Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: umfmRcaEqEQhpxUWf8S50d3BcQKzVvzpjflUk9RKDYI=
Subject key identifier: A0:E6:82:65:35:17:6E:4C:6A:32:4E:73:AE:A4:5A:D6:3B:F2:5B:83
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 019D39408B69B19BDC65D5865F33168C4999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: I/DMsXZkhUlMXNd1HxkJyl2NjHczHPUcmDL0QZKNPtQ=)
2: JqePAdgixxFWqA5Nk9EhxTVUR1w.roa (hash: 8V9B6G/PlO/tuR8Ihfw8dzc5qWqPg0dd9Oy1jXd8ubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8b:69:b1:9b:dc:65:d5:86:5f:33:16:8c:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=a0e6826535176e4c6a324e73aea45ad63bf25b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:8a:63:ae:8c:e7:af:3f:5f:0d:34:7d:93:
83:2c:26:c9:07:b2:22:c7:fc:7f:9f:7f:80:d4:45:
d9:0c:c0:3b:29:82:d0:2c:05:36:d7:0b:9a:ea:df:
a6:11:b8:c7:a9:5e:31:cb:d2:2b:dc:97:9e:30:bc:
8c:a2:bd:23:e5:6c:99:59:e8:ca:1b:d5:d0:fb:a9:
38:25:24:31:ba:8c:5a:d3:e1:f6:57:82:b3:50:ef:
36:91:37:86:50:f7:8d:38:5b:fe:c0:e7:79:d5:ec:
40:7b:c8:83:6b:25:a1:87:91:76:de:d3:37:ca:29:
3a:6d:f8:17:32:6c:b2:e0:95:30:a5:fd:86:15:b0:
ed:5e:db:85:50:56:c5:e5:d0:f7:74:66:48:2c:cb:
27:43:0c:69:e9:62:95:7b:a9:3c:e9:54:60:6a:a2:
47:c1:4c:6e:9f:4e:d8:e2:08:50:e7:81:29:3d:39:
c4:06:91:08:33:05:59:f5:e9:37:14:06:80:01:a1:
22:67:29:ae:1e:24:7e:db:12:70:02:da:48:6b:67:
b6:39:df:f8:33:db:62:0a:27:52:a3:51:29:c9:cd:
a6:fe:6e:8d:54:26:3a:63:a3:2f:6c:64:cb:2d:2c:
93:15:47:3f:67:12:c6:f3:7c:d0:29:e0:98:b2:72:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:82:65:35:17:6E:4C:6A:32:4E:73:AE:A4:5A:D6:3B:F2:5B:83
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:0e:d8:ca:3c:61:ad:87:7e:47:18:f2:03:7b:3c:61:c2:
e5:e7:6c:f3:6d:0f:4b:18:ce:90:97:3f:5c:b5:5b:00:5f:85:
18:1a:f7:d4:c5:c0:4b:84:e0:c7:a3:a2:2e:e4:3e:b5:2e:d5:
92:ed:2e:e7:72:f6:ba:f9:97:94:bd:a7:e2:c1:02:6e:0b:e9:
d8:b0:99:76:69:8e:c2:87:9b:a6:2a:6e:5a:4d:5e:55:c1:68:
1c:35:23:1f:3b:c9:fe:46:24:d7:95:b2:63:4e:16:5d:63:1b:
57:4e:e9:b0:ba:37:dc:72:15:3b:d0:f9:88:12:23:32:34:e6:
21:54:2a:db:6c:6c:2f:46:25:61:20:32:e2:a2:13:47:21:4f:
12:a2:de:2c:15:79:22:1d:16:16:cf:18:db:97:0f:06:63:ef:
26:b5:ff:5d:5e:13:c3:fe:10:b2:1e:0f:b2:d0:d0:c9:95:db:
6d:72:dd:35:e6:41:95:4f:79:f7:f8:70:29:48:e5:84:04:09:
2c:8f:19:34:77:87:03:a6:72:22:72:99:25:d1:0e:bc:82:fb:
65:85:86:40:cc:dc:2b:70:bc:d7:49:ac:20:d2:89:f6:a1:ee:
cf:1d:fc:9b:ae:93:c7:b0:01:52:c8:69:72:68:4e:67:ca:61:
6d:6f:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:15 2026 by rpki-client