Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: 6avbsnXxCFQV7O+Qi/hgDe/MV4iwIcet0fn0sTsCRfk=
Subject key identifier: AD:68:2E:36:BA:DF:E0:75:28:4E:89:14:7D:25:D8:6F:EA:59:11:2D
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019CAB6B2CECB71A7E4EF1A064209E6B1025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0598
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: KuDTqBTdnn8YLlZIf2qV9LAd+rxbHvWcZH2f1gHdb18=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2c:ec:b7:1a:7e:4e:f1:a0:64:20:9e:6b:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=ad682e36badfe075284e89147d25d86fea59112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:5b:49:36:21:a7:ac:38:02:ae:48:29:71:
17:09:7c:4c:b7:0b:52:59:e6:ae:d4:66:f9:bd:f7:
8c:f7:88:07:aa:4d:3b:9f:a7:18:8e:58:bd:5b:4c:
84:3b:74:77:08:d6:11:f6:83:e7:c5:6d:af:07:08:
29:d4:69:68:b1:da:31:ac:3a:7c:4d:64:c6:5d:1f:
78:a1:24:e1:bc:4b:8d:74:f5:6b:bc:46:e1:89:c3:
35:18:6a:63:6e:76:38:e3:43:71:c6:50:29:44:4b:
8a:e6:3c:d3:9f:7a:ee:bf:5e:2a:2a:07:89:90:99:
2d:28:54:9a:6b:9d:ae:fa:4e:27:48:77:48:3e:59:
6a:75:be:63:2d:23:70:8e:ec:d8:fe:a5:45:cd:16:
82:63:8b:79:64:1e:bf:f3:94:1a:aa:7e:be:89:5b:
f5:44:96:e4:35:fe:0b:31:b9:09:2e:4c:55:61:f0:
47:88:5f:9c:84:53:66:92:67:e2:50:41:3a:b1:14:
09:a5:b3:0b:a2:e3:ed:7e:44:92:20:2a:d2:30:72:
5e:03:e4:d8:b2:7a:60:53:fb:ef:b5:4c:b2:3c:23:
49:44:5a:64:d6:b1:c9:be:3e:f3:ac:5d:bb:ce:d1:
b5:8d:a4:a8:69:03:50:52:04:a9:82:bd:d5:cd:ce:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:2E:36:BA:DF:E0:75:28:4E:89:14:7D:25:D8:6F:EA:59:11:2D
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d8:17:1d:ed:7a:b5:9f:83:a5:60:af:5e:ed:c4:47:04:5c:
03:82:8d:bd:67:d5:d4:56:41:9c:48:65:fb:29:7a:d6:81:51:
5f:52:39:3f:0d:d1:0d:d2:be:49:d9:59:66:e5:a2:ee:08:f1:
79:3f:79:63:6e:64:57:b6:c0:4e:f0:ff:d3:21:d8:00:ac:7f:
3a:39:41:a2:07:93:bd:ec:e0:d6:85:33:9e:fa:68:50:a0:45:
38:ea:a8:97:14:e4:c3:02:ec:dc:e5:85:be:bb:98:7a:1f:7e:
cc:95:24:15:6e:fd:6b:f8:23:66:7b:2d:65:80:ab:b8:f7:5e:
73:64:2d:26:05:5a:b5:ac:5f:76:92:da:9b:d9:e8:96:0e:98:
0d:2e:0a:9b:84:e0:3e:67:9e:5f:d1:5a:bd:c6:b5:c7:75:1a:
34:29:39:02:40:ea:93:2b:50:e7:f8:35:90:74:7f:ae:28:3f:
18:52:a1:3f:9a:0d:5c:b0:68:d6:7e:8e:5f:f3:65:cd:e9:98:
7a:99:e0:0f:5d:38:66:ff:87:97:61:a9:ed:41:61:33:e6:52:
02:cf:e3:a9:26:41:a4:a0:bd:94:08:1e:68:4c:15:8d:1d:e3:
97:46:55:35:06:46:b9:7d:eb:37:ef:bd:21:94:3d:58:b9:ee:
05:9b:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:13 2026 by rpki-client