Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: R6KHWXsknE1VrZZANodGeHl4y8qjF/OM1iP2u2pxSBk=
Subject key identifier: AD:17:7B:49:FE:27:16:55:ED:FE:FF:17:A0:16:52:E7:EC:BA:0C:28
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019CE5FF5D7512ADB7EE1BCA191E9D024032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 07:00:43 +0000
Manifest this update: Fri 13 Mar 2026 07:00:43 +0000
Manifest next update: Sat 14 Mar 2026 07:00:43 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: q8SCnsPhlDUSWg6i6JKnLnFOC6bsVVimpGL/VMj/CEA=)
2: pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa (hash: sgsuQe2msoFiMDKKrbbPAUnLjdv7QmZ0qLU2RSe/3FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:5d:75:12:ad:b7:ee:1b:ca:19:1e:9d:02:40:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Mar 13 07:00:43 2026 GMT
Not After : Mar 14 07:00:43 2026 GMT
Subject: CN=ad177b49fe271655edfeff17a01652e7ecba0c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:da:e7:43:40:0f:6a:76:ad:2d:52:38:6e:
ee:e6:e0:bd:a8:65:48:8d:02:35:c7:b2:00:2a:7f:
a5:7d:8a:05:27:2d:4c:f2:e1:50:49:5d:5e:23:0f:
75:da:f5:c9:43:d2:00:7a:8f:ba:7c:60:d3:a4:6f:
5c:e9:56:d7:02:e5:c5:f1:35:c4:b0:cc:29:e5:3c:
8b:2a:ce:61:54:cc:38:50:10:9a:cf:6e:44:c9:2f:
b5:5f:9f:2e:8d:db:7f:21:fb:ea:04:bb:03:bb:65:
84:bc:30:ba:14:3d:a4:c6:ac:63:83:8e:c4:c7:34:
55:98:fe:a7:2b:6b:fa:a2:24:49:cd:08:c0:44:88:
43:64:f0:3b:2e:4f:2e:b8:0d:de:90:c2:8d:fa:4e:
4f:ca:45:da:8f:a1:c2:c0:5f:41:44:82:f3:24:2d:
12:53:f3:29:e6:d8:e2:3d:fd:3e:df:58:cd:7b:26:
8d:23:b7:e2:fa:fd:f9:1b:e0:26:d1:ff:ae:48:14:
0d:ab:a4:ae:f8:f9:6a:9f:d3:29:a1:4c:07:bc:f1:
57:5b:5e:e2:29:28:ae:e9:d9:57:1b:b2:5a:72:d6:
92:8c:06:b0:97:3d:51:8e:91:8c:fd:f4:a9:80:93:
83:b7:61:c7:b2:04:e6:62:e0:67:c4:57:72:09:bf:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:7B:49:FE:27:16:55:ED:FE:FF:17:A0:16:52:E7:EC:BA:0C:28
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bd:84:3f:e9:be:63:42:4a:b5:50:92:f2:b2:9e:57:59:d3:
9b:b9:0f:c3:32:57:07:1a:bb:47:d4:97:b8:02:e1:bf:aa:1e:
ae:5a:30:aa:a5:0c:7c:9e:a8:64:f6:59:7b:82:22:38:3a:28:
a1:7c:83:04:ef:ed:02:f8:9f:9f:00:68:cc:c5:9d:e4:52:72:
41:1e:14:32:5a:40:74:2f:de:04:db:e4:b6:1e:79:d4:16:a9:
d4:99:01:48:de:f5:84:f7:f4:73:19:19:97:4c:b4:2b:b4:60:
ec:37:b9:bd:00:7d:55:1b:2a:10:dc:1b:5c:e8:05:1b:25:2a:
f2:38:eb:b6:63:96:10:99:7a:d6:5d:e6:8c:a1:70:3f:c8:d6:
2b:64:fe:e7:63:5f:60:30:a2:3a:7f:b1:08:64:4c:25:f5:83:
5a:82:01:e6:4b:9c:81:e9:2a:38:53:31:bc:60:57:d3:c9:b2:
f9:f8:20:51:61:f0:77:cb:6b:87:ba:c7:82:c0:cc:7f:c6:88:
22:c1:f8:1c:aa:88:0e:7c:48:f2:d9:c0:7d:59:c3:51:c7:04:
2a:d3:7e:86:12:ca:05:b2:d3:c2:d7:da:ba:a1:68:28:67:96:
f6:1b:96:a3:b2:3a:18:72:73:31:f7:4f:2d:58:db:10:02:fe:
ea:56:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:13 2026 by rpki-client