Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: 2y/x/X+RKlAjWwdaM/Hfy/U+VBnhZR4knZlxZ99Zyn0=
Subject key identifier: 40:76:32:41:2C:47:38:AE:5D:CD:07:B1:9C:21:1E:41:28:F9:50:DF
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019CAA21A0F453DC38B6A4AD82C769D2AB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: JCEcC8pIZpoWsMY6Oc3P3LNzXspZLnnwwbwBB8Bx2dI=)
2: pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa (hash: sgsuQe2msoFiMDKKrbbPAUnLjdv7QmZ0qLU2RSe/3FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a0:f4:53:dc:38:b6:a4:ad:82:c7:69:d2:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=407632412c4738ae5dcd07b19c211e4128f950df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:92:47:e4:03:d1:c5:26:a9:57:3c:18:89:
a4:ed:cc:da:2c:64:79:c0:dc:6d:a3:19:58:ba:97:
32:ef:ec:38:60:95:51:15:04:df:87:28:56:1b:01:
57:dd:d3:00:dd:e2:3c:26:82:ce:c2:b8:44:d7:ad:
d8:55:9d:81:ec:f8:2b:db:67:17:c5:70:94:c6:90:
5a:d0:16:f0:ec:ce:68:4d:b5:d8:ec:8d:5c:a0:9e:
3c:bc:a6:15:99:e3:c5:b2:03:42:99:fd:b7:17:65:
2f:fd:ad:22:99:8a:1b:1e:05:c2:41:27:e4:26:85:
9c:86:71:bd:56:a6:92:09:eb:39:15:0d:c3:c0:89:
ad:92:96:d6:7b:0e:6f:9f:c6:0a:8d:a6:cb:f0:0e:
90:c4:f4:4e:ee:4c:b2:66:b7:55:96:20:df:28:4b:
d5:62:8e:4d:a2:a8:f4:1f:55:20:8d:cd:5c:cb:1e:
da:23:b6:41:56:ac:ba:25:a5:20:05:14:ad:99:e7:
b8:ac:e7:0b:89:b0:87:53:49:3c:3d:ba:24:14:37:
9c:79:0f:6e:19:1c:50:d6:cf:10:62:8d:93:ab:c4:
c9:8c:6c:6d:dd:44:91:3d:25:81:ce:02:3e:01:18:
a0:90:cb:d5:1b:2a:4c:6d:9f:7d:61:02:e8:03:d2:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:32:41:2C:47:38:AE:5D:CD:07:B1:9C:21:1E:41:28:F9:50:DF
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:e7:f2:d7:a6:7f:12:39:77:63:10:93:fc:9a:4f:7c:4f:
3a:24:c0:32:08:20:73:b0:8f:9f:46:46:63:44:4e:ff:97:f3:
ae:e5:52:e2:3c:62:59:f5:0b:13:e9:94:51:82:8c:5e:1b:28:
4d:ff:1b:79:90:66:1c:f9:51:9b:b6:ea:80:14:26:c2:24:66:
c4:e5:68:8a:fa:2e:e4:8e:e4:3b:d6:6d:ee:0c:fa:aa:12:3b:
46:40:2e:5a:79:e7:1a:31:ea:5b:9e:92:9c:d4:15:b1:03:01:
20:ed:d7:0d:e6:53:19:a9:21:14:e0:35:bc:cd:93:59:4a:71:
87:1a:2c:6c:eb:71:26:92:a9:37:54:0f:5f:5a:25:79:c3:ca:
6b:3f:de:e2:44:78:ee:9e:81:76:1c:30:d1:fa:cf:fb:fa:03:
ff:7a:54:55:0b:1e:e1:26:96:6f:9b:d9:87:6d:c4:cd:9e:64:
3d:6c:d2:f1:ed:92:1c:b3:79:ff:4b:7d:eb:19:0d:c0:f6:02:
23:c6:51:88:32:de:cf:3d:d9:a5:71:ac:d3:f0:a0:96:d6:8a:
1d:65:42:72:65:c2:7b:5f:02:0b:b7:cd:36:83:de:6f:be:f4:
d9:8f:1f:0d:53:52:c7:c5:7e:57:af:40:2f:84:6e:c9:d3:1e:
97:f0:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:41 2026 by rpki-client