Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: xIXa0Sb+ZUaQhCKXEE8tc3UyH6hgcHNhY8ocR3KaCzg=
Subject key identifier: E2:05:48:A1:EA:E8:51:1B:C7:B2:78:4F:21:32:39:1A:DE:EE:37:E5
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019D3AC19F8D22A4DAECFC09F9EAC660FF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 18:01:00 +0000
Manifest this update: Sun 29 Mar 2026 18:01:00 +0000
Manifest next update: Mon 30 Mar 2026 18:01:00 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: Ru2lP4wtQQORknUno04N5mMEWru1Fprk7WWsMK7jqiM=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:9f:8d:22:a4:da:ec:fc:09:f9:ea:c6:60:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Mar 29 18:01:00 2026 GMT
Not After : Mar 30 18:01:00 2026 GMT
Subject: CN=e20548a1eae8511bc7b2784f2132391adeee37e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:8e:2a:95:5a:75:57:33:cb:6c:06:f5:b4:
16:0e:ec:f5:8e:54:61:46:e8:18:d2:b7:63:d1:6e:
85:07:f2:87:98:a8:5f:e4:7c:0d:32:74:23:8b:f6:
2e:97:83:f5:2c:4e:76:85:f1:f8:14:e5:94:5c:2f:
5e:ff:fa:dd:b2:6b:6a:5b:06:c4:63:ae:06:85:cf:
29:1c:f0:4f:07:7b:5c:50:1d:8a:b1:60:d7:b3:aa:
b2:47:fd:cf:13:f4:4f:18:6a:30:59:a5:eb:e1:20:
85:be:0f:e2:32:fd:c9:ea:1e:b1:de:5f:04:58:5a:
ff:40:23:3e:5c:a6:1e:72:eb:d5:fd:d1:ed:66:04:
11:07:1f:12:01:27:43:37:6a:04:76:62:f7:0d:82:
22:e0:2f:08:6d:99:31:f7:ec:3b:94:dd:0b:ec:67:
14:5a:9a:b0:73:8c:c0:54:fd:ef:bf:1a:66:8a:91:
ef:a1:cf:24:59:0d:57:e1:1f:9d:16:a0:67:ae:f7:
b7:5e:75:c6:66:0c:f1:e2:f8:ee:40:68:03:fa:78:
fd:b3:9c:e5:f4:18:a4:33:5e:00:d6:b4:1e:a8:75:
23:44:9b:53:92:ea:4a:c3:b9:bb:0b:dc:c9:26:78:
8b:81:4d:c2:4c:b4:98:82:88:41:ff:59:7b:d7:ce:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:05:48:A1:EA:E8:51:1B:C7:B2:78:4F:21:32:39:1A:DE:EE:37:E5
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2f:3b:9b:c5:5b:4b:cc:56:e5:69:69:29:f7:ff:28:5f:45:
76:e3:c8:4f:ba:0b:1d:a2:ba:88:07:cd:84:b6:3e:aa:82:ba:
d5:bb:4b:73:51:82:96:22:e1:78:49:8a:b4:c9:d8:b7:76:01:
aa:dc:bb:69:a5:a8:e1:48:95:b4:6e:d4:b5:89:7d:fe:52:8c:
14:a1:d0:85:82:9d:00:0f:c8:c8:da:04:73:af:a0:f6:4f:10:
b1:4d:b1:a9:0d:40:78:35:ae:b1:d0:57:79:7d:67:bd:30:40:
64:0b:92:16:52:5b:42:ea:16:3d:01:68:18:75:ab:94:38:c3:
57:54:f6:32:49:27:6c:19:98:7c:39:83:4e:da:e5:da:d1:96:
8f:21:e1:2b:71:7d:e3:fd:b4:5e:fb:7f:41:33:f1:04:55:66:
2c:7f:2a:30:ec:1d:b1:c5:10:96:1b:29:4c:18:6a:f2:13:2a:
ee:0b:54:c7:d6:fd:b0:15:9d:1b:cf:a5:a8:27:90:b5:d2:2d:
c7:fb:42:ea:4c:7b:6f:fe:45:c6:2c:20:8a:9f:77:5e:b0:1b:
33:93:03:1e:08:c2:e8:2c:ef:14:62:5a:d1:ab:62:80:d0:1e:
a3:a7:6b:46:e1:59:b8:5b:94:73:b9:c4:97:78:b0:38:2e:11:
cc:7f:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:52 2026 by rpki-client