Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: jRs2wdGUltMtcruqFGAJNpeZ8B+v5y635xLILWztq4k=
Subject key identifier: BC:8B:06:4D:F4:7D:4B:B4:96:8B:F9:5F:75:BE:F4:A4:79:7B:64:45
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 019D05C1ACE2BE43C30028D798084EE99F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1891
Signing time: Thu 19 Mar 2026 11:01:11 +0000
Manifest this update: Thu 19 Mar 2026 11:01:11 +0000
Manifest next update: Fri 20 Mar 2026 11:01:11 +0000
Files and hashes: 1: 1jXhnTlNcIH-F__GRf4PM4BYn8I.roa (hash: E3HlVuT6hxf5ksKsL0iXZwkml17Q9oBpWogpOAGlEwU=)
2: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: HSJ78xJCCnKNK0fYYuMYNoCeI9CiWiPDlNp0V56yIZ4=)
3: 5n_LJIXVhPPzdEHOUXNI628ingY.roa (hash: NQCHGHitMzomWbvAOfmN/9PVUkWlzv9zSoGTskUkpNQ=)
4: uhVewxHevpMHT9Vwqhs2oxQFyCs.roa (hash: wVttK0CYjEZiRPDjwBZLejNRTkNAN3AqB1UHgInSwjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:c1:ac:e2:be:43:c3:00:28:d7:98:08:4e:e9:9f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Mar 19 11:01:11 2026 GMT
Not After : Mar 20 11:01:11 2026 GMT
Subject: CN=bc8b064df47d4bb4968bf95f75bef4a4797b6445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:0d:9e:d2:13:67:7b:ac:ea:87:07:cc:ec:
cc:20:98:c4:aa:ce:ce:4e:e7:5d:e9:30:04:a1:d7:
22:7f:d4:db:2b:0a:6c:f5:f3:71:6e:f8:65:79:9b:
a2:64:93:da:23:9f:69:f1:36:91:b0:6d:fc:52:0b:
7c:8f:33:3d:39:93:a4:73:34:e6:8c:09:1d:76:d5:
05:61:66:d1:c9:02:0d:f7:28:38:f6:5d:42:fc:d6:
46:07:41:cd:ef:2f:98:94:4d:43:8e:5e:dc:e5:79:
f6:81:f3:5a:53:bc:d2:7f:9f:84:6b:41:a4:75:a2:
f3:f2:c4:d6:8c:62:b4:ad:d5:26:48:dd:f3:8d:87:
ba:e2:02:f8:92:63:a6:86:ce:b1:2b:8a:a3:70:13:
4f:0d:a2:86:35:d0:d4:58:6d:ca:dd:32:ed:dd:ae:
e6:90:9f:b9:b0:93:58:2c:7a:69:e4:28:e2:42:f9:
af:a5:da:a7:96:e8:4d:78:32:57:5c:ee:8c:71:b6:
06:a9:7e:af:02:9a:68:55:34:be:1a:d0:35:c8:fc:
70:6f:1d:ff:cd:21:67:3b:ff:10:54:a5:e6:4d:90:
65:2d:d8:fd:b3:12:13:5b:d0:f4:0d:34:3d:b4:09:
c0:b9:a8:5a:66:d6:87:17:e5:17:f6:43:27:d6:ec:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:06:4D:F4:7D:4B:B4:96:8B:F9:5F:75:BE:F4:A4:79:7B:64:45
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a0:cf:8f:00:8f:af:d8:d5:40:bc:2b:21:30:2d:d5:15:36:
c7:ba:a8:96:e6:81:33:ec:d2:ac:ff:38:fe:62:b1:12:77:c4:
72:0d:01:26:2d:63:68:65:4b:5e:27:c6:b0:75:3f:0a:53:60:
da:e7:f6:b7:66:b7:86:7d:26:f6:44:80:df:be:49:bd:92:72:
49:69:09:bc:e6:18:42:4b:03:08:ee:c2:3c:59:3a:71:9f:19:
c0:5c:b7:10:b6:2d:43:65:98:f5:82:70:33:09:db:57:4e:af:
09:e7:16:08:ed:dd:f7:6c:17:c4:fe:26:9e:6f:21:8c:da:3a:
7c:6d:ea:8a:26:2d:2c:6f:1d:a6:be:cf:65:de:62:db:79:1d:
d3:61:68:13:48:ae:ed:6c:bb:9c:38:e4:e5:88:94:39:a4:94:
3f:0c:bc:3a:fe:c1:ac:f9:7a:8e:4e:24:9f:a3:b4:f4:1f:c9:
49:3f:c0:45:76:94:f6:22:24:04:9e:08:c8:2e:00:38:80:69:
eb:55:da:57:78:4c:fa:fe:03:e2:4b:e3:cf:6b:57:da:ff:8d:
20:31:c2:17:bc:f9:08:a9:77:72:21:33:8e:21:9f:51:26:c8:
09:74:78:08:ea:0e:e5:dc:cf:f3:73:33:34:22:26:11:85:84:
39:47:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:48:41 2026 by rpki-client