Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: F9ZhVz8vkfIrv9oNWk4FNMEpH2b43BD0PaN+Op7FvDU=
Subject key identifier: D2:2A:14:53:89:A9:94:55:11:9A:CF:05:4F:6B:7C:F5:4C:A5:34:21
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 019CACB536BC4B23F1BC38531E24047CA1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:22 +0000
Manifest this update: Mon 02 Mar 2026 04:01:22 +0000
Manifest next update: Tue 03 Mar 2026 04:01:22 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: 0g20z1C/XP+Bx86xxyB8K7BU3r1UnvS9G7b/zlsgX2Q=)
2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:36:bc:4b:23:f1:bc:38:53:1e:24:04:7c:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Mar 2 04:01:22 2026 GMT
Not After : Mar 3 04:01:22 2026 GMT
Subject: CN=d22a145389a99455119acf054f6b7cf54ca53421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:33:bf:e8:cd:22:16:ae:28:7e:ef:b5:2a:
32:57:25:74:19:d0:ff:cf:b8:99:b2:8d:fe:db:41:
17:b5:2c:58:af:de:47:60:0a:1c:b1:6c:9b:80:38:
f5:ae:7c:58:58:30:ce:cb:3c:09:ad:6b:8c:40:62:
50:a0:15:99:5c:27:94:d2:c4:4d:b6:5c:c8:24:3e:
8d:ce:69:a4:2d:b7:24:16:26:1e:b2:22:0f:83:fe:
6f:1d:2c:4f:c6:3f:52:ad:99:72:70:b8:83:63:68:
85:4f:18:b1:24:ed:03:b6:a6:0c:89:72:cc:8f:df:
a4:0b:64:a1:67:9e:80:8b:97:5f:80:57:32:d9:31:
39:c6:ae:d0:5b:55:ce:9b:3e:8d:05:29:41:26:28:
11:42:36:c1:fe:42:ee:26:6a:26:0b:44:ed:9e:f4:
1b:e8:aa:6a:7b:23:41:22:93:7d:d0:87:3b:07:02:
07:ab:b8:ee:6e:c3:8e:99:c1:e7:73:75:80:92:a1:
f8:66:17:47:1c:dc:96:24:14:d8:7c:8e:1f:47:d6:
58:14:f0:38:9a:e0:0d:1a:fa:14:8d:9f:7b:e4:67:
6e:dd:28:72:38:11:45:f4:ba:02:d7:c2:75:c8:34:
e7:19:2b:da:cd:69:e4:19:e9:d7:c9:cf:f4:9f:95:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:14:53:89:A9:94:55:11:9A:CF:05:4F:6B:7C:F5:4C:A5:34:21
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:f6:10:57:16:bf:62:22:a3:bd:8b:7f:26:c0:b0:f2:1c:
c9:78:4e:bd:59:d5:c7:a5:b8:d2:d6:dd:b0:87:c5:18:c2:2b:
af:1c:0e:ea:92:0a:94:2d:02:74:87:12:57:b4:38:d4:26:d4:
1b:99:c4:3c:c9:53:00:87:31:b2:6a:e6:4a:d9:c5:f9:91:4c:
75:c0:2e:01:6a:6e:a3:aa:46:ac:2e:df:55:4b:cd:54:76:97:
4c:ad:90:51:63:66:57:a8:3e:b1:e5:1c:29:81:2d:44:e5:9f:
2e:58:4a:4a:66:60:d3:2d:c8:57:43:21:a5:bf:16:21:a3:62:
e1:59:16:1a:85:53:c6:b6:ef:61:d3:4f:48:13:86:b2:a5:0c:
c7:35:f0:30:74:07:70:cd:16:14:e6:e9:a3:ff:1c:4c:2c:64:
7b:fe:b7:d2:a6:6f:bb:d3:f2:45:9d:1f:96:c3:7c:43:81:05:
58:52:41:11:a6:3e:87:55:a7:8f:7e:46:57:28:59:84:6e:3f:
fb:0d:84:3a:af:dd:91:ac:7a:d3:ec:b1:05:aa:57:61:63:72:
3f:22:c7:92:f2:4e:15:02:66:34:e2:2a:55:cd:dc:02:de:57:
eb:03:aa:29:06:5f:97:03:42:53:d7:05:f4:95:4b:70:bb:22:
2b:0b:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:35 2026 by rpki-client