Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: zhO0U+v7oSaqxk7HP1u/bqlzGcQNQramFZqDpEGA6k4=
Subject key identifier: 8A:5D:2A:03:09:0D:18:CB:9E:BC:54:D9:FF:40:30:BF:33:60:25:8D
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019D216FA089AA31E928882E0098599B9A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 1360
Signing time: Tue 24 Mar 2026 20:00:56 +0000
Manifest this update: Tue 24 Mar 2026 20:00:56 +0000
Manifest next update: Wed 25 Mar 2026 20:00:56 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: G2a8RpkPT5L2Kkr6/oPSErQcNexZJUs2p9pF5PDC4+U=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:6f:a0:89:aa:31:e9:28:88:2e:00:98:59:9b:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Mar 24 20:00:56 2026 GMT
Not After : Mar 25 20:00:56 2026 GMT
Subject: CN=8a5d2a03090d18cb9ebc54d9ff4030bf3360258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:ec:5c:99:35:34:4b:13:fc:13:19:b0:78:
32:06:16:80:de:11:0e:e8:e7:a2:cd:00:5d:19:7d:
e9:b5:37:35:c0:99:5e:a9:0d:12:2b:c4:91:c9:20:
d1:7c:f8:2a:1b:a2:ff:4e:90:e9:7d:95:8d:46:d9:
e8:61:f4:29:3d:eb:67:e7:63:11:ce:7f:88:16:94:
d9:5f:13:f9:7e:2f:83:bf:99:41:c8:78:a8:69:5f:
85:c1:0b:de:b4:93:71:9f:08:24:57:e8:90:1f:d2:
b0:1d:38:2d:8c:83:fa:de:46:4c:93:ce:98:53:3b:
76:db:d3:9e:d4:6b:26:05:84:dc:2e:bc:fc:f9:51:
52:51:ef:61:7d:64:23:dc:d1:a4:fe:25:d5:9f:bb:
30:46:19:d2:e6:7a:8c:93:75:18:d6:51:00:f3:06:
ba:95:27:44:e9:37:0d:0c:f2:20:d3:09:1f:91:09:
c9:8f:ca:2f:94:bd:34:d6:23:d2:46:e3:2d:77:49:
9d:2c:a1:3b:73:38:87:14:e9:71:b6:1d:9c:c0:64:
75:35:f6:dc:df:ca:53:ff:ea:55:3b:86:c5:2e:e4:
df:ad:5a:68:76:82:af:55:f2:3a:a0:e5:a0:cc:cd:
65:9e:0b:e4:bb:5f:22:47:1f:3e:fe:be:5c:c2:a2:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:2A:03:09:0D:18:CB:9E:BC:54:D9:FF:40:30:BF:33:60:25:8D
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fd:74:7a:96:61:89:5a:5b:1d:b9:d0:06:fc:bf:8c:56:cf:
05:01:93:48:ba:0b:ad:6a:40:32:d7:a0:a9:32:a5:22:83:04:
a1:19:2f:c3:96:a6:30:0c:ea:d7:7a:9c:0a:a1:cb:7e:b9:9b:
6c:2a:ae:30:5d:9a:09:9b:ef:6e:ca:79:48:91:c7:a8:bb:c8:
da:cd:54:c1:c2:e4:4d:84:05:3f:5a:89:3c:93:f0:c5:62:3a:
22:2d:c9:c0:d7:bb:a2:10:a7:6c:f1:11:fc:7f:cb:d3:43:47:
b1:ff:41:d8:53:5e:77:07:8c:91:66:97:64:0a:2a:d1:96:3d:
3a:aa:9c:95:66:27:18:f6:ce:9c:13:18:56:0c:8f:23:13:8b:
d5:3f:6a:6f:30:44:c6:29:c8:14:5c:de:56:d3:97:2d:43:c8:
a5:34:18:a9:bb:31:c7:e3:e4:d2:43:d7:fd:0b:59:49:67:7b:
97:41:c3:6b:32:cf:66:12:73:ae:36:15:b0:17:3e:5c:d1:9b:
4b:c4:37:ac:0c:1e:1d:e5:f4:df:fb:8a:46:64:3b:c6:e6:a7:
f7:46:e7:c7:54:99:cf:17:26:7c:ff:ec:83:74:a7:45:3e:ef:
e8:d1:aa:ad:1d:a5:ea:a8:45:7d:1c:08:54:4f:48:8e:ca:49:
eb:db:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:31:51 2026 by rpki-client