Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: L5nDMrKTcy6rdhpib1hCLUnMIfX1vWGbGKCGGMXoo9o=
Subject key identifier: 95:82:ED:4D:87:A2:AF:B5:E1:54:9B:FE:F7:73:61:7E:A7:D7:40:5B
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019D3909EE595FFB3458660D6CB78A9EE514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0E81
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: csM34Cq6gIZm3IoRuGX473iDWthNHZRTYzTQL5IPpsU=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ee:59:5f:fb:34:58:66:0d:6c:b7:8a:9e:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=9582ed4d87a2afb5e1549bfef773617ea7d7405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:0a:f5:79:1d:da:29:a9:aa:35:ef:35:d5:
4b:4e:ac:63:2a:69:5c:c5:73:d2:2e:5c:f0:0d:ee:
ab:12:fe:99:c1:ed:14:20:9c:14:8d:4d:3f:b1:e0:
cc:6e:73:9a:77:29:c2:bb:6e:55:0c:f9:d7:4d:c0:
b9:a9:68:ff:4a:5e:47:a4:eb:7a:8e:6b:84:b4:74:
62:86:70:2b:31:93:cc:a0:35:23:23:8b:9e:7d:79:
79:06:3b:1d:02:9a:35:a9:af:5a:44:59:84:bf:d1:
f6:45:35:b7:07:f6:7a:aa:4c:b1:01:ae:d2:38:6f:
23:38:e7:0a:55:56:da:13:43:8c:17:c0:01:e2:af:
9b:c4:a2:f0:8b:c9:0e:8d:f9:12:60:8d:3d:25:43:
7d:21:a9:9a:07:6b:4d:5a:85:fe:72:c7:82:6b:7c:
67:d3:1b:bd:69:6e:13:21:c3:46:e4:03:e3:df:aa:
40:51:c2:70:a7:8f:2c:5c:3c:2d:02:9e:e0:14:d7:
18:a6:00:12:eb:43:e2:5d:c1:9d:cc:ef:31:3f:7e:
47:10:04:13:2b:27:47:99:3d:ec:7a:1a:b4:0c:84:
d0:38:71:63:ae:2d:45:e3:c8:8f:c9:09:f8:00:71:
5b:35:9e:63:8c:a0:c7:bf:93:81:cf:e0:1a:f6:a3:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:ED:4D:87:A2:AF:B5:E1:54:9B:FE:F7:73:61:7E:A7:D7:40:5B
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7d:0e:46:a7:9f:46:f0:00:7a:b4:a2:8e:70:62:98:39:2d:
2e:d5:65:fd:40:85:95:9f:d0:ff:fc:ed:ba:8d:f1:bd:e5:bc:
fa:42:f9:23:bb:97:3a:13:ca:bf:d2:32:7b:df:11:5a:04:e7:
e6:b3:be:9d:5c:0d:1c:49:6c:57:e9:31:88:7d:a3:a7:68:18:
90:f4:8c:38:4d:b1:94:58:34:55:2b:8e:68:aa:1a:09:67:38:
74:3d:fb:a2:d9:e5:59:4b:59:03:47:69:1c:80:16:80:34:d1:
46:0a:5b:e0:3e:a2:6d:c4:d9:02:1b:cb:a1:9f:d7:e2:09:c8:
c6:7f:a1:93:5a:96:ec:1c:e6:2c:1a:44:f8:af:00:44:28:ba:
da:9e:c8:bc:c3:a9:c5:35:97:5c:3b:6f:04:a7:c6:c5:94:80:
7d:61:5c:87:18:e9:b7:70:22:01:6b:6d:f2:f9:5a:5b:01:46:
fd:2e:2c:1a:b7:08:b8:e2:8b:38:77:63:49:fa:af:34:54:ee:
4c:89:84:73:f6:f5:52:2a:42:50:0f:ec:89:84:db:67:78:3a:
ba:d7:4b:51:fe:0c:53:16:bd:d1:1e:8f:72:09:d9:e4:76:2f:
b0:4e:04:c7:c5:49:29:42:23:ed:7b:eb:2f:4c:c3:8a:bd:47:
5f:0e:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:01 2026 by rpki-client