Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: 1njNTIS/iFOH+8fHV+SLlxe7a4ewRyr1X7EU8Btr5J0=
Subject key identifier: 17:E3:EC:F4:42:4C:23:95:20:64:62:23:10:E2:53:D7:3D:9E:7C:15
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 019D37F7ACF04630F4640E6E1D0127DD5AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 16F3
Signing time: Sun 29 Mar 2026 05:01:11 +0000
Manifest this update: Sun 29 Mar 2026 05:01:11 +0000
Manifest next update: Mon 30 Mar 2026 05:01:11 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: oqXUryj+4St6naNAdZFMuYymR0wnC7CZWNH+6NrD/rM=)
2: PY5sdU0kADgfJHW2XFZw0dgHeu0.roa (hash: WIfT5DY5Ccg3dpUdIFTpUWfqc0ig1ZlT0tU43GrW37g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:ac:f0:46:30:f4:64:0e:6e:1d:01:27:dd:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Mar 29 05:01:11 2026 GMT
Not After : Mar 30 05:01:11 2026 GMT
Subject: CN=17e3ecf4424c23952064622310e253d73d9e7c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:ff:61:1f:24:8a:bf:01:f2:51:c4:f3:52:
a0:1c:65:97:fe:17:c0:26:ca:18:98:5c:bf:9d:e9:
e7:72:48:db:96:01:05:87:ec:aa:4e:dc:d1:44:b5:
da:4a:46:6d:69:27:39:fb:59:1f:0e:56:27:ce:ad:
b0:26:7b:ff:11:a0:93:76:38:34:a4:3c:e7:aa:84:
79:0a:22:50:38:c0:e7:59:e9:c0:c2:7e:cb:ca:80:
f5:4e:32:98:51:ff:fa:3c:99:b1:aa:8a:bf:d4:4e:
14:fe:78:3b:3d:a8:85:4c:15:ef:ba:a3:de:5e:a2:
86:ec:c5:27:6b:17:bc:88:19:65:d9:f9:f6:c7:ad:
f2:7f:b9:93:39:0e:1b:c8:4e:7d:bc:88:af:b6:6b:
6d:c2:91:fa:9f:c3:dc:3e:d4:07:8f:9f:57:77:5b:
5b:2e:d2:f1:cd:27:4f:2f:eb:17:87:9f:05:c4:14:
d4:03:fe:df:be:b4:1d:23:bc:ce:27:55:05:cf:4c:
7f:8e:c5:ff:54:7c:78:6a:38:a0:9f:7a:72:80:1d:
25:2a:3d:06:70:c0:1d:a9:0e:07:a2:b8:2b:b6:a9:
e2:49:cb:b2:88:79:cf:c2:b5:b2:d9:65:c6:70:ef:
03:3b:35:4a:bf:33:ac:de:5b:36:a5:74:9e:46:50:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:EC:F4:42:4C:23:95:20:64:62:23:10:E2:53:D7:3D:9E:7C:15
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:eb:3f:9d:4f:2e:ca:52:b9:58:00:c1:d5:a0:bd:ac:b9:
29:8c:c3:48:66:01:eb:2c:b8:2c:97:c1:15:07:dd:95:43:85:
9b:78:ba:53:62:87:c0:bb:ac:3a:57:52:aa:47:19:29:68:46:
fe:a4:16:ce:92:3b:43:c2:82:af:de:08:a9:2f:04:e3:0b:e8:
f9:44:0a:68:ac:7a:d6:cc:76:fc:df:d3:e1:4d:46:78:83:62:
39:3a:84:1d:93:a6:87:75:fe:81:a9:cb:62:30:e3:ef:f9:d5:
e7:31:6c:9e:49:84:db:0a:42:84:1a:57:3a:9a:e4:96:5e:ac:
42:8f:71:4b:9c:64:32:5c:d9:74:1d:75:74:53:de:b0:c2:f1:
0c:ef:15:6f:23:ad:5f:d1:fa:88:48:2e:10:d5:05:e1:15:66:
16:77:9e:bd:0e:90:bd:92:49:f0:cd:5a:c0:ba:02:1b:8b:db:
0a:cd:2b:42:7a:20:7b:bb:d5:4d:af:a8:e2:df:b2:3d:91:3b:
56:f5:07:cc:51:1d:e4:d3:f0:c3:73:82:84:f5:98:4c:ab:f8:
19:a8:3b:c2:be:6e:c7:42:e5:b3:c7:79:0d:1f:fa:3d:e3:e5:
c9:8a:f1:b2:fe:6c:03:9c:83:af:50:42:6b:8e:49:ec:23:12:
35:78:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:23 2026 by rpki-client