Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: cguJkLOryIfdVMC6ndDzzyWPPbyyANBOsbZlFPKnNN4=
Subject key identifier: 2D:5D:18:71:8E:3F:18:55:79:0B:0E:F1:10:21:A1:F1:32:7E:52:CD
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019D38659A9FDED9E1913CAC3A918148D51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 167F
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: r70bs7IUDcG/Vav3EPCpzphX6kFg3djklvq/uO2s8vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9a:9f:de:d9:e1:91:3c:ac:3a:91:81:48:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=2d5d18718e3f1855790b0ef11021a1f1327e52cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:43:e8:b0:95:00:fd:59:b9:b5:8e:b1:bd:
f6:cf:50:3a:d0:84:fb:e3:5b:78:21:28:c5:7b:2b:
71:8f:75:3a:6b:ef:91:04:bd:29:5b:87:43:2c:23:
b2:f0:33:63:a1:91:4c:ed:3f:a2:6b:99:d3:cf:87:
a0:b1:66:8f:82:30:47:8a:39:1f:8c:ce:14:07:3f:
a8:ea:ea:b8:a9:ca:b2:91:8e:30:62:ca:cc:9a:b6:
de:a8:43:7f:08:5a:8f:3d:a0:c2:8a:f5:5b:09:85:
8b:f9:9f:f7:6f:c5:92:7c:12:65:de:98:c4:85:88:
2d:1b:67:18:13:a5:47:2a:8f:b7:0d:84:37:f7:86:
78:f2:91:85:7d:05:97:94:53:0f:30:4a:f5:54:24:
13:38:57:3d:05:46:3a:5b:4f:c9:36:f1:6b:cb:35:
24:63:63:99:d6:d2:79:ad:6a:3b:37:10:cf:73:fb:
67:64:cb:91:82:78:c7:e6:c2:32:d9:2f:6b:68:57:
2b:8c:6c:87:9f:f1:55:31:95:50:1b:e9:a4:43:b4:
83:8e:da:45:2b:26:4d:f6:bb:1f:c2:3f:32:72:9c:
0d:51:b9:01:95:b7:75:dc:1c:c5:61:7c:34:ae:ac:
b2:41:4a:bb:04:1c:44:85:39:e4:c8:35:4c:cf:a7:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:18:71:8E:3F:18:55:79:0B:0E:F1:10:21:A1:F1:32:7E:52:CD
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:56:d8:0e:f1:9f:e3:f4:4f:97:6d:3a:74:57:46:c1:ad:3f:
25:c1:67:4b:b5:4e:02:49:e0:f4:d1:8e:01:0f:9c:b6:08:13:
13:8a:e9:63:65:41:47:01:c3:7f:8c:f8:e5:39:4b:0f:25:89:
44:ff:95:9b:76:dc:aa:11:c7:0d:a7:f3:ba:07:e0:34:1a:62:
45:52:5f:92:0d:52:0c:e9:b6:72:d7:31:5e:fd:39:95:4e:28:
88:91:47:f7:28:3b:74:d4:de:26:8b:30:94:d1:ea:c9:91:0e:
3d:9b:86:ef:e6:d0:a9:dc:b3:e0:6b:e1:46:aa:8a:85:e3:c4:
12:3f:d8:07:d5:19:e4:d7:bf:b7:d9:a7:e5:8d:da:7d:61:d9:
c7:7e:09:45:6d:78:3a:99:e9:f1:e7:cf:d4:ff:e7:b1:22:ed:
b1:d6:78:f9:7b:57:64:6a:9a:bb:b4:8d:62:00:99:65:6c:c1:
23:81:28:32:07:29:31:ca:b2:ad:4d:0b:7d:9c:94:39:92:7b:
be:69:ba:8a:5b:b7:e3:8a:fd:f0:2d:eb:0a:de:48:32:09:4b:
02:fc:4a:ea:6b:5f:5b:8a:b1:2a:f9:a6:c8:87:cb:15:58:70:
9a:f8:b8:98:a5:51:67:a2:2f:68:b1:02:f8:74:be:45:16:39:
14:28:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:43 2026 by rpki-client