Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: s2ItQN9lfCUEvh8oU7A06xZ9DdYwwe358YhmuYN+tyc=
Subject key identifier: 68:2D:15:24:1C:18:EF:78:4F:4C:3D:87:A8:CB:02:09:5F:51:F2:BB
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 019D37C0FD33B45A71B5E301CF983A4621C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 1779
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: 8uzaUXgQE7D5OWwFTGkqvieTuTNQ1VsuSPFGecObv7Y=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fd:33:b4:5a:71:b5:e3:01:cf:98:3a:46:21:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=682d15241c18ef784f4c3d87a8cb02095f51f2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:07:40:dd:2c:71:10:82:a8:73:53:bd:4e:
37:55:5b:02:48:e3:6f:2a:e8:88:50:97:fd:85:60:
bf:35:f1:e1:3a:1a:fb:d6:0b:36:6f:0f:93:51:52:
c2:c0:d1:c6:45:72:e1:a8:81:aa:85:d3:df:0f:87:
0b:90:ba:a4:c4:ff:9b:84:ac:db:3b:d8:22:7e:df:
22:90:66:3a:37:17:d7:07:01:a5:4c:9d:3d:56:b4:
73:cb:59:63:1d:e9:5f:30:00:25:09:7d:87:86:66:
ad:0b:6b:64:ab:e2:bc:ec:c7:b8:bd:0a:e3:c5:61:
7e:a1:88:76:0d:15:d7:2e:17:6c:1d:8d:f0:9f:d3:
5d:cf:0c:8f:3a:21:dc:14:a9:8f:f7:3e:83:c4:da:
5b:c5:1b:31:08:c6:87:a2:e0:0e:07:de:55:40:6a:
fd:5b:82:af:1d:26:91:1a:18:e3:a6:b8:7e:90:ed:
a7:72:0b:83:f7:3a:3a:a6:2b:2d:9c:b5:bf:33:b1:
3d:58:20:6f:14:a5:7a:f0:26:d6:95:e0:04:c5:e7:
7f:5e:10:41:66:9b:ee:4d:8c:39:31:59:b4:54:86:
4b:11:9a:d5:3c:0e:06:e0:5d:59:ba:01:60:9c:d5:
ae:08:be:12:47:a4:e3:a1:55:5f:8e:df:5d:93:97:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:15:24:1C:18:EF:78:4F:4C:3D:87:A8:CB:02:09:5F:51:F2:BB
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9c:bd:5f:7d:5d:f5:34:e5:6b:85:23:6a:27:5a:80:61:9e:
0c:b5:8a:cb:17:42:c4:7d:25:ec:fa:1a:36:84:cd:99:79:46:
e9:78:5b:2c:0c:6c:bf:26:8e:93:16:2f:02:54:a9:dd:ab:76:
64:05:16:ea:72:44:7d:39:58:c3:c2:c3:96:98:94:f3:12:9e:
f2:be:37:d3:d5:00:b1:a8:b4:2f:da:97:9e:69:cc:e4:a0:5f:
e2:2d:82:be:dc:23:b7:60:3b:62:8e:dd:ee:6d:f9:a2:bb:a6:
22:18:c7:6f:10:ed:38:41:f0:c9:cb:7f:fe:fe:70:3b:8f:6e:
63:0b:88:78:19:8e:16:0e:39:f8:c0:ed:57:0e:4e:52:58:28:
6e:28:a6:8f:ce:c5:7a:99:38:ea:ce:d1:f0:3d:30:1b:28:ab:
84:4a:e9:48:6b:83:9e:4f:d4:99:b7:dd:28:11:e4:dc:95:53:
cf:6c:7b:f9:55:5e:02:f5:b4:29:b8:8f:fe:4b:be:52:4d:75:
19:31:e3:e9:91:1e:d2:4d:46:aa:b8:11:ec:12:44:b7:07:a2:
c7:60:94:ae:a3:b6:df:91:61:d0:e4:6a:0d:72:dc:33:7b:9b:
bf:24:59:3f:be:55:96:6e:0e:2a:dd:e6:d8:67:4c:34:3b:0b:
a9:13:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:53 2026 by rpki-client