Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: /pZEHjCQH/pO+0ZgniIP92cNACbcKlyKsPUCqS2c5ZQ=
Subject key identifier: E5:B4:0F:33:8B:B1:86:CE:20:B5:E1:3C:C3:A8:F6:4C:09:75:F4:D2
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 019D389BFE87400339CDC3C15F11CE8DCE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: AnHdNFjqknysVTjc5tBt/J9vrwauLalTJyo32+FacbU=)
2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fe:87:40:03:39:cd:c3:c1:5f:11:ce:8d:ce:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=e5b40f338bb186ce20b5e13cc3a8f64c0975f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:a3:9e:55:cd:05:c1:16:ea:cb:e5:ad:78:
91:e9:c0:52:e5:99:53:af:1c:a5:5a:a5:ba:9f:d6:
f0:8c:27:c4:0d:84:59:8c:2a:b2:23:91:42:14:50:
a3:36:c9:34:ee:7d:65:9d:18:f5:f3:ad:58:b7:b7:
e0:ba:b0:da:03:1d:b4:29:2f:32:5a:2c:4b:1b:30:
9e:66:fb:52:99:c3:8d:44:45:5c:43:ac:1e:b7:a6:
6c:38:4a:20:05:f7:68:d9:0e:49:46:ab:88:11:01:
f9:b6:d3:b2:38:6c:da:ab:15:30:2f:45:d7:10:95:
36:61:f9:01:d6:b0:8d:5e:5a:95:0f:da:6d:a5:8a:
16:21:c0:1a:8e:e9:b8:0a:33:b7:0f:eb:aa:04:b6:
1b:7e:17:18:9a:5c:5d:88:78:a8:62:2a:86:5e:30:
94:b1:ae:e5:3e:3d:2b:4e:ac:f3:31:91:d2:ba:3c:
5e:4e:ab:ec:ee:ad:da:d1:bb:f2:17:85:96:a2:45:
93:c0:43:80:06:8d:da:c4:2c:df:29:8c:22:e7:19:
30:e6:57:c7:3e:dc:65:76:ed:c2:d0:ee:96:0e:c7:
a2:b2:63:75:ec:a3:54:23:f4:78:b0:ed:9c:3d:5e:
97:c7:e6:e1:55:05:05:28:e3:0b:2c:87:4e:da:b0:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:0F:33:8B:B1:86:CE:20:B5:E1:3C:C3:A8:F6:4C:09:75:F4:D2
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:62:d3:1d:cf:51:e4:9a:89:84:89:ec:af:c5:f8:3e:e2:41:
62:7b:6f:c7:bd:4f:75:33:f8:9f:2f:11:51:7b:68:2c:fa:50:
26:c2:58:61:75:59:61:1b:78:b5:9b:06:ad:03:9b:b1:67:63:
7e:b2:49:5a:99:9e:97:85:7b:e3:d7:57:6e:e0:08:49:c8:5e:
8d:62:c5:96:d8:55:b6:d0:08:2a:cd:e4:f9:f6:6a:b7:37:d2:
fb:b1:72:74:c8:b5:8b:b1:e2:5a:70:c5:2d:51:21:6d:8a:64:
8a:f3:a5:5f:28:d9:ce:0a:ca:9f:4d:82:94:3e:7d:7d:8d:2e:
f8:58:db:97:28:0e:9a:c4:61:56:44:c2:c6:3f:77:be:9d:99:
53:cc:b0:d2:36:e4:a3:ce:97:ec:fe:c2:b5:7d:bd:54:ac:41:
44:ce:29:16:2e:67:c8:dc:d6:2c:9e:43:f2:96:34:a4:92:6f:
b7:e2:22:fa:fa:77:ec:54:1f:1a:58:d3:cf:3d:87:cf:c3:90:
2e:58:59:a4:d2:d9:12:10:9a:f3:ec:df:73:3e:90:36:c9:21:
e9:d0:df:ee:ec:0f:15:eb:28:ba:57:ad:ab:16:7a:18:3a:74:
24:b3:65:1d:f9:65:f3:bc:4f:03:a3:72:24:22:cb:bf:eb:71:
6b:1f:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:51 2026 by rpki-client