
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier: 5IPDmWI+bXWR/GtCW71akUDLjl3M+FwRZ0YYgph160A=
Subject key identifier: 7F:D5:F1:25:CC:A8:1C:FA:DF:19:C3:DE:B2:7B:35:B7:01:8D:E4:72
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019CE4B5EA2A496BCECAD54DAF57D2D62814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number: 028D
Signing time: Fri 13 Mar 2026 01:00:53 +0000
Manifest this update: Fri 13 Mar 2026 01:00:53 +0000
Manifest next update: Sat 14 Mar 2026 01:00:53 +0000
Files and hashes: 1: 1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa (hash: CfjF3SZAdjPqJOrdB0hBuqX8UJ9deq/HcLszHmoUDcg=)
2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: 2WltUuceCooUMAmIPZiTxaS6RtnMF1Q7p1y2Ttx5yME=)
3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:ea:2a:49:6b:ce:ca:d5:4d:af:57:d2:d6:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Mar 13 01:00:53 2026 GMT
Not After : Mar 14 01:00:53 2026 GMT
Subject: CN=7fd5f125cca81cfadf19c3deb27b35b7018de472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:e5:4b:fa:ec:11:7e:72:98:df:04:e4:7d:
0c:91:67:5a:0a:aa:3c:11:e9:96:6b:9f:b8:3a:00:
d4:1a:b9:8b:82:51:e1:12:08:4b:c1:ee:64:9c:bf:
33:35:cf:fe:9c:8a:49:91:f6:c6:c2:fa:ad:ce:9d:
80:e8:2c:6a:b2:7d:c4:14:9c:23:a2:a2:60:3e:eb:
b5:73:d0:f3:22:cb:25:3d:d2:1e:a4:43:28:72:17:
5e:75:f6:07:fc:fc:8a:5e:40:f0:ca:15:96:3e:02:
59:c4:a7:1b:3f:da:20:a3:bb:82:9a:9f:66:a4:cf:
e9:e7:bf:1d:b6:ad:33:98:36:3f:e6:90:de:b9:26:
a2:6f:cf:92:98:87:77:1f:18:a2:44:17:4c:21:a8:
37:4b:c2:93:38:5c:73:50:84:4c:2a:df:49:53:93:
06:7b:ae:86:9c:df:0d:83:b0:93:b0:ce:de:7f:aa:
f1:86:63:cb:da:df:f8:e1:3f:b0:f9:16:cd:11:9c:
bf:0f:14:38:82:d3:08:ea:19:ef:ea:2f:36:7d:c1:
41:38:e5:6a:c2:da:62:03:ac:d6:cc:52:31:bd:52:
53:ef:c5:ff:36:52:98:ac:ff:b6:a5:58:21:b6:8f:
79:e4:b4:5c:31:46:9d:66:53:90:8f:d7:c7:5d:2e:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:F1:25:CC:A8:1C:FA:DF:19:C3:DE:B2:7B:35:B7:01:8D:E4:72
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9c:c0:98:aa:81:a6:20:5f:d0:76:b6:9f:51:0b:d5:5c:2e:
05:df:93:9e:23:41:bb:07:99:7a:50:0e:2b:64:4c:e7:f4:5c:
a5:07:aa:99:5d:bb:52:b9:ee:d9:31:c2:b8:9d:4e:d8:f5:ab:
76:09:52:35:4b:ba:7c:cc:ea:04:46:8e:01:45:88:c5:4c:d1:
71:25:e2:f7:d0:90:c2:44:6e:e1:e2:58:df:61:f5:36:ad:9d:
a2:3b:0b:59:bb:3d:60:01:af:ee:5a:ea:99:65:40:41:7b:10:
7f:64:0a:e7:1f:e4:48:33:0f:b8:fe:43:29:d4:47:d9:89:a8:
7e:4c:5b:ab:a3:73:4a:26:ac:d2:23:83:d5:ad:4b:31:da:33:
bb:26:b4:eb:f1:59:e3:23:fe:4d:9e:2f:99:b0:4a:87:c1:c1:
d4:d2:47:be:b1:46:9c:60:64:f3:26:bf:2b:d2:49:d1:a1:35:
ea:e9:e6:f9:5c:2e:55:d6:67:36:2c:95:a0:ce:29:d8:b8:dd:
ac:45:b2:51:c7:d7:f5:fb:50:6b:8d:54:3d:3a:84:b2:0c:c5:
9a:df:fb:9d:64:c3:0d:40:49:f1:06:94:5e:ec:0a:1f:ee:13:
c6:4d:b7:b2:70:b3:63:7f:5e:af:36:52:08:4d:c4:bb:28:3d:
37:91:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:23 2026 by rpki-client