Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: jfFIiA0ooDaxerl/FvAMs3vKQXrMMfCP8apCNRutvNw=
Subject key identifier: 6B:98:FC:8A:89:C5:61:63:7D:2F:66:2B:7E:D2:DF:B0:EF:6E:D4:A2
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019CC9AC77DCADD93C066F32ED385130984B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1856
Signing time: Sat 07 Mar 2026 19:00:49 +0000
Manifest this update: Sat 07 Mar 2026 19:00:49 +0000
Manifest next update: Sun 08 Mar 2026 19:00:49 +0000
Files and hashes: 1: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: jpMMaqQW90v0feoyoJASFMIxPiZ3wr810lpknzxS1MU=)
2: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
3: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:77:dc:ad:d9:3c:06:6f:32:ed:38:51:30:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Mar 7 19:00:49 2026 GMT
Not After : Mar 8 19:00:49 2026 GMT
Subject: CN=6b98fc8a89c561637d2f662b7ed2dfb0ef6ed4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:77:bb:46:be:1f:41:78:51:61:c2:b3:3d:
79:d9:44:67:f9:4a:18:3c:24:5b:78:28:83:20:26:
88:bc:fe:e1:41:a3:6a:a3:81:16:d1:83:d9:0b:31:
ce:20:91:b9:fc:e9:c3:82:81:f5:83:e0:4d:1a:0e:
40:0d:a8:55:79:7c:84:12:37:f9:08:0e:7a:ba:82:
e3:0a:0f:41:e9:f2:0d:18:29:ea:be:01:c5:1a:87:
12:b0:1a:bc:79:37:e9:b5:5b:11:26:1b:98:82:dd:
9c:c3:53:05:77:76:04:ce:96:3d:30:ee:93:28:e2:
8f:cf:d6:76:13:b6:f2:bf:44:e0:c5:eb:69:3a:9f:
1f:ec:77:94:e3:7d:bd:73:2c:c3:8f:6b:5b:f5:54:
be:60:68:d4:65:ab:80:5d:47:fd:1a:bb:c0:1a:73:
bb:f0:fe:2e:24:57:1a:5b:5c:c1:93:a9:f6:a1:cf:
89:3f:20:58:7b:e7:37:e5:6a:d2:4a:90:58:93:a1:
14:08:08:d7:94:ca:03:f3:70:6a:ba:03:63:4a:59:
14:cc:9c:a4:10:78:b8:9d:49:b1:6e:37:88:4f:c3:
07:01:6a:b8:31:d7:4c:57:8a:27:88:92:f1:f4:57:
db:02:f7:34:97:19:42:82:12:42:8a:8b:8a:99:dd:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:FC:8A:89:C5:61:63:7D:2F:66:2B:7E:D2:DF:B0:EF:6E:D4:A2
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:28:10:da:50:1e:ad:97:94:07:cc:2b:86:2d:f0:16:d6:01:
54:73:7d:64:a4:14:42:78:ce:4c:31:5d:47:61:9d:44:72:f7:
f9:21:f7:cb:dc:b1:53:da:1d:27:5a:00:c3:8d:ec:3c:1d:54:
04:06:6d:a6:22:5c:ac:c9:07:35:3f:98:3e:1f:53:95:7e:f7:
88:97:27:bd:ee:0b:49:ab:f6:ed:0a:b5:4d:bd:cb:62:09:82:
4d:c6:dd:8a:0e:a3:e0:07:3d:29:4f:dd:ba:7e:0f:fb:41:b1:
5e:f6:09:67:d9:85:8e:04:5c:a3:cb:5c:b1:30:48:d2:f1:f8:
d0:3c:2c:d5:84:65:ac:4f:53:ab:ba:6b:23:5a:54:25:dc:eb:
25:2e:34:2b:75:e7:42:ef:a3:52:6d:f7:64:f4:1b:80:4f:c5:
2d:f9:b1:77:ca:6d:49:f5:5c:6d:45:5e:33:46:31:16:00:7e:
71:9a:bd:dd:27:b5:5e:18:f6:11:e1:a3:cc:13:1d:ec:62:62:
6e:5b:2d:e8:9a:61:88:85:bc:ae:b4:cd:52:52:d2:b1:6d:83:
9e:5e:82:63:06:f2:95:8d:50:2d:bf:ae:3e:13:cf:e9:9a:03:
82:4e:99:b6:9f:fe:df:ec:18:b8:b1:2a:97:d6:56:6e:37:ff:
a1:4d:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:35:33 2026 by rpki-client