Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: D6MkWI3Pu+RsjoFBXYhmOUwNttSiCe31r+jXgcttItY=
Subject key identifier: 0B:1B:FF:0B:3A:62:4D:09:67:E1:6F:E6:91:01:64:61:96:4D:21:E4
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 019D3977B12C1E76DE84318A6C40837CE551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:38 +0000
Manifest this update: Sun 29 Mar 2026 12:00:38 +0000
Manifest next update: Mon 30 Mar 2026 12:00:38 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: XXk4DAAaarKVNEzEkqs5Eze8atLpTtzq6eP1VcUlmlQ=)
2: Ini83UPVBFujNi82mFdTbIeLJ_M.roa (hash: hQSzKgBjrspgpke+S+SyF68tGyGh2lr/WJ9Pf7DCYOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b1:2c:1e:76:de:84:31:8a:6c:40:83:7c:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Mar 29 12:00:38 2026 GMT
Not After : Mar 30 12:00:38 2026 GMT
Subject: CN=0b1bff0b3a624d0967e16fe691016461964d21e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:14:0f:a6:96:a3:d5:76:0d:58:b2:3d:06:
2d:20:4b:6d:79:38:66:ee:2f:c4:41:da:91:c4:08:
c1:47:66:50:40:80:67:ca:81:a7:83:44:4c:7d:e1:
a6:c5:f6:98:b6:4a:73:bf:78:6a:62:6a:c3:4b:e4:
b5:3c:b4:bb:16:09:e4:40:d8:21:86:fa:4e:49:6e:
92:f4:83:77:37:02:82:85:86:b8:bd:9a:b4:aa:1c:
8f:34:9c:b8:41:5a:bf:15:a4:2a:72:a1:86:0f:3e:
e9:ec:fa:28:f4:46:b0:ae:00:f4:2a:3e:0d:38:c6:
a4:a6:4b:3b:c1:5b:d9:71:02:91:a5:c8:1f:49:35:
c9:6f:d0:7b:cb:fe:9a:b8:e8:2d:78:ef:04:b3:90:
24:4d:72:b1:4e:2b:6f:be:08:24:37:57:69:1b:97:
4e:fc:dd:b2:c4:04:c3:f6:aa:42:46:74:d8:96:18:
16:53:75:14:bc:ea:d3:dd:03:6b:34:c6:5b:d9:26:
40:76:93:bd:52:bd:42:69:a0:e5:a5:2a:6a:31:1e:
22:31:e6:44:6c:78:42:bc:b7:ee:50:0b:ed:ee:1a:
a6:e7:9f:16:df:b9:0d:4b:0d:43:df:68:b2:20:79:
e1:cf:4a:c3:6a:bc:21:5b:b2:7d:59:45:fd:94:a1:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:FF:0B:3A:62:4D:09:67:E1:6F:E6:91:01:64:61:96:4D:21:E4
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:30:7b:8b:c3:a6:dd:50:6b:cf:94:a0:75:56:f1:1a:cf:f9:
32:e1:db:0c:3f:24:a5:fe:06:c9:b9:d0:4d:ab:9b:cf:50:19:
b4:21:f4:a3:0f:a0:85:8a:d4:45:b9:d4:8e:23:2f:19:01:ff:
4f:fb:6d:3c:3f:6f:5f:3e:19:4e:ab:38:71:ba:fd:c4:10:cf:
14:d9:e8:b9:93:b8:34:99:02:4c:1d:dc:89:76:a0:da:9a:48:
72:5f:01:b5:8c:9d:73:b7:3a:b6:5b:b2:6c:ba:cc:9e:35:01:
bf:d8:c7:de:1d:aa:98:d4:06:29:ae:a1:e6:33:73:7d:00:4a:
c4:00:4f:62:e3:fc:40:8c:aa:06:f0:3d:04:06:1e:81:c7:f1:
62:a3:3e:7d:88:59:f0:71:23:eb:2a:78:98:2a:fb:69:6b:d4:
3d:82:26:7e:79:2e:b9:6d:f2:d5:8b:24:ac:dc:8c:07:57:e9:
4e:a7:f3:cc:a6:de:5c:2c:9b:c3:0a:98:a7:4e:ef:65:1e:47:
66:96:9f:2f:e7:93:5f:99:00:b3:09:c6:c8:d6:ed:e1:a0:b5:
9f:bc:a2:e0:d6:68:95:d2:f2:49:20:66:87:e9:89:48:7e:12:
99:f5:c8:3c:0f:93:95:9c:a8:9e:d7:3e:89:77:27:69:e8:9e:
cd:4f:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:55 2026 by rpki-client