
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: rlo6k/OmPUlX6T5hlJS3dmEF+hKbQI+DwQqx4uur3rQ=
Subject key identifier: 81:74:6F:D1:EF:DC:33:B4:FF:66:2A:CE:C5:C9:B2:B2:EF:07:F6:D3
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019D2628847B5E57BB82F1E5715AD2BCB3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 15A0
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: IR0Wj5YHI8ayGwcPRBM1L13g1FmRfMARMUocVGLULEg=)
2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
3: NCGBgWXRVgbgMAgfdWE4jwZPG0I.roa (hash: JGFZNQOApb7/WqwWE/c/9V/F0GH77gyItWPb/xZX69Q=)
4: p_00TDJoC_df0xtW1aS0ds5xGjc.roa (hash: INFP5QiogulQL7SH7SMy9hPl8oqUwzl8wp+SCc9XujY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:84:7b:5e:57:bb:82:f1:e5:71:5a:d2:bc:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=81746fd1efdc33b4ff662acec5c9b2b2ef07f6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:dc:ed:30:09:72:80:1e:e1:87:43:d0:28:
36:3e:6b:de:f7:8e:44:bd:8c:96:b1:e6:f7:25:d3:
82:c2:0b:b8:9b:60:7b:8c:12:a6:81:c1:5b:d2:2a:
87:fa:28:68:cb:47:02:3e:f8:b5:99:c1:63:0b:30:
5e:0d:20:cd:04:d8:23:60:c6:69:77:60:a3:79:ad:
3d:46:b6:79:3c:a1:19:19:63:50:52:d8:32:5d:31:
15:31:0f:68:09:fe:bb:8f:bd:d3:82:9b:a0:8f:2f:
cd:0f:f6:61:b3:c9:f7:92:45:bd:ac:c7:57:4d:ae:
e1:54:a9:a5:76:9d:27:6e:f8:05:c6:f4:3b:a0:b9:
d2:6d:9e:df:c4:be:76:fa:70:c7:1d:90:6e:1e:45:
35:b9:23:61:5a:56:18:57:41:93:b5:9a:93:c8:5c:
57:96:59:c4:83:d5:f4:72:a4:88:58:fc:d7:d2:f7:
23:32:45:26:60:af:f2:4c:d4:4b:2f:02:94:44:78:
9d:a4:e5:10:20:05:48:c0:a7:39:ae:f0:2e:8a:3a:
a2:ee:74:f2:43:b1:df:ae:45:c9:0c:88:92:db:d1:
aa:35:3e:29:3d:27:fc:b9:73:2a:74:29:b1:a4:35:
c8:8c:66:db:2e:47:91:b7:41:f0:78:55:19:b4:66:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:6F:D1:EF:DC:33:B4:FF:66:2A:CE:C5:C9:B2:B2:EF:07:F6:D3
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:4f:9d:54:da:dc:8e:46:21:cd:57:d9:14:13:c1:f2:d0:
c5:6d:45:0f:36:8a:a6:54:82:90:a3:97:e1:2b:5c:f9:2e:fd:
cb:b4:1d:a5:9c:30:36:55:09:1b:71:eb:51:b3:96:e5:ba:31:
d9:ae:61:d7:b4:07:b4:59:5b:13:18:e2:03:b1:f2:30:7c:67:
c5:b0:e4:4e:87:be:2c:a0:0e:0d:13:bd:24:a9:ae:64:21:39:
4b:f5:e0:f3:fb:82:f1:22:80:b3:e3:b4:45:b3:7b:0a:80:15:
29:14:53:42:49:53:ff:ae:9a:69:32:58:e7:68:16:42:bd:b2:
ef:0d:80:53:2f:7a:38:ae:83:ec:f2:2e:18:79:50:2d:f9:a4:
8a:7e:a5:64:30:99:5b:bb:7f:62:d7:a5:d4:bc:12:c3:2e:0d:
1e:39:83:d5:4c:19:6e:da:26:6b:4a:08:b2:42:c4:c2:be:47:
3f:64:3a:3f:06:30:56:5e:0b:f7:2a:07:a4:4f:a7:12:d4:95:
4a:6b:f6:07:8b:cc:bb:98:ed:37:95:c7:98:aa:81:80:58:49:
62:8a:a1:3c:a0:22:4d:c8:1e:31:9a:a8:44:b9:5e:3f:1a:8a:
c2:77:98:f6:c3:62:3d:29:03:59:66:5d:6b:1b:6a:65:18:90:
f2:37:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:58 2026 by rpki-client