Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: OSRL3JAH18WOlGLCS5OFpQkgEKYxJOJ539GUNe3+Txc=
Subject key identifier: 5C:E0:28:5D:47:83:49:0E:2C:A8:31:89:2A:16:09:3D:1A:89:07:FE
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019D39098DE069009F4387210B8E4515AE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: O15PqBbAoMHMP/uEdNsMo0rVfvgS9OXO2fnNO2MhiI4=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8d:e0:69:00:9f:43:87:21:0b:8e:45:15:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=5ce0285d4783490e2ca831892a16093d1a8907fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:e1:e5:77:d1:3c:2c:45:15:6d:90:26:d4:
ab:54:f2:6b:a0:6f:ca:47:84:34:c0:fb:ab:3a:0a:
e1:fe:e0:84:6c:68:cd:25:5b:52:e3:0c:df:ab:3e:
a3:b4:5e:4e:65:8b:ca:a8:cd:c6:eb:57:51:3a:72:
a3:4d:45:81:59:73:a7:cc:e4:2e:da:c7:b6:26:e4:
4e:a1:7e:b9:2d:09:39:a5:e3:68:2d:1f:83:85:b1:
c6:9b:57:69:a4:5a:e8:0a:b8:70:85:11:0a:e3:7a:
20:65:89:ad:3d:62:94:56:27:b0:8a:c7:f4:22:ce:
74:96:45:73:2d:35:b5:9c:22:b6:82:07:06:7e:60:
90:a8:32:4f:fd:37:aa:e1:32:ff:ec:f6:ef:c1:ef:
56:64:ae:c8:aa:fd:3f:33:fa:5f:31:df:4e:7e:2b:
8a:67:08:6a:8a:0a:e3:55:b2:ad:8f:de:99:d3:93:
4b:2a:d6:89:47:5f:c0:88:98:91:63:75:60:44:9e:
4e:ec:5e:2d:8b:b4:81:35:6b:ec:37:10:ec:ab:65:
a0:99:05:44:a9:4d:db:06:df:bd:5f:b3:18:ad:cd:
99:67:3d:41:d8:f3:4e:e2:7f:c2:22:88:2d:da:70:
12:e8:f3:92:1c:74:84:64:06:14:15:7d:ca:17:8f:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:28:5D:47:83:49:0E:2C:A8:31:89:2A:16:09:3D:1A:89:07:FE
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:b7:ed:9d:c6:5d:6d:45:5b:f3:71:b0:c2:f5:53:a8:08:
94:f6:3e:a2:7c:aa:b9:82:7c:93:58:81:b6:e8:9c:da:8c:60:
bd:28:38:3b:ba:35:98:80:af:f6:85:ca:26:73:35:a6:60:b5:
dd:87:0c:e8:60:08:a0:82:eb:93:52:dd:2a:1e:01:48:fa:08:
1e:f2:07:46:3c:8f:b0:d3:ce:51:92:3c:20:b9:d2:aa:21:d3:
cc:cd:ef:2d:23:52:18:db:f2:21:30:7f:86:48:20:48:2f:54:
4d:46:a5:0c:26:2f:a9:69:2e:c8:05:f2:97:3b:be:52:8d:92:
30:bc:3a:4a:9c:bc:e7:13:3e:c7:b6:6e:fb:29:7d:49:29:da:
a4:bd:b9:8f:6d:0b:88:49:67:74:a7:40:08:6b:96:49:dc:f1:
43:0a:58:3e:19:ac:c1:39:ce:2a:62:59:81:06:63:f2:48:f2:
99:4a:b6:6d:29:b2:cd:e5:c2:63:21:4f:d6:b3:f4:81:ed:16:
44:b8:c5:59:ff:45:58:8e:a9:f2:70:55:9a:55:0d:c3:c5:e8:
70:19:80:15:9b:59:26:b5:8f:be:b4:08:ed:1d:5a:15:50:5a:
04:6d:7b:f0:95:a5:48:06:86:10:da:26:71:56:3b:d6:5c:5b:
2b:97:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:53 2026 by rpki-client