Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: TsCv+8veq3BY1hODgxli1iQfd8PJhg+f3QmSJ/7xs8U=
Subject key identifier: 38:3A:8E:EA:D2:39:AA:25:51:D4:BF:C6:D0:CB:98:CF:E4:93:D4:A2
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 019D3A1CDDE8321F51B192E78EC8A726CB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:01:03 +0000
Manifest this update: Sun 29 Mar 2026 15:01:03 +0000
Manifest next update: Mon 30 Mar 2026 15:01:03 +0000
Files and hashes: 1: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: 2l97Bz3A4bE4GyaIz6x5nyQ9TAY8WzooEUX8tHwH5Ao=)
2: 7-BHgIfd8UJXQcrdaeCEGNqT0DU.roa (hash: r7iG2JSHeb88gixTYl7AFD1jnKrQ0a+iH+yjlWvhS9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:dd:e8:32:1f:51:b1:92:e7:8e:c8:a7:26:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Mar 29 15:01:03 2026 GMT
Not After : Mar 30 15:01:03 2026 GMT
Subject: CN=383a8eead239aa2551d4bfc6d0cb98cfe493d4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:26:e9:5f:48:33:c2:0c:ff:2a:4a:49:69:
0e:5b:68:b3:3a:b2:9f:4c:11:e8:16:8e:63:f4:28:
8e:b6:82:88:d9:30:c4:d7:80:e7:a6:61:24:5c:23:
e3:16:4e:19:90:53:e1:69:f0:07:d8:90:62:66:ad:
d6:f7:40:8f:5e:d4:f7:a6:de:24:d2:4b:97:81:0f:
9c:21:13:bf:c1:ee:8e:8f:3c:d6:6a:2f:8a:82:39:
00:9e:64:2e:8d:5c:40:06:07:9c:9b:b0:25:3d:44:
1b:44:f5:b6:aa:7f:82:b0:47:51:67:63:ef:21:e8:
aa:d3:1e:46:3c:99:ea:56:ed:c3:ef:26:80:ed:30:
5a:f6:a2:60:95:da:41:1b:ce:80:12:70:c1:72:e1:
5d:98:b5:71:fb:8e:60:dc:95:87:38:40:aa:29:c1:
c0:31:27:4b:7e:cb:f4:4b:7e:02:6d:ac:b9:99:0a:
5b:bb:04:95:c6:a5:0d:f9:1a:c6:a2:3d:94:f8:7f:
89:d9:8c:da:d1:17:0c:e5:ed:e1:8c:cf:b8:9b:1d:
4f:93:c7:90:e1:a9:28:1b:89:1b:70:f4:8f:a4:33:
b4:95:56:b1:80:44:84:f1:c7:bf:51:44:09:a9:de:
e3:b4:4a:ad:12:71:ee:9d:b3:d0:b2:ad:67:b3:72:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:8E:EA:D2:39:AA:25:51:D4:BF:C6:D0:CB:98:CF:E4:93:D4:A2
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:0a:32:1b:4c:91:fa:05:3f:00:a1:b9:63:63:a8:3d:44:
eb:ba:dd:44:99:da:5d:dd:c6:f7:4f:40:3e:a2:cb:9a:ac:9b:
2c:9f:0b:90:00:1f:bf:db:c8:73:2b:ef:7c:ec:68:67:c3:a3:
13:2a:74:53:f9:f8:ae:c7:82:73:2c:9c:4f:7a:f0:7a:61:2c:
c2:b3:0f:53:c9:5b:4f:3f:69:22:aa:10:ef:ae:5c:15:49:a6:
00:f4:32:49:83:f4:6f:ff:d9:f5:8d:72:eb:7d:22:15:30:ea:
8f:91:b5:5e:e0:42:55:65:88:f2:53:c5:41:ce:fb:0f:e4:e3:
dc:01:2f:b6:36:10:68:32:ff:47:0e:d9:c5:e5:f3:ed:0c:82:
83:f5:87:4d:a5:a9:cb:ef:25:9c:5e:d3:d2:67:d7:54:40:07:
de:7b:b9:fe:08:05:ff:87:cb:1e:5d:3c:11:5a:a4:aa:eb:ee:
c2:b9:af:87:fd:8e:11:75:26:be:7c:eb:4f:99:21:73:42:95:
ac:dd:87:e9:e7:e2:c1:98:ee:93:a0:4f:db:6d:9c:0b:6f:f2:
42:50:b1:6a:26:f4:8e:c6:20:84:e2:86:53:52:00:5a:ab:10:
4a:97:b0:87:32:73:2f:ff:16:a5:75:b9:51:1d:9e:a6:cc:17:
63:c0:52:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:42 2026 by rpki-client