Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: xUrnAuuH44QcyqkoNHSHsy0dC1NskuB8dM6Vw07jBtY=
Subject key identifier: 8D:A9:0A:CA:E5:22:E5:E4:A7:1E:F3:31:47:70:00:39:6F:2E:17:2A
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019CC7BDC9E36A592C6C1496B0256260FC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1855
Signing time: Sat 07 Mar 2026 10:00:29 +0000
Manifest this update: Sat 07 Mar 2026 10:00:29 +0000
Manifest next update: Sun 08 Mar 2026 10:00:29 +0000
Files and hashes: 1: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: fV48dp966mCVsWFp2+c+kemipPEKvhjnTJHcCZ9ui3A=)
2: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
3: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:bd:c9:e3:6a:59:2c:6c:14:96:b0:25:62:60:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Mar 7 10:00:29 2026 GMT
Not After : Mar 8 10:00:29 2026 GMT
Subject: CN=8da90acae522e5e4a71ef331477000396f2e172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:1d:dd:eb:f6:ee:3e:47:3d:45:56:e4:90:
31:8c:3d:b7:12:74:fe:25:5f:78:50:98:6d:b8:c4:
d8:f0:1e:3c:24:fe:b2:22:b7:70:7c:29:bb:e0:1d:
34:0d:b7:5f:0f:1c:a5:f3:b6:e4:38:7e:36:d6:78:
5e:be:ce:91:9e:ae:7e:e0:f0:0b:d9:93:12:34:3e:
ca:d7:e1:95:fd:15:21:02:d5:c8:be:d0:32:e8:0c:
e4:31:7b:d0:48:b2:6b:8a:08:6e:ac:16:59:d5:37:
ef:58:50:2d:c2:19:da:19:fb:c2:01:44:c8:ed:73:
89:f3:de:4f:27:34:72:6c:52:ac:85:6d:18:61:8f:
95:09:5e:e4:e9:22:78:f3:7d:60:a0:31:3d:10:23:
02:2e:bc:31:ec:94:7e:68:4f:20:1c:1e:ab:e4:ba:
c4:60:3d:ce:23:4d:3c:87:53:63:71:e3:59:e6:79:
72:e2:ea:c4:24:3d:66:e9:29:ad:e2:94:61:c0:ce:
14:31:c2:ce:8d:0a:a0:b7:40:93:c2:93:d1:f2:1e:
10:63:27:6c:08:c7:4b:3f:68:58:f1:7c:7c:53:55:
a6:7d:36:08:54:e8:b1:ff:0e:d9:b1:dd:61:ed:6a:
90:37:0c:bd:98:8e:fa:46:d8:4d:81:2e:61:0c:fe:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:0A:CA:E5:22:E5:E4:A7:1E:F3:31:47:70:00:39:6F:2E:17:2A
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c6:62:52:57:f4:0a:49:fc:4d:57:95:b4:5b:0c:64:62:ba:
8b:7f:a8:36:0c:f5:f3:48:dc:3d:61:b7:b8:ec:86:20:c5:aa:
3a:9f:cc:61:61:8f:0a:91:1c:cd:0c:dd:74:62:a6:ea:37:2d:
76:96:36:dd:eb:0b:25:8d:27:8f:c3:d5:f1:24:f3:86:eb:8e:
05:92:5c:d1:81:23:e5:79:c8:36:2f:01:97:0c:27:e6:5e:8f:
e6:67:17:04:eb:f9:18:b7:48:5d:2e:48:a1:eb:21:5a:61:ac:
89:4c:01:26:16:da:d9:f4:49:8e:33:c4:6e:ba:75:dc:36:fb:
7a:76:82:f4:2f:bf:4d:9b:f6:80:95:ab:d9:5b:12:d4:61:6f:
e6:b1:d4:65:55:30:2a:2d:3a:99:cc:6b:25:27:ae:4e:f0:d2:
ec:c0:53:96:30:a9:c8:21:7b:75:51:aa:f4:45:8f:6c:e1:96:
79:70:60:e0:8e:a0:f0:76:4b:d4:6c:81:8c:f4:2a:ac:8a:57:
b5:d3:c2:1f:83:47:33:32:0a:92:65:6e:70:21:22:b0:5c:04:
db:4a:86:83:aa:7b:3e:36:90:bd:93:83:ad:76:ce:28:d2:f4:
69:17:b6:25:fd:6a:57:47:b6:e0:af:15:64:03:9d:ee:d4:b9:
4a:81:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:02:37 2026 by rpki-client