Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: iV9rOVLpRcAqFhsrGjyKs4TQHgwDayIDGsYF9+fmgJQ=
Subject key identifier: 34:3A:29:E0:8C:DA:C3:4B:7F:E5:CC:07:F2:A3:E6:B3:4F:DD:8B:09
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019CABA244B01831DBF12BF9BDC44F8D5D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 1323
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: ASVC4en+Tt4wLM4LbYeCHQs+NhZoB9ig5U33pIaePRg=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:44:b0:18:31:db:f1:2b:f9:bd:c4:4f:8d:5d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=343a29e08cdac34b7fe5cc07f2a3e6b34fdd8b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:8d:3b:a0:5d:86:36:d0:09:3c:7c:11:9d:
8b:9b:f0:77:39:e0:85:1e:f6:3b:20:02:49:eb:76:
c9:57:3a:ec:02:e7:63:43:b9:b6:69:63:85:3a:2f:
ec:4f:f4:c1:7d:13:05:d5:fe:9d:e1:92:32:f6:09:
68:89:0a:60:c7:fa:de:21:eb:98:98:62:46:bd:9a:
77:4e:a7:f3:bb:6e:12:33:b0:dd:e0:e9:c8:9d:e0:
6d:0b:57:cd:10:0e:90:0f:d6:a0:41:c1:8b:2d:c6:
2c:58:1e:9b:77:ed:52:9d:e7:3e:70:75:06:d7:2c:
3b:d7:73:75:52:6d:6e:19:c7:12:ee:fc:e9:3f:11:
80:a3:3c:b1:7e:e1:67:15:eb:50:c4:64:c2:8d:08:
d4:45:7d:ef:e9:d9:1f:26:2b:8b:c1:db:79:ff:91:
77:66:1d:ed:19:8b:6c:eb:cf:98:c3:b4:c4:ff:f2:
e2:ea:cd:d9:bf:93:40:82:d3:60:73:bf:39:75:4e:
c7:a1:62:15:75:49:77:90:eb:c6:56:d0:18:4e:b5:
54:bc:f7:0a:16:dc:2c:bf:91:25:e0:7d:53:e2:c9:
40:2b:ff:83:04:a6:43:f6:e2:1c:68:cd:87:d1:57:
84:a2:7f:2f:b3:73:0b:2e:74:1d:0f:10:c3:15:ab:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:29:E0:8C:DA:C3:4B:7F:E5:CC:07:F2:A3:E6:B3:4F:DD:8B:09
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5a:03:ae:73:9c:17:66:2e:b7:d6:74:70:6d:53:50:3b:ad:
7d:92:b3:be:85:9a:47:88:c7:4d:79:17:74:1c:fb:f5:ca:ab:
e8:c9:9f:dc:65:02:62:11:13:92:90:69:64:a1:1d:2c:ef:d8:
1c:7e:4d:a2:eb:80:fd:a2:73:03:ec:c6:75:db:88:df:76:6b:
5f:92:69:fd:93:02:68:1c:5c:cd:13:eb:a4:1f:38:69:9a:87:
7b:38:cc:98:61:dc:3d:a3:91:b2:49:70:17:40:d3:bd:ca:6a:
c5:6f:d2:3a:46:87:4e:f7:02:5a:6e:11:f3:92:c1:5c:38:26:
8b:f3:88:79:e6:8c:a8:ef:24:90:2f:2e:6a:25:7c:96:c0:e0:
ec:6f:dd:6f:4f:1d:3e:22:8f:6a:66:89:42:47:a1:4b:88:3f:
68:26:55:49:b6:1b:5d:da:ca:7e:3a:1c:68:55:c4:2d:df:a3:
75:2a:e2:37:d7:d9:47:dc:2a:29:31:ad:99:81:75:f3:1b:2b:
01:0d:c3:a6:78:89:49:82:32:85:55:71:9f:27:b6:61:5f:44:
c6:e3:99:a4:72:3d:77:0f:71:a6:1e:b7:04:8a:4a:85:0a:c8:
90:a7:d9:3e:ee:64:d7:3b:84:d0:b1:c3:37:47:7e:79:2f:71:
5d:fa:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:18 2026 by rpki-client