Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: +rtWzcRtAAhAlVqb/AaORgv6tBk/nsGjMGqCbSl0rFE=
Subject key identifier: E5:26:60:07:3C:E6:6D:77:51:17:9D:6F:69:71:AD:25:CB:FB:6E:65
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019D3909DEA49132DCCF0C6AC5127C77E92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: Mj6vMmG72KLHBVh/es0g9HZk5neFEgvY5ioWSLGlaG0=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:de:a4:91:32:dc:cf:0c:6a:c5:12:7c:77:e9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=e52660073ce66d7751179d6f6971ad25cbfb6e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:df:53:db:49:42:82:eb:9c:49:7c:6b:87:
54:58:09:cf:4e:a9:49:84:7b:95:e9:4a:29:9f:0a:
3c:fc:17:2e:9a:7d:f8:87:fe:94:e1:21:e5:c4:26:
0c:44:d5:7b:2f:f9:cb:33:da:e3:6d:05:e2:41:dc:
d8:83:ff:46:d7:d7:b9:dd:9b:ae:7f:38:45:28:7a:
af:1b:22:32:75:0b:56:fb:67:74:7a:4e:df:f2:4a:
c1:f4:0e:bb:95:0f:89:35:f4:c6:b9:8d:f7:47:2b:
42:3d:fa:a9:e1:09:fd:bd:de:ab:99:10:23:cf:eb:
3a:73:7a:13:0a:ff:70:1f:ea:c8:76:9d:60:ad:6e:
86:e4:fa:31:bd:96:03:7d:30:3f:79:6a:c1:25:9f:
b7:89:8b:9f:3a:28:f2:d3:e0:c0:6c:0a:2d:30:25:
a9:7d:1e:96:04:5c:a6:11:b3:26:34:c0:6d:1e:98:
27:44:86:02:16:06:6e:e4:31:9b:94:23:45:05:7f:
f8:96:dd:0e:e1:58:44:64:68:9a:31:a2:45:bf:87:
f9:2b:b2:97:03:b5:3f:ef:4a:49:07:db:a1:5e:3f:
38:1d:4d:e6:35:ae:e6:4a:07:fa:fc:0c:80:76:ee:
fc:47:90:ea:56:ad:b3:29:bf:e9:5c:d8:9b:3f:78:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:26:60:07:3C:E6:6D:77:51:17:9D:6F:69:71:AD:25:CB:FB:6E:65
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7a:94:ce:7a:f0:91:9a:99:e4:87:00:b3:24:de:f2:b9:8e:
24:f2:fe:fc:b5:73:01:25:53:ae:56:7f:aa:94:30:6a:41:02:
f2:5f:d7:9f:bf:fe:38:6c:8c:08:9c:4f:b5:c8:d4:68:9f:ca:
d4:10:5a:75:a2:b2:cb:36:5f:e8:61:f0:2e:60:02:67:3a:a5:
19:49:af:87:1f:d8:92:7e:95:3d:13:d4:72:fb:44:3d:25:4d:
0c:cb:49:2b:ac:ce:47:24:88:07:99:a7:e6:51:23:e8:61:90:
92:8d:62:8e:2c:1e:2e:c7:f6:93:44:86:13:09:db:a4:a2:b7:
bf:dc:53:b0:ec:41:07:60:0e:67:20:5d:aa:57:e8:06:4d:d4:
bd:3d:36:a3:49:e7:78:8a:36:f7:67:7f:bb:cd:5b:fc:06:18:
d4:e7:ff:f8:81:57:c8:87:62:00:6e:84:21:73:c9:0f:18:f1:
8e:0a:e4:26:f5:c4:8b:91:d8:60:9b:8f:81:a3:f1:47:a4:6b:
32:81:08:95:23:2b:1b:b0:7f:7f:cc:c8:a9:ec:73:82:2b:96:
11:51:e6:96:e4:06:89:9c:a0:9b:87:7f:40:e0:fa:81:4c:03:
6f:dd:5a:ed:b9:1c:06:fd:28:13:a9:3b:80:13:13:e1:b2:07:
67:80:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:21 2026 by rpki-client