Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: eWhz1qD3dJIjbapX8+yTnjNnjMHc2wBiXprVblMICKw=
Subject key identifier: 6E:35:5E:85:2E:C8:4B:16:3C:D0:E8:5C:6E:5A:19:AC:FB:FD:ED:4E
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019D389BEEB6C73E26A0FD9EC0BB7CF34B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: Y7IJqUxsOvnWhGSmWybZd8bNeDf5nEIf7YfYRK6OKus=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ee:b6:c7:3e:26:a0:fd:9e:c0:bb:7c:f3:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=6e355e852ec84b163cd0e85c6e5a19acfbfded4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:ed:40:5f:1e:ad:48:5d:06:7e:83:b7:dc:
9e:08:e4:5d:ca:a8:31:2c:04:07:a7:eb:57:76:b8:
f5:c1:b1:af:14:c3:a3:96:53:f6:b2:fc:ea:2b:5b:
16:af:da:ed:8f:04:d4:d3:7d:c3:9e:a4:a1:70:d8:
4d:ed:22:2b:d4:ea:e7:ac:b0:92:12:42:28:3d:1b:
bd:43:58:7d:59:a2:db:fe:4d:6d:61:c2:0b:11:93:
e7:19:f1:90:e8:cc:33:23:58:7f:90:b0:a2:94:9e:
e4:27:ab:65:96:ac:56:c3:72:35:04:05:a3:bb:fa:
d3:83:59:5b:c7:c0:49:eb:cb:fc:f9:98:90:59:da:
03:4b:e5:94:53:da:28:c7:8a:96:d9:20:a7:11:01:
7c:11:59:69:03:9b:23:c0:13:87:4d:2e:67:9a:fe:
7e:43:df:fd:47:6b:96:97:ac:d8:3d:37:9b:e8:62:
1e:ca:c3:ee:73:96:6a:cc:5b:2c:af:e1:2c:76:9d:
a2:2f:36:6c:8d:bb:c8:b0:09:2a:61:6e:1e:34:2a:
ff:a0:29:08:3d:d6:42:bd:6d:5b:7c:43:8e:2e:f1:
4e:0f:32:cf:1e:85:55:6c:15:a5:86:e2:73:3e:bd:
5f:e9:d3:55:6e:c4:c6:0a:4d:88:01:82:f0:f4:28:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:5E:85:2E:C8:4B:16:3C:D0:E8:5C:6E:5A:19:AC:FB:FD:ED:4E
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ca:26:e4:c9:9b:a9:e9:a2:3a:55:fc:b3:17:08:0a:e1:1e:
24:73:76:be:61:8a:02:80:3c:97:11:61:89:9e:d6:08:96:48:
2e:ce:dd:ec:11:88:f7:d1:92:ee:30:c9:97:08:60:12:8c:17:
fc:4a:fc:3d:e2:cb:be:80:30:e2:fd:b8:4e:3f:3f:c1:92:6f:
95:02:2e:a4:fb:bb:ee:95:d5:f5:12:c9:d0:3f:37:cb:a5:76:
1b:7c:71:5a:9f:27:60:e1:15:49:62:7a:4e:ac:ba:dd:e9:2f:
de:dd:6f:dc:a4:a3:73:ae:d5:b9:46:3a:ef:73:7c:86:1c:41:
ce:c1:3a:e1:69:d7:10:d9:64:08:a8:3d:c8:ce:58:94:f8:fd:
a5:f5:20:a6:87:07:74:5b:4d:43:bb:1e:d1:14:f2:31:f9:a1:
22:87:5b:5a:1b:b5:60:28:fb:6b:d9:28:04:39:f4:36:aa:28:
9e:d0:42:1a:0b:8f:f7:70:39:37:3f:55:b6:97:55:9d:71:28:
eb:d8:42:c0:75:ca:2f:e1:cf:93:65:5c:49:4d:a4:12:d9:3f:
53:86:81:30:8a:bb:c7:c2:14:11:49:76:fe:65:b0:a4:64:46:
a4:e7:72:ec:64:2a:d5:bc:48:c1:35:75:f3:d3:e9:27:1d:bc:
50:da:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:16 2026 by rpki-client