a:68:08:ed:32:35:f8:29:16:
73:ab:b3:a8:9b:cc:60:71:f1:6d:fa:1a:b5:4e:0c:
49:77:ca:47:d8:35:63:6c:c3:f8:f5:6a:73:1a:ce:
ee:f8:80:9e:b1:34:22:85:7c:1f:2c:63:8b:85:71:
f0:19:ae:c9:94:e2:bd:24:46:9b:3a:f7:03:a5:69:
db:7d:8e:1d:aa:aa:78:e4:86:dd:32:eb:af:78:e0:
d5:bb:eb:e8:6f:d1:4d:41:e9:ee:b9:d5:37:32:bf:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9F:28:A1:B0:C2:5F:B6:16:64:FB:A3:51:28:01:F6:37:68:F1:A5
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b1:55:bb:c5:e7:0e:61:5e:30:c6:2b:62:c2:41:d3:4c:a2:
9b:b7:28:9a:a1:f4:45:92:bb:03:12:7f:11:cf:f0:1e:9b:9a:
c5:17:ad:58:ba:1d:1f:21:28:99:f0:47:de:4f:d6:20:31:b7:
b0:5d:15:8d:c8:37:4b:4b:c4:7e:c7:d9:64:9e:3e:53:24:47:
0a:56:cd:ee:01:ab:cb:fd:b0:72:45:8d:50:a0:10:1a:8f:34:
0e:ee:d9:08:2a:8e:bf:62:27:79:68:5b:2f:85:f6:39:08:8e:
d3:69:8a:c9:6a:06:c9:9b:d2:6c:f7:09:04:f4:31:39:57:6b:
85:54:9c:8b:3e:d0:63:7e:14:a3:58:bd:f4:2a:37:ed:f5:94:
6e:e4:5d:28:8e:1c:a4:0f:be:da:35:cc:00:4f:09:df:4d:c5:
4c:ef:24:15:5a:b2:34:89:df:5f:14:a4:18:1e:5c:19:6e:01:
b7:99:37:ab:9b:f9:6d:60:ef:e2:21:7c:b4:af:a2:1c:ae:a8:
46:fe:81:71:6c:aa:c5:b4:e7:7a:89:3d:b7:3f:01:d8:ee:ee:
32:69:d6:84:8c:82:b5:40:a3:18:7d:8b:c1:08:1c:75:ca:f5:
9a:6e:c9:f9:64:69:6c:f7:cc:db:97:41:1c:c0:2b:a4:50:50:
ab:43:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:17 2026 by rpki-client