Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: QEf2oobfKES696312j5LWMgQ7O4YRw8jdcQYQfamb/I=
Subject key identifier: D9:21:84:38:70:89:A6:31:C8:77:15:83:A4:55:30:DE:F3:AB:A3:57
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 019D3977F362D32C15230E3842F1225C3AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 030B
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: UXCu8DaInIrALAIPiNIixSSqcizqARhtV8LwDERpvtg=)
2: KbWTyRJitPC32LXPQqBi691clT8.roa (hash: mIu7f2xGRcIDk+hlkwsSKHTB5jDl1uwNz6s4KpvqXDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f3:62:d3:2c:15:23:0e:38:42:f1:22:5c:3a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=d92184387089a631c8771583a45530def3aba357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:cd:ae:e7:d6:dc:ab:86:5c:fd:22:33:e9:
22:9b:3d:8a:3a:cb:cd:e0:ec:5d:5e:92:72:c7:a8:
71:f6:80:e7:1d:05:c2:44:5c:cb:fe:e6:c5:1f:3f:
c5:49:5e:ac:8a:66:69:15:4b:4f:38:f8:d6:fc:ec:
af:40:d4:6b:04:ee:0b:e9:4e:6e:80:3c:68:b9:90:
ad:b7:ca:fb:ca:ff:0f:13:3a:5b:ab:2d:7a:a2:74:
88:8f:66:f5:3a:ed:b9:60:17:d2:29:6e:da:4e:87:
0e:50:ff:c4:73:8d:cc:50:c3:77:e1:91:b9:0c:39:
9e:d5:55:c5:1d:85:d9:a8:b8:03:2a:f8:02:5b:8c:
ac:8d:26:d6:04:e5:e1:cf:40:dc:85:70:ab:86:ce:
16:42:f9:d6:1d:1c:cd:74:13:3a:c4:7b:c3:e2:db:
30:a8:ef:ee:61:37:97:e1:4e:c5:ce:a7:8d:6f:a2:
6b:81:df:84:48:6e:86:a6:d9:0b:cc:b4:fd:82:45:
7a:ed:1a:76:87:f5:03:b7:96:52:96:18:a5:51:66:
eb:53:75:1e:67:4e:63:9f:4f:1b:d2:de:d7:a9:12:
35:c0:97:fa:4b:c8:68:33:34:33:b9:34:56:31:36:
3a:44:f0:20:e8:3a:26:00:d8:24:39:98:7a:70:42:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:84:38:70:89:A6:31:C8:77:15:83:A4:55:30:DE:F3:AB:A3:57
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f7:9c:e0:a7:68:e0:1d:7d:8a:e1:b8:bb:fa:aa:a8:92:d7:
14:28:6d:38:ef:a8:20:8b:42:e5:88:38:94:cf:93:96:01:d6:
20:58:17:4b:02:db:6d:74:77:b2:2a:21:07:0c:f5:2a:a6:ae:
b5:15:c5:99:94:f4:e9:79:de:da:1b:3d:f2:79:b0:6d:b7:e1:
4d:05:29:c3:e9:e3:54:40:61:2a:29:b5:23:ad:16:82:e0:89:
4f:eb:e6:7f:04:19:9d:9e:f2:68:67:89:79:b7:22:fc:91:4c:
4c:20:45:91:b4:4f:1a:e4:92:1c:da:72:a2:f6:e3:51:93:98:
72:0e:c6:e7:ec:d8:d9:be:2a:9b:ae:da:3f:8d:c6:0b:6b:a9:
f3:cf:af:bf:be:53:5a:49:bd:5b:e2:1b:53:12:c0:63:f0:1f:
80:9b:bb:92:6e:24:28:04:c4:77:16:ed:bf:83:b4:7e:81:35:
ed:93:81:8a:d3:49:26:49:2a:75:0c:15:67:d4:db:62:42:62:
6c:21:b9:c6:5e:5e:d8:8f:d8:a5:c5:b5:bb:c7:49:33:11:9c:
fe:03:cc:12:d4:14:d9:be:81:ce:9c:be:a5:82:bf:14:e3:be:
ef:ab:18:90:d1:97:93:cf:e5:d9:5a:f1:fa:bf:e2:d6:87:93:
83:7d:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:14 2026 by rpki-client