Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: ZlhdgOAar0VOV9JGH0v81BSggmXwnp6UjOJQZQJDoII=
Subject key identifier: 02:7D:2A:92:0B:0B:AE:D5:E8:EC:E5:C7:60:D0:B3:FE:22:1D:F3:75
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019D3865C41D533E4F11A5EFE1A8DBBB397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: VITUW2bSV1Rx+YdhPvmFY+s7UD400ZbeTy5+sFuVSJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c4:1d:53:3e:4f:11:a5:ef:e1:a8:db:bb:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=027d2a920b0baed5e8ece5c760d0b3fe221df375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:0c:79:30:28:d6:1f:10:7d:7d:2a:cd:64:
cc:a1:aa:05:f2:f5:85:a5:ec:b4:dd:03:f3:ad:f0:
fa:02:e3:8b:9e:d7:c4:9d:23:fe:b7:24:3b:0e:d6:
f8:81:28:a1:da:79:47:a6:58:3c:d5:fa:1a:35:22:
04:d4:f3:2f:d0:f8:c1:e7:8a:c2:f0:23:15:bf:d8:
ef:cb:ec:37:af:9d:60:7a:a5:5e:dd:80:76:d0:ad:
13:c8:37:5a:9f:5d:ef:e6:11:b7:09:30:f9:98:58:
ea:9c:9a:42:32:39:b2:eb:2c:6e:ff:06:64:12:7f:
7d:89:f4:8d:40:2c:3a:72:75:85:64:7b:9e:41:9c:
da:fc:c8:bf:7a:78:6c:48:3c:00:55:ce:35:71:d5:
d5:6f:4b:20:87:74:1c:cb:8b:c1:9c:62:81:e7:ab:
1d:ea:07:2f:5a:03:da:91:b1:ee:e4:0f:04:48:f5:
87:31:6d:97:ba:fc:d1:15:64:cb:2f:6a:5c:ab:c9:
23:3d:df:52:85:69:7a:e4:9c:ab:e7:92:4f:a5:ff:
a0:58:c0:59:fd:af:24:74:b7:83:1b:ff:e7:8a:6d:
aa:4c:06:08:6f:0c:c8:ae:50:df:b6:93:47:e8:6c:
91:5b:dd:4b:81:21:92:a9:39:74:bf:e6:52:05:83:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:2A:92:0B:0B:AE:D5:E8:EC:E5:C7:60:D0:B3:FE:22:1D:F3:75
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c9:8b:a1:45:b5:04:54:a2:c8:48:bd:94:7b:fe:45:e8:e4:
4d:01:d7:e7:98:a0:f3:59:09:52:56:35:7f:53:79:a1:50:c9:
ca:28:19:d6:4d:22:70:f2:00:d9:44:ac:17:00:98:73:6b:4c:
c6:68:51:d0:4f:08:5e:34:b8:01:b8:3f:ca:4d:5c:69:59:f2:
49:be:9d:ce:c4:98:2e:ff:df:ec:99:94:78:fa:c9:a2:83:07:
d2:c5:af:cc:1f:41:1e:1d:6b:37:dd:a3:90:e9:71:56:59:71:
b0:a0:af:e6:72:cc:4c:fe:59:97:56:b0:9a:aa:13:8c:13:ff:
cd:80:ac:b6:9c:ab:a1:20:99:33:e0:9e:1f:73:87:16:26:3e:
cc:9a:cf:b8:13:3a:c4:54:b8:8a:bd:75:56:6e:32:32:db:3c:
56:3d:e8:19:6b:fa:79:01:a6:fb:1e:41:fb:b5:61:d9:63:34:
40:6b:25:89:4f:41:07:93:d8:aa:c2:e9:8f:8d:ed:5e:f2:28:
6c:5b:47:d3:fb:6e:58:d1:fe:52:8c:9c:8c:e3:1d:ca:37:86:
e3:88:f6:11:0e:9c:a3:60:37:1b:c0:57:d7:46:c9:6b:32:b1:
f9:a1:36:41:97:8c:80:3c:04:91:32:5b:7a:04:1f:bc:c3:1d:
4d:cf:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:51 2026 by rpki-client