Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: LrkolnOH+SfclV6AOzJPx4iQxSfTqFuYfAjH0cTThCQ=
Subject key identifier: 99:26:E3:21:67:06:C4:D6:1F:F3:55:D2:95:68:3D:9C:99:46:37:FF
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019CAA8FC584398A4F18F2126F1114C282F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:14 +0000
Manifest this update: Sun 01 Mar 2026 18:01:14 +0000
Manifest next update: Mon 02 Mar 2026 18:01:14 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: HmQA52HXZKyeobFZ1X5KT8HKd58AEpyg5VRb+8ZbAiI=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c5:84:39:8a:4f:18:f2:12:6f:11:14:c2:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Mar 1 18:01:14 2026 GMT
Not After : Mar 2 18:01:14 2026 GMT
Subject: CN=9926e3216706c4d61ff355d295683d9c994637ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:55:9f:89:7e:80:9d:a4:42:07:71:5c:bf:
f0:6b:34:e9:15:00:b9:f2:9f:dd:8a:af:dd:a9:60:
88:59:17:4b:82:a5:c1:f0:df:55:63:59:06:43:20:
42:ce:b5:3c:1a:af:fd:fa:00:20:b7:93:eb:14:92:
33:90:0c:37:76:72:49:ae:5b:35:b6:7e:73:ef:87:
3c:ce:99:ff:ea:c8:39:b9:7c:bc:aa:9e:b6:f9:1e:
e0:4e:43:88:5b:98:7e:3b:0b:cd:a9:9b:70:28:0b:
d3:87:0d:19:79:86:3a:36:63:fb:16:88:78:34:26:
94:73:64:41:1b:26:6a:26:0a:15:1a:e3:bb:68:2c:
db:02:a2:2b:a3:de:4d:14:1a:21:8d:a3:aa:a4:75:
75:29:eb:c8:2f:6c:bf:2b:e4:64:66:c1:9f:bb:e9:
fa:7f:99:a0:2b:94:20:2f:af:74:59:5f:e9:9e:e3:
78:be:72:23:96:0a:ec:07:ba:f7:de:ca:8a:92:73:
78:fd:ff:9e:6e:dc:b0:09:c7:55:55:88:46:a4:89:
93:eb:a9:39:e2:ce:80:82:c4:5f:dc:7f:99:19:25:
df:12:dc:bc:05:05:c6:26:e1:95:bc:7d:11:87:7c:
b9:fe:f2:1a:d7:10:e0:4b:ee:2d:01:20:86:a1:23:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:E3:21:67:06:C4:D6:1F:F3:55:D2:95:68:3D:9C:99:46:37:FF
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7c:83:a1:68:24:83:5c:25:6f:07:4f:9b:d9:19:d5:e3:a9:
fb:b9:c8:4d:62:f4:0d:66:65:41:6d:2c:38:55:ae:2a:fc:76:
d2:a6:51:29:7a:9c:31:a8:52:df:81:63:49:aa:54:90:75:34:
14:c8:32:89:e6:c1:71:ec:8c:2b:d4:a9:e8:ba:67:e3:61:d1:
8a:9d:c6:da:b3:f2:49:cb:5a:f2:cf:82:6a:e3:c4:57:e0:d4:
e3:4c:cf:f3:e9:b9:41:f9:4c:19:30:e1:cc:cb:8c:12:e8:a7:
07:83:69:2f:fe:6b:d8:45:ab:c8:12:96:e9:ac:86:5b:b8:da:
27:c5:e0:5f:99:d1:3e:07:46:c0:23:06:5e:e6:60:f3:5f:08:
7a:86:9c:86:92:71:a7:62:14:c8:31:d6:67:3f:1e:95:f7:ed:
43:e2:91:18:8b:89:34:1e:32:5d:43:d1:de:c4:02:99:fd:1b:
e3:0c:4d:b9:cd:b3:64:98:b2:2f:c2:88:46:03:f9:d4:74:5b:
dd:0d:0d:0b:df:00:49:9c:c4:c3:0d:56:88:fc:f6:b5:23:be:
6a:68:66:04:cb:6b:8e:e8:36:2d:48:5a:18:4d:0e:c9:7a:02:
70:09:27:b9:1e:14:09:a9:00:a8:56:0f:25:c9:ad:3c:93:5e:
1b:1d:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:38 2026 by rpki-client