Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: 3vcarPCahUBINohpVMsuykkDOFqeFMnAg5pIsg19vfM=
Subject key identifier: 32:D8:08:63:4B:FF:C0:6A:C4:B8:95:B4:57:AB:18:65:DA:9F:51:C0
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 019CE447B166E1CC5E3B6EA5589A2FA44971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1862
Signing time: Thu 12 Mar 2026 23:00:29 +0000
Manifest this update: Thu 12 Mar 2026 23:00:29 +0000
Manifest next update: Fri 13 Mar 2026 23:00:29 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: BfdJAL1HmJG7Nu3Giv/a5kRHWZe0ppiZzk9B5UThWCM=)
2: YgBe7NidCuhBJDoY20do8_9nElw.roa (hash: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:b1:66:e1:cc:5e:3b:6e:a5:58:9a:2f:a4:49:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Mar 12 23:00:29 2026 GMT
Not After : Mar 13 23:00:29 2026 GMT
Subject: CN=32d808634bffc06ac4b895b457ab1865da9f51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:b8:d7:dc:80:af:c6:37:93:33:97:f8:11:
87:e2:d6:0f:1b:ec:5a:6d:b2:46:ff:60:39:72:27:
2b:51:0a:bd:88:ed:64:09:73:68:c7:cc:76:b5:89:
67:24:17:9f:2a:ac:d5:aa:f6:e1:f6:88:41:b6:a7:
84:14:88:99:09:d7:95:43:19:c8:f2:ec:03:04:e1:
f1:8a:e9:61:93:39:e7:66:bf:bd:ca:9d:bb:34:32:
9e:7b:23:5c:5d:e4:94:87:c0:3c:99:2c:c3:15:da:
fc:ab:27:2d:8e:c9:78:73:0f:15:f7:47:5a:ec:cd:
77:9f:f3:a9:a2:1b:7a:37:2d:90:f6:e3:b9:b5:61:
53:22:27:5d:7a:01:d5:71:8b:49:1f:d7:81:45:f6:
98:7b:89:55:37:fe:d7:92:f4:81:c5:a0:68:b7:cc:
42:51:1a:67:d6:e5:1c:f2:a6:79:65:49:40:99:74:
83:d7:df:e9:c7:e1:9b:51:47:e2:c4:a1:67:03:46:
b7:54:1d:d1:0a:94:1a:ae:b9:13:14:f4:e0:99:18:
53:e0:2c:ef:69:28:99:b6:0a:2a:5b:f2:6f:06:88:
b2:1d:25:ca:63:d4:7a:c9:0a:43:1b:ab:27:94:c7:
29:16:3e:41:b8:27:bd:d6:f2:25:a6:4a:97:01:02:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:08:63:4B:FF:C0:6A:C4:B8:95:B4:57:AB:18:65:DA:9F:51:C0
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:74:17:52:ed:11:be:43:dc:70:2a:53:06:92:1b:b3:e6:
62:ac:62:50:c3:38:43:44:9d:7a:c8:d6:47:aa:ba:d7:15:56:
18:d3:85:a0:5b:88:83:aa:7a:9d:c5:08:9a:b2:0d:83:3a:c9:
60:54:62:58:ed:22:62:34:37:c3:28:90:1d:46:e0:5d:b9:9b:
ab:cd:f7:fb:be:86:0c:c5:80:05:27:da:33:41:96:44:1d:f1:
ee:ce:a6:b0:cd:dc:a0:26:af:53:73:42:9f:af:ed:b6:c5:3e:
19:d5:20:86:5f:28:1a:04:c1:3c:da:48:7f:df:74:22:0c:0a:
2a:23:e3:85:55:ed:c7:c9:72:8d:53:c3:60:8a:8d:64:13:44:
d9:0f:96:15:26:51:d4:45:d0:92:dd:6a:f6:38:6f:5f:c5:50:
20:d2:23:94:65:9c:1a:73:39:4c:9f:01:d3:13:45:f3:df:27:
7d:09:65:3b:73:bb:f0:fe:0e:80:37:54:f6:90:5e:67:6f:58:
a5:c7:12:40:2d:68:ad:e4:ec:7a:78:0e:08:41:bd:fa:2f:ee:
96:5c:90:f5:bd:08:35:d9:bf:9e:43:8a:4e:ab:b4:d2:35:04:
36:e4:5c:a2:67:51:5d:d2:93:37:eb:d4:3a:fa:ad:7b:74:d7:
fa:5a:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:36 2026 by rpki-client