Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: CcOJ92PR+4EHufRD/3UrXCL6IZwsbdu+R2qV6VmWqgw=
Subject key identifier: D2:96:4D:D3:E3:BA:F5:00:7C:06:63:22:F9:F4:14:65:B6:E9:F7:03
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019D37520F8F4B066C64A083AF2F5D3F228A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 02:00:17 +0000
Manifest this update: Sun 29 Mar 2026 02:00:17 +0000
Manifest next update: Mon 30 Mar 2026 02:00:17 +0000
Files and hashes: 1: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: 8fvNYTmQIZqQljTo8vfmVa9llJYJqMURxYJ9jCG3l4Y=)
2: ui7FUzschC45AaandKwrKd4ZLOE.roa (hash: p64p3A+w4Rzd9qzg1tn0C4YDnUbbDXUrufa5/DaN5QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:0f:8f:4b:06:6c:64:a0:83:af:2f:5d:3f:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Mar 29 02:00:17 2026 GMT
Not After : Mar 30 02:00:17 2026 GMT
Subject: CN=d2964dd3e3baf5007c066322f9f41465b6e9f703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:6e:85:87:28:3a:62:c4:94:14:a9:69:88:
2a:99:94:d0:8f:90:87:d4:7b:6b:e4:b9:ff:5b:d2:
44:d1:bb:8c:04:06:b8:a3:81:a9:7f:e6:6e:6f:64:
be:6f:ab:9a:f8:27:71:f1:51:e0:8d:da:3f:4a:2c:
3c:cf:31:ff:b4:61:37:14:ac:4a:12:3c:c0:c9:4f:
39:38:6c:b7:b1:14:bc:42:f2:cd:cb:54:41:76:90:
01:bb:6d:bf:17:bc:81:7a:6c:92:17:59:65:27:c3:
35:ce:e5:c8:8d:41:ce:b2:70:fd:e2:79:98:6a:2c:
7f:c4:74:75:87:e2:7f:af:83:89:35:87:61:03:fa:
08:77:f9:d4:a7:fb:6c:e4:80:a0:65:e4:8a:56:53:
37:91:22:d4:0a:b5:0b:3f:53:c0:c5:c0:6f:14:ee:
e9:92:3b:78:f0:34:07:da:49:51:b8:04:bf:7f:45:
86:40:b0:c6:43:2a:bd:94:cf:7d:1d:ec:ee:e0:9f:
21:9b:68:e2:02:7c:51:06:23:8d:4d:54:7e:d9:50:
f5:38:ba:2e:a7:c5:8c:0b:97:cd:85:af:2a:15:f1:
0e:85:9e:7a:b6:04:54:4c:2d:0d:37:49:03:42:fa:
aa:45:23:9f:54:27:e2:90:61:78:72:f4:fd:88:87:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:4D:D3:E3:BA:F5:00:7C:06:63:22:F9:F4:14:65:B6:E9:F7:03
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:73:67:98:26:2d:a7:ef:d0:59:99:0b:ab:d1:52:20:90:
16:da:be:51:8a:44:58:85:f6:39:a5:ad:6d:ff:99:35:cd:49:
c7:5f:68:4a:6a:0f:77:53:ea:df:20:de:fb:bd:3a:06:fb:00:
e0:00:f6:44:42:02:c3:53:38:ac:b1:94:f1:4f:82:95:78:0a:
2f:7c:17:bc:b6:d5:7e:7d:ab:22:cd:1f:f4:ec:4e:17:44:1a:
db:fd:3a:2b:02:79:e9:71:92:d5:9c:df:e3:4e:36:16:e6:e9:
1a:26:93:c4:bd:9e:5c:53:f1:61:df:2b:3a:d5:ab:ff:3f:ac:
41:72:70:65:06:03:9a:cf:f8:2d:ee:3e:7e:dd:70:55:7b:56:
5c:50:97:51:da:7c:3b:a7:fb:3f:ac:33:e9:dd:f8:96:93:08:
4c:b0:f5:67:03:1a:cd:3a:24:1f:68:28:b4:87:7a:c5:9d:ba:
21:f8:52:d8:13:29:8b:03:03:85:39:49:fe:51:b7:7e:77:f9:
08:0b:d9:77:0d:66:4e:72:db:1f:6d:8b:11:60:d3:43:90:d8:
c8:71:14:05:d5:04:6e:de:15:39:89:37:c9:ea:af:59:d9:94:
10:e5:47:96:46:d4:0a:94:bf:f6:0e:da:b1:01:ae:6e:50:67:
c9:8a:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client