Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: SXNqb2LTyv7QZMQN7aPncDvnHr7tFk8wmNn+2v7esI0=
Subject key identifier: 31:C9:D6:71:4D:84:B5:C6:36:03:77:55:B5:ED:FB:52:5C:AA:8D:62
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 019D37F72C72BE109B82CF080E55E54DF3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 13A2
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: 82EG9jB2iGtOL5Fzp1rvLCDQ0uolmlqRubzzx4toU1w=)
2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2c:72:be:10:9b:82:cf:08:0e:55:e5:4d:f3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=31c9d6714d84b5c636037755b5edfb525caa8d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:e7:c8:73:14:9a:9f:e0:f0:c9:fd:47:5a:
64:61:a7:3b:4a:3b:52:84:21:94:9b:79:b2:16:b4:
a5:29:85:1f:8e:d9:02:08:ba:6b:6c:f4:44:de:dc:
8d:d0:78:d0:dd:16:42:5d:06:00:4e:be:d0:10:5e:
8a:8c:1d:28:f5:93:b1:af:51:95:a8:50:09:c5:44:
fe:6f:af:91:7e:7b:19:92:b0:df:7e:2e:96:cc:e8:
a2:e5:5e:e1:35:e4:7d:ad:bb:aa:78:d3:f9:e7:28:
92:9d:f2:46:42:bc:56:e8:89:99:ec:67:2d:7b:f9:
03:d4:a9:ee:d6:1f:ed:8f:3f:f1:66:ba:af:5e:d6:
86:2d:92:7b:05:94:78:6d:cf:d0:a0:5e:e2:59:b3:
4f:35:14:bd:28:a3:28:68:37:1a:9c:fa:a9:70:66:
45:f4:36:95:a8:26:67:cf:4b:0a:b2:51:3e:f1:63:
02:ef:03:1b:36:55:a7:bd:d9:95:0f:57:07:bc:96:
21:53:5d:84:63:bd:e7:75:01:4c:a4:53:3a:69:4d:
1f:43:7d:a6:b3:f2:97:6e:07:94:08:3b:d3:8f:d1:
57:1c:73:49:be:57:df:3e:11:92:4c:4b:9a:3b:66:
a7:43:0f:cc:b9:5e:3b:1c:49:69:51:d3:a3:31:88:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:D6:71:4D:84:B5:C6:36:03:77:55:B5:ED:FB:52:5C:AA:8D:62
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0d:07:dc:60:05:e4:eb:db:b3:6c:35:c7:94:6e:5a:77:eb:
ca:26:ba:60:df:2e:b4:9f:65:a1:04:97:04:c2:1a:4e:e4:0e:
6f:42:dc:14:8c:47:86:a8:8b:2a:33:de:a5:f7:15:ce:22:a8:
58:dd:ab:95:c7:9a:6c:90:3d:bb:3b:17:0a:29:6e:26:3d:d7:
71:dd:b9:d1:d9:8b:08:0e:1b:30:78:5f:dd:c4:55:b9:33:be:
c3:6a:23:48:03:66:45:24:f8:1e:a1:e4:08:8e:2b:2d:3c:1d:
e4:5e:1d:52:cd:d0:55:0d:57:23:a9:ef:3d:57:20:fc:7a:8f:
dd:20:3d:4f:0f:2a:49:0f:38:c0:f2:25:d3:ea:f7:db:13:9c:
50:fe:5f:10:8c:63:72:a3:83:82:0d:aa:04:50:c6:e0:d1:e2:
a2:2f:45:e2:d6:c7:26:87:c7:63:5a:6c:92:f9:dc:f1:42:cf:
8d:82:47:66:26:29:a1:6c:f2:fe:1e:c4:20:48:55:92:c5:02:
cb:c6:a6:98:fc:34:88:07:af:58:c4:e9:9e:b8:b2:6f:90:5b:
0d:96:fe:c3:40:2d:f4:ec:ef:4d:3a:8b:03:be:ef:31:ab:80:
91:41:3c:18:30:98:7e:9f:49:33:20:51:a6:70:90:95:53:b1:
29:5e:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:02 2026 by rpki-client