Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: zn2cTuJuuvNw9Tl9W7wRPAsuVWFr2uhjwXknLrWJ9Z4=
Subject key identifier: D2:CC:25:5A:C0:0F:A1:91:FA:17:FD:BD:47:3E:50:32:18:68:BF:09
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019CBEF22CFA76EF33090BB7ED1357D27859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0A5C
Signing time: Thu 05 Mar 2026 17:01:08 +0000
Manifest this update: Thu 05 Mar 2026 17:01:08 +0000
Manifest next update: Fri 06 Mar 2026 17:01:08 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: Lm5KmanFG9MIGI2WfmoD5QB3h0PxUeDjeC7B6BD8hAk=)
2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:f2:2c:fa:76:ef:33:09:0b:b7:ed:13:57:d2:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Mar 5 17:01:08 2026 GMT
Not After : Mar 6 17:01:08 2026 GMT
Subject: CN=d2cc255ac00fa191fa17fdbd473e50321868bf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:e9:99:bb:e1:b2:d3:71:a1:17:4a:1d:b0:
11:54:fa:4e:6e:04:87:41:14:f6:15:da:4f:a8:58:
f8:98:84:d6:78:89:7a:f4:d7:a5:4c:67:0d:c7:6c:
cf:c4:31:4a:12:cf:fb:e0:89:ad:67:18:1a:5f:56:
a8:aa:39:65:56:f3:a6:3a:04:ed:a1:cb:f5:d3:e4:
12:e5:06:5b:0d:99:22:3e:6d:57:39:d7:f6:c3:11:
3a:71:f7:c2:ff:f9:c1:1f:7e:22:61:1b:49:c0:1b:
11:cb:32:30:d5:4f:78:dc:0d:31:95:78:f4:f9:0b:
e8:6c:d1:02:64:67:66:be:87:7c:99:f8:fd:fb:ab:
e2:51:ef:5b:31:3b:0b:4e:60:7b:64:2c:7c:84:47:
af:06:b8:53:7f:5e:3c:12:35:e2:0b:a4:f3:a9:2c:
86:d2:9d:5e:de:1b:c5:4d:c4:26:56:a0:ed:fe:ed:
3e:1a:38:02:e3:85:38:83:99:45:96:60:98:cb:62:
38:2e:05:49:dd:c1:17:2f:c0:68:f5:f8:6a:2e:e1:
0c:4d:5d:48:57:34:6f:60:30:fb:6e:93:ad:a6:36:
26:8e:76:c0:ae:35:e9:5b:b4:8e:2d:b9:6b:6f:65:
27:ea:83:e7:1a:62:b5:08:6e:18:43:36:c6:46:f3:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:25:5A:C0:0F:A1:91:FA:17:FD:BD:47:3E:50:32:18:68:BF:09
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e9:b3:25:91:5f:b5:3c:c2:38:eb:30:d7:61:a7:27:04:62:
50:44:f7:ec:83:41:04:a0:0f:f0:c1:86:6b:c2:87:5f:51:2c:
13:41:f3:b5:16:66:b2:de:34:1b:1d:35:10:13:b8:80:55:82:
ff:95:8f:01:73:e9:6a:d5:73:e2:28:8e:fa:d0:7c:04:21:fa:
e6:a6:9f:63:3d:61:b7:18:d1:1d:97:9e:8c:94:95:7d:41:d7:
8f:1e:5d:dd:b0:24:47:52:39:33:cc:ed:0a:f2:08:cb:bf:f2:
ed:43:09:98:b9:20:e6:b2:55:ad:33:5c:34:9e:6a:92:c5:2c:
52:26:4f:61:95:00:27:2a:b3:a3:43:02:cd:d2:4a:2b:de:99:
9b:02:f6:f0:1b:36:d7:1d:5e:91:25:c4:cf:6d:35:2d:7d:c5:
7b:08:a7:41:c3:30:ec:86:ee:92:c4:69:a9:ff:71:b7:15:55:
ca:fd:b2:24:87:2c:2d:53:f1:74:1e:cd:31:f7:e0:aa:50:d9:
b4:54:6c:ab:45:19:88:c2:86:27:3d:ec:06:c0:02:11:a3:a6:
b4:65:13:e9:ee:9c:55:84:15:d2:b2:90:42:d3:aa:d6:33:c0:
01:3f:1c:40:71:1a:5d:b9:27:0d:4a:1a:ba:ce:98:37:c2:cb:
b4:97:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:17 2026 by rpki-client