Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: kjadXdaLPJ6rWyjFKdFGQK5W6gohhuVlynIVUv7R9uQ=
Subject key identifier: 1D:50:00:23:F9:17:BE:28:66:4D:7F:8F:B1:73:C6:50:D7:87:30:AE
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019D38D3B2CDBF6C902B99DD37AE0813776C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: P9Blhd9vKUBbW9X011nw5xF9QA+AA5Tv9rl+dI7WgoY=)
2: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (hash: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b2:cd:bf:6c:90:2b:99:dd:37:ae:08:13:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=1d500023f917be28664d7f8fb173c650d78730ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:b7:0b:91:27:20:9c:43:7b:9f:8f:b3:8b:
22:fb:45:f1:6a:6a:7d:89:df:b3:82:f0:1d:45:f1:
1f:6e:c5:20:7f:06:33:b3:e7:7c:05:83:6f:5e:89:
90:22:ce:91:f3:c6:b1:a1:ca:41:af:b0:55:5c:6d:
61:fc:ea:42:97:16:68:65:da:17:6b:82:67:6d:dd:
c9:5e:9b:c0:b8:f2:c9:a5:7c:f8:01:fb:a3:a6:45:
b6:85:55:b2:e0:8f:ed:6b:05:ac:b9:b8:46:fa:99:
4a:8d:d5:4e:98:92:2f:45:44:c1:cc:8b:eb:ef:5c:
dd:33:86:c4:d0:8b:2e:b8:c8:24:85:ee:e8:82:8e:
e0:fd:2e:2d:c3:81:2e:cf:ef:ba:42:6e:87:9c:da:
89:5e:63:76:19:55:5f:39:b5:e1:9a:6a:bd:be:55:
bc:49:e6:8e:9c:88:58:29:43:a6:41:3d:6e:c4:ea:
92:0a:01:dd:9f:81:76:ac:34:1a:35:d2:2a:da:f8:
c1:a4:81:5d:e4:ba:35:5e:c4:93:83:35:c2:70:ec:
3a:5a:87:80:bf:82:be:02:e8:8b:2f:cd:9e:63:14:
93:ff:13:0e:f3:99:63:96:ce:4a:d0:d0:60:46:aa:
b7:ba:84:c6:84:5c:08:40:bd:f9:0f:61:9d:82:9a:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:50:00:23:F9:17:BE:28:66:4D:7F:8F:B1:73:C6:50:D7:87:30:AE
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0d:7a:46:9e:85:5c:cc:92:11:20:03:0b:6d:44:fc:c9:e0:
1f:9b:7f:db:71:fc:fa:17:3e:62:db:c8:5b:04:4d:f9:52:2f:
51:6d:d4:7c:75:9e:92:df:84:50:f3:0a:46:d3:5f:40:61:29:
db:0c:19:c7:4c:9d:5d:c7:10:a8:16:2b:33:91:81:46:68:95:
4d:9d:21:65:de:d4:34:4a:ab:dd:4d:0f:f3:3f:f0:08:6d:36:
8e:a6:f4:10:63:f9:46:f6:62:c9:7a:02:fe:c3:70:e5:7d:73:
5e:9a:e1:7f:8d:c2:77:35:45:e8:f6:f6:28:56:74:6f:81:80:
c2:65:d8:67:f5:ec:1b:2a:6c:ca:bb:53:12:6c:b5:76:13:a8:
90:65:e0:a8:18:5b:80:81:16:45:52:c1:b9:77:b6:b9:29:8e:
38:2a:96:ec:42:6d:47:29:cc:7d:7c:ec:a1:28:e0:8d:84:f5:
cf:bf:b7:ac:98:a7:94:8b:77:55:be:3d:ef:e2:c0:da:8f:71:
23:47:a7:26:97:84:46:77:0f:a4:b8:7d:2f:ad:5a:27:86:df:
2d:21:04:cc:eb:bd:d5:0f:c3:9f:d1:30:3a:73:53:6b:2c:f2:
d1:a8:15:9c:65:91:34:31:13:88:f6:d5:bf:06:15:18:f7:ae:
15:8e:6b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:00 2026 by rpki-client