Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: 4uuGkP/RGSZW3GJqRgEvATxVkpc0JreoiXDNhP/XUuY=
Subject key identifier: 16:09:86:80:AF:82:2F:52:A8:17:55:1A:11:37:FB:D2:12:E0:95:7E
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 019CAA8F676D3F8D7A350DD88E88A5E38CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: e5AN9CeaovW_-N5WzIokstkAxl8.roa (hash: sBlMBRCxbZS22yXbnNUeVngysMGnAhuVKxhszpfbMQc=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: ybFsw/yFzNfStYRhVLDq2qGtYtVdxjUrSW7xLl4ydwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:67:6d:3f:8d:7a:35:0d:d8:8e:88:a5:e3:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=16098680af822f52a817551a1137fbd212e0957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:dd:8c:64:d4:43:dd:70:d9:a1:02:ab:9c:
5f:68:82:c1:32:0a:10:22:ae:ea:ff:a9:29:7f:e7:
23:0d:af:15:30:8f:75:42:52:79:41:0d:ea:4f:80:
a1:1d:2b:be:84:69:47:90:f4:f2:4a:cd:30:8c:df:
8a:3b:e7:15:8a:c1:7a:e5:47:63:62:be:0f:b9:d5:
71:7e:e8:07:65:69:24:b6:a7:e7:26:8f:55:2a:1b:
f3:b7:07:d2:f5:87:c5:c8:a1:e6:00:44:42:9b:cd:
ca:06:3c:3d:5f:58:76:cc:1f:2d:c9:89:4a:96:ae:
b4:ea:7b:19:42:c2:da:0b:f8:90:dd:04:b3:bc:73:
c9:e1:a0:65:f7:ed:3d:2e:26:7b:18:c0:62:b5:b4:
cd:89:e5:3f:04:0c:97:01:3c:14:b2:4e:28:c3:cf:
b4:81:5c:23:73:9d:10:54:5b:c9:91:7b:c5:a9:f9:
ef:4c:0a:c7:92:a9:ce:79:3a:8f:75:83:8f:7a:ed:
51:a9:46:f0:1d:db:a3:2e:d7:21:79:6e:16:0f:a8:
58:1a:ba:e2:c8:f1:0d:99:4c:71:bd:3f:9f:df:64:
df:ae:50:ba:e8:a3:46:2a:43:26:18:40:5c:2a:6c:
d7:51:98:e5:13:a6:36:96:fc:ea:29:01:de:67:76:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:86:80:AF:82:2F:52:A8:17:55:1A:11:37:FB:D2:12:E0:95:7E
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:61:bb:33:d8:75:e7:a3:6d:38:3c:3f:b0:45:b0:6a:e2:ff:
e3:99:1f:b5:eb:85:25:08:2a:e3:4f:ad:10:ad:31:c9:f1:83:
97:60:36:19:5d:10:63:11:ea:49:79:0b:2f:5d:ca:82:c0:3a:
87:2a:fe:ff:cc:0b:8e:36:6f:12:b7:2d:62:66:ae:ce:34:29:
51:16:0f:05:16:00:e3:30:13:0f:5b:33:57:65:25:6e:32:30:
df:00:42:57:22:a1:99:7d:c3:d4:b4:dc:b7:de:e4:c3:73:c7:
33:d0:0f:d2:5d:c2:ac:c6:81:d7:a7:02:c8:94:fe:0e:e7:fb:
30:96:a4:d6:39:79:33:0f:4e:49:55:82:17:01:1d:e2:c3:f1:
35:f7:69:20:9a:70:ab:9f:ea:bc:78:1e:44:07:e1:0c:d7:ae:
49:40:65:2a:be:b9:09:f4:99:8c:5c:79:72:92:b9:b2:dc:6b:
2b:ca:12:59:a4:75:9d:b4:3b:76:57:ca:da:54:4a:5d:b8:da:
d4:65:7e:64:a9:91:6b:30:98:14:e9:ad:e8:4c:22:56:bd:8b:
43:09:50:0e:a2:aa:d3:3a:ae:9f:1f:7c:24:2e:28:e4:2e:03:
05:e3:a8:58:7b:1e:73:d3:9a:5e:22:02:52:b9:66:d3:0e:06:
51:3d:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:16 2026 by rpki-client