Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: EPpgMrFE5u4iwhsMULmT7UwxLxpVnvQSkHuW1EMF2qI=
Subject key identifier: 97:AA:25:D3:03:E3:8B:FD:66:1A:CC:0C:7E:55:3A:21:F4:B2:3D:D4
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019D2929407150B34BA3A259E8FFC9C187F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: gNVA+xnvjqjtKYzVHD+RG/9M7+4oXaNf/aIWC9MTGT0=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:40:71:50:b3:4b:a3:a2:59:e8:ff:c9:c1:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=97aa25d303e38bfd661acc0c7e553a21f4b23dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:1f:67:98:18:f2:74:fa:3d:1c:5d:e9:34:
88:83:cb:5a:f2:d5:ff:6e:7f:4b:5a:05:65:ef:54:
6f:f2:eb:cc:c5:a5:ea:92:d3:5b:4a:c6:c5:1d:13:
53:ce:84:30:a8:71:46:ee:59:0e:e1:4a:48:80:1d:
47:b5:b6:8a:eb:12:e9:6e:46:7d:b7:4c:d4:1c:38:
3b:f8:19:11:17:c8:6a:68:b8:ac:75:f9:32:82:57:
35:5b:99:8b:e5:2f:7d:cd:d4:54:0c:fb:c0:2b:eb:
76:57:03:cb:11:a1:57:ed:d4:1c:d9:70:bb:80:a0:
ef:e0:45:60:98:18:5e:44:fb:52:ce:50:bb:69:8c:
74:63:be:8b:6c:9a:7f:c6:a4:f4:89:9c:52:5a:46:
ff:7e:bc:60:ca:89:44:91:9e:9f:82:a9:81:99:05:
ac:09:1e:11:31:26:a2:1b:ba:1e:1d:55:1d:37:90:
b6:d4:1f:94:71:4e:17:a0:d5:ba:be:a9:b4:bb:70:
8a:7c:1e:fd:1c:35:35:ab:6f:0f:2f:db:ee:ed:4d:
6c:19:6c:90:67:30:8a:b0:9d:f8:ef:35:b3:12:e4:
8f:52:a1:df:e6:15:3a:46:6e:9a:13:78:60:55:fd:
3d:f7:9f:17:60:12:6f:69:ee:7f:28:22:04:2d:49:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:25:D3:03:E3:8B:FD:66:1A:CC:0C:7E:55:3A:21:F4:B2:3D:D4
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:b2:73:3b:49:37:41:e2:70:a8:01:6d:c6:5a:c3:92:28:
d6:31:56:b4:01:42:e3:21:c1:8a:fc:93:22:ae:0e:70:65:14:
58:e5:ed:a9:62:c7:20:f8:f4:ab:40:cc:40:9b:18:0a:2c:40:
ad:a1:14:46:21:51:6a:e1:91:34:86:ad:0b:1e:e1:d4:c7:f1:
15:ae:46:ac:df:1d:1e:e0:6a:c0:77:29:14:5d:1f:88:20:8a:
48:5b:20:da:b4:93:10:12:9e:07:1b:7c:4a:54:ff:e1:c8:16:
d0:41:14:cc:cb:c2:bc:7d:32:e1:b5:d8:c9:b0:79:d6:9f:71:
0f:45:a1:68:f4:5f:cc:f0:b3:5a:d9:2d:39:a2:f6:6e:a5:35:
2a:d7:bc:fb:37:a6:e9:c5:89:79:74:a0:5f:5e:d5:d8:51:67:
b0:35:7c:ab:94:f5:0b:f1:e3:e3:51:87:b2:5e:18:ce:48:94:
96:cb:14:c1:d3:fd:9f:00:ae:63:4f:86:e0:4d:0c:de:5e:13:
6a:eb:47:1e:3d:1a:97:7f:9a:5d:95:63:57:93:30:84:69:6e:
2b:00:3d:ad:69:e1:4d:2d:af:57:7a:6c:44:98:4d:dd:07:5d:
17:78:fb:24:d7:00:d6:27:79:a1:11:3b:da:92:48:b2:aa:1c:
1b:5c:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:01 2026 by rpki-client