Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: lWqbJTfANGnNB3IaeMM8WIV+/WO3O4duhQQavqF6fz8=
Subject key identifier: 5F:C5:53:02:D9:72:2A:15:34:40:46:C0:00:F4:A4:69:7C:05:0D:6C
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019CABD9A22388EEA5DA4ABD81015395FF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: h+6kWhs4htWoSvZaqzu4ykngjcngOlhRaIS12kS6kr4=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a2:23:88:ee:a5:da:4a:bd:81:01:53:95:ff:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=5fc55302d9722a15344046c000f4a4697c050d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:55:60:27:8a:b9:03:0a:a6:01:57:65:ce:
08:be:85:14:d7:4f:32:39:4c:c1:e8:d1:ef:51:34:
16:36:4c:87:ec:51:2f:19:a6:9e:5e:4a:07:12:00:
dd:ed:0a:a4:83:9c:e0:35:b5:55:4e:25:cd:a4:ff:
73:6a:82:6e:8c:2d:1a:0e:d6:42:99:e1:6e:61:71:
64:98:bd:e2:47:4c:ef:b3:ed:73:b6:aa:40:ae:44:
8a:c2:52:e3:e5:b5:97:99:85:67:25:eb:3c:be:d9:
b5:25:3b:b7:bb:51:18:9a:e1:79:29:75:8c:86:5a:
57:e6:dd:85:f9:b7:90:dc:7c:14:80:62:aa:b2:11:
5d:f6:70:79:2b:ec:11:be:fd:61:2a:cf:df:63:83:
a5:05:4c:50:4c:21:7d:f4:98:17:f2:a1:eb:ce:6a:
de:6c:03:2e:5f:2a:6b:c3:be:25:a4:06:b3:68:b5:
7f:10:70:5d:3c:ea:14:ea:81:1f:11:d0:13:d7:48:
2c:db:05:b3:72:cc:c4:44:19:b4:31:05:3b:c7:0b:
3d:8a:2e:fe:c4:34:1f:f9:e4:4f:d9:b4:30:eb:d3:
31:ed:ca:d5:e9:ad:90:00:8f:57:1b:37:88:db:8c:
49:3b:cf:e9:4a:15:30:9e:03:fa:5b:8a:69:c3:c4:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:53:02:D9:72:2A:15:34:40:46:C0:00:F4:A4:69:7C:05:0D:6C
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d4:5b:67:5d:1b:8a:e1:1a:e4:29:cc:60:c7:32:a4:5f:a8:
4f:8d:9e:da:6c:3a:b9:cf:0f:2e:92:6d:6d:3d:d7:6a:1b:38:
82:72:dc:c6:90:4c:31:4c:28:a2:f0:fd:99:32:46:de:d2:dc:
a9:4d:bd:fc:ea:f1:36:30:91:1b:8b:98:b2:5a:4a:c3:ce:30:
9b:43:0c:c8:fa:56:6a:90:22:ac:73:b8:54:77:d5:f3:04:aa:
3c:7b:2c:a4:e3:6f:12:43:5a:ca:8e:44:c1:1e:8c:94:ca:8b:
49:68:ef:45:f3:bb:d9:8e:e1:3a:2b:24:9a:a6:24:3b:0a:42:
11:48:30:69:6d:f1:c9:23:f4:22:27:9a:0c:5d:20:76:41:92:
80:c7:0a:3a:35:36:e0:0a:3c:99:19:4d:25:b2:30:2d:7e:5b:
12:04:76:e9:ac:02:58:2a:8c:a5:e9:61:c5:68:61:5b:f0:4c:
cc:60:0f:c4:e8:4d:bb:15:27:ef:0c:aa:e6:45:65:cc:ae:02:
73:60:47:ad:81:fc:67:19:ae:dd:c7:ca:bc:11:c0:da:57:88:
14:5e:b4:a1:46:6a:eb:11:0c:6e:62:f8:43:91:d7:56:cd:4b:
8f:02:ef:d4:83:24:eb:0a:00:e6:fa:50:d4:5b:88:5f:5c:a8:
5d:a5:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:55 2026 by rpki-client