Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier: CP7k7gM/IzIkFqYLnZBhAR6DhnmhD6juS7P4NvrBPZk=
Subject key identifier: 1D:28:86:7F:C6:86:72:B9:AE:6E:9F:49:E7:ED:6C:9E:E9:FA:2F:A5
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019D284E57E8DC9E42D2677F1A06FF093DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number: 02B0
Signing time: Thu 26 Mar 2026 04:01:55 +0000
Manifest this update: Thu 26 Mar 2026 04:01:55 +0000
Manifest next update: Fri 27 Mar 2026 04:01:55 +0000
Files and hashes: 1: 1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa (hash: CfjF3SZAdjPqJOrdB0hBuqX8UJ9deq/HcLszHmoUDcg=)
2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: BBN50elWcAf2VOeA1roWDrWcyjJE2+SYYXNb2xZFfb0=)
3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:57:e8:dc:9e:42:d2:67:7f:1a:06:ff:09:3d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Mar 26 04:01:55 2026 GMT
Not After : Mar 27 04:01:55 2026 GMT
Subject: CN=1d28867fc68672b9ae6e9f49e7ed6c9ee9fa2fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:a4:cc:a0:2f:c3:6f:f9:09:9d:6c:a7:e3:
70:81:7c:73:2c:d3:6f:d4:c1:e4:e9:5b:22:b9:04:
52:c1:8d:37:fc:54:6c:bd:a2:e5:b1:57:12:ac:df:
42:eb:4e:a6:3c:7e:5b:d1:cc:c9:4e:ba:6f:fb:8c:
9b:cb:24:b2:fc:f3:a1:f6:38:e2:6b:8d:ef:ef:03:
1a:21:ae:5f:da:00:64:e6:c1:42:ca:34:9f:f1:a3:
cf:fc:78:c1:3c:9b:47:2f:b9:88:f4:a4:e2:dd:ba:
f3:83:80:95:dc:07:3b:31:90:84:2d:c3:6a:60:8f:
09:97:c5:5f:ae:9d:7e:32:12:2a:5b:45:0a:9d:d3:
d0:65:f9:fb:4f:09:26:76:8d:58:32:07:f9:50:76:
c3:65:e2:b2:10:08:72:41:eb:31:38:f2:26:bc:ca:
cd:21:b1:3d:ef:1e:4c:d6:cd:16:7d:2d:dc:22:d5:
3c:f6:d8:ef:36:f9:36:ba:ae:be:f4:cb:58:d8:c8:
7c:3b:42:b6:c6:f1:5c:8c:be:2c:bf:fa:0a:fc:d7:
a2:9d:c1:be:4c:e5:b5:fd:9c:86:4a:0c:e0:d0:8a:
07:95:fd:0e:6c:ff:21:ce:5a:dc:04:9b:54:d3:41:
08:b9:4c:4f:94:8e:f4:d4:b8:fb:50:74:ed:23:c2:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:86:7F:C6:86:72:B9:AE:6E:9F:49:E7:ED:6C:9E:E9:FA:2F:A5
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:f6:1a:00:4b:f4:f0:9f:6a:c4:b3:c7:95:0b:e8:78:fc:
49:31:0a:63:48:19:32:0e:8a:3c:d0:3e:6c:7f:db:bb:c5:19:
47:db:79:97:43:e6:ef:b4:45:b7:2e:e8:0c:e7:90:d3:88:fc:
01:9b:77:58:59:dd:98:23:c5:c8:51:00:9f:51:7c:7a:19:c3:
9b:17:74:c0:b1:64:5a:15:f5:92:3c:81:9d:07:f2:47:54:ca:
7e:41:8b:49:59:85:dc:74:b6:03:e9:4d:09:11:d3:90:d7:8f:
58:9e:1f:a5:58:ff:c9:8b:7e:eb:93:31:e4:36:0a:06:39:96:
c2:90:82:f3:c3:8c:19:e0:2c:0d:bd:f3:41:59:f1:db:48:1e:
41:c7:70:8a:ab:74:5a:bf:76:a8:29:67:94:28:38:ae:73:8a:
03:64:ab:c6:29:47:36:b7:7c:8c:d4:8b:f3:3b:00:6d:44:68:
1d:c8:6e:29:2d:81:d7:b3:39:59:f7:26:19:8c:b6:9f:2a:a2:
be:6c:39:04:c8:cb:d5:34:e8:8d:4a:6a:ec:37:02:e2:3f:ef:
3d:42:bd:74:2b:0f:17:95:70:d7:64:cc:8f:f8:ab:b2:e6:43:
da:f0:32:16:45:e6:e0:74:10:4a:a8:fd:ab:e4:5a:0d:62:b2:
cc:33:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:44 2026 by rpki-client