Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: NxB/ueyuRZbsOIkVjtDFvGyoD5gvj9gWZZjbd9C6AoY=
Subject key identifier: 64:86:37:23:4C:49:96:CF:54:D3:35:DA:C4:E7:4F:25:F5:FA:B5:2F
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019CADC7C6D8A437DD7499E55A42D3CED737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0E26
Signing time: Mon 02 Mar 2026 09:01:16 +0000
Manifest this update: Mon 02 Mar 2026 09:01:16 +0000
Manifest next update: Tue 03 Mar 2026 09:01:16 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: KCT1IbjNkXtIVTsM40WUk/BIRuVQEBRgCEiorh3yXNw=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:c6:d8:a4:37:dd:74:99:e5:5a:42:d3:ce:d7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Mar 2 09:01:16 2026 GMT
Not After : Mar 3 09:01:16 2026 GMT
Subject: CN=648637234c4996cf54d335dac4e74f25f5fab52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:71:a9:89:9f:ab:a7:c6:de:d9:42:97:2e:
8f:05:5a:a7:71:bb:2e:6e:69:b6:fc:34:a2:74:ee:
ce:be:bc:b7:e9:b8:ee:e7:11:94:c5:a4:ea:93:7a:
f1:24:33:9b:7b:78:0c:9c:2b:e7:fc:56:ea:6a:49:
ff:0b:17:de:a8:31:5b:d8:d2:f8:aa:f0:5a:1c:98:
e5:2c:98:f0:e4:0a:91:cc:14:a9:ab:d7:12:8d:8e:
72:78:36:e4:71:53:85:3f:f1:ba:d2:7f:13:ed:07:
02:73:e8:fd:b7:51:47:ef:41:90:e8:d1:d5:0e:8d:
2f:c6:ac:45:fd:cb:87:0d:23:fb:e8:57:eb:d3:76:
e4:22:da:51:71:36:19:37:64:92:e3:ce:b3:90:c4:
9a:d9:48:4d:df:cb:e4:50:ef:2a:3e:e5:27:d7:7b:
8a:27:3d:6e:c4:2f:44:60:89:a1:cd:80:b5:92:11:
5e:ac:a2:59:6f:d5:9c:b8:b7:bf:15:2f:16:a6:99:
87:1b:0e:fc:db:56:08:f7:a8:51:cc:14:28:1c:27:
3b:70:ef:19:23:22:c9:cf:36:b8:aa:ff:e8:22:0a:
11:f1:68:d6:62:20:42:53:57:fc:dc:b0:bd:de:1d:
71:0d:95:91:ca:e0:ff:34:cf:74:ac:93:ca:a8:80:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:37:23:4C:49:96:CF:54:D3:35:DA:C4:E7:4F:25:F5:FA:B5:2F
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:32:5d:b4:11:f7:7f:26:9b:11:19:fa:85:31:90:b4:40:d6:
13:db:14:46:6e:6e:bb:a0:f0:b1:73:a2:d4:bb:1c:98:ae:6f:
12:17:e9:fa:70:23:0f:94:52:4d:24:36:92:f1:12:8a:95:2c:
57:e5:25:48:dc:45:c2:26:c5:cf:5d:9e:d7:9d:95:d5:e7:6f:
4b:53:8d:fa:3e:cb:22:e7:4a:a8:31:93:e5:f2:26:b3:1d:3c:
a1:8e:28:38:3a:48:30:3a:92:69:be:9e:f6:6e:fa:a2:b5:39:
2b:28:e5:21:a1:bb:e1:14:0f:6c:80:1e:d0:b9:52:99:19:e2:
89:fe:fc:56:32:ef:d8:87:1c:b8:df:5b:f4:40:0d:c8:13:e4:
a8:93:f4:ca:8e:9b:2d:96:e2:09:3a:ca:c9:47:f9:4d:02:f0:
de:ec:6d:d6:4b:de:fa:29:ec:e5:b4:e8:69:cf:aa:3c:37:7a:
51:9f:0f:1f:c8:03:20:33:63:c8:dc:06:6a:ab:5d:be:43:03:
47:93:23:43:58:58:0c:3c:2e:8d:e9:b0:31:d9:8f:b2:16:d9:
18:d9:7e:59:9a:d5:16:83:ae:ba:c6:b6:16:ab:38:fd:d1:97:
0b:29:f9:73:3b:2a:b3:62:ac:28:16:a2:af:1e:10:d8:83:92:
44:df:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:10 2026 by rpki-client