Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: DcJOihK2kZ+OhfLE7oFXafzU9tfP/NHkAxCqs4hPWHU=
Subject key identifier: 77:56:65:60:31:18:2B:32:35:26:60:BE:9A:C1:59:EA:40:91:FA:69
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 019D3909EA0982B086FB0CD65A166C5FCD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: cjV8S3m73YspBJk2u50x2XrSRLFOWXcUQyTEhMHXkyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ea:09:82:b0:86:fb:0c:d6:5a:16:6c:5f:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=7756656031182b32352660be9ac159ea4091fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:c1:6d:19:41:84:99:ec:30:3a:ad:d6:1f:
bf:6e:44:65:08:90:2d:e3:c7:06:5c:01:bf:ee:0d:
0b:2d:81:67:14:1f:44:b7:a8:4e:a4:f3:6d:9a:8b:
99:98:24:1e:e0:d5:94:62:50:a5:88:b4:6c:2b:46:
73:69:bd:0c:00:f1:2e:70:5f:9f:d3:f4:16:94:cf:
ea:cc:7e:2d:27:5d:12:16:79:0c:42:35:99:1e:3f:
25:76:e8:19:28:8d:52:e8:90:3c:d8:62:48:64:fe:
1d:a1:dd:7e:60:5b:3f:b0:59:74:49:68:89:a7:d5:
56:7a:4e:e8:de:de:f7:90:af:1e:01:19:e9:40:6e:
0c:3a:8a:a0:dd:14:18:80:8b:77:98:1e:84:9f:45:
b3:3f:66:b2:b3:21:06:1f:63:5d:97:54:3d:69:35:
4a:8a:95:79:1e:83:0f:97:a0:00:2f:d7:7e:c5:94:
11:16:00:f5:2d:62:c4:29:2b:ce:3d:b0:a6:85:5d:
6e:31:d7:de:1e:e7:66:4c:f2:10:a4:c3:22:95:79:
5c:b0:a8:5c:82:6e:f6:e7:c0:4c:4f:d5:cb:9b:56:
98:7c:a0:51:fc:80:31:c1:1d:92:2b:77:c1:52:85:
6a:63:06:8a:e0:87:05:92:51:3d:c6:5e:61:bf:7d:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:65:60:31:18:2B:32:35:26:60:BE:9A:C1:59:EA:40:91:FA:69
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e3:dd:87:8f:2e:73:84:ab:10:95:7f:38:81:4d:a9:f2:0c:
33:6d:76:f3:6a:fe:a6:15:a2:fc:7b:d3:38:2f:82:e5:18:7f:
ba:03:f6:9d:7e:5f:13:e2:72:36:b1:b4:e5:d2:0e:70:43:c0:
87:8f:fb:eb:c5:08:bf:be:99:a0:c7:7d:9a:41:c5:08:25:c5:
09:f2:1f:2f:1a:6e:fa:98:76:83:24:b7:33:1a:d8:e8:3f:1b:
71:6e:e2:dd:92:58:41:53:f8:b7:77:14:fa:14:81:38:40:6f:
2b:2e:52:a6:0d:28:23:38:71:5e:63:4e:25:d7:95:4b:e8:0b:
f3:26:ad:35:9e:da:cf:f1:d6:1f:62:21:52:6b:52:05:0b:1a:
94:b8:4d:98:53:ee:f2:b0:32:74:19:f5:25:61:59:8a:59:d4:
77:c7:a6:e4:e8:3e:ad:08:ae:56:41:e1:e9:9b:97:ef:50:44:
ec:3c:b9:5b:ad:56:d1:45:ac:ce:da:a3:cd:6f:43:fd:70:00:
43:99:e5:8c:b9:db:80:df:72:d5:01:13:4c:d0:09:56:bc:8f:
8e:fd:83:2f:e9:70:52:07:6d:93:8c:b2:c3:a7:09:91:2d:b2:
d8:89:97:3c:ac:83:5d:32:46:bc:b3:bd:75:ec:88:48:67:a0:
16:a9:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:35 2026 by rpki-client