Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: /YFOB5JsriPTUmRL33Ox+u0sA2sCUi5ey2BR7EndRAI=
Subject key identifier: 23:21:64:16:58:7D:52:51:7E:1A:01:81:D8:22:82:0E:15:E6:50:DD
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019CAC7E44C426F70E404F39A0D02578C571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 185B
Signing time: Mon 02 Mar 2026 03:01:21 +0000
Manifest this update: Mon 02 Mar 2026 03:01:21 +0000
Manifest next update: Tue 03 Mar 2026 03:01:21 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: Q3S088xxIp3hGXDWfJmlndApn8OHqIrBqkR6iV/94kQ=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:44:c4:26:f7:0e:40:4f:39:a0:d0:25:78:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Mar 2 03:01:21 2026 GMT
Not After : Mar 3 03:01:21 2026 GMT
Subject: CN=23216416587d52517e1a0181d822820e15e650dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:6a:c4:91:ba:ab:86:66:99:53:fd:94:13:
66:f9:d0:9a:4c:7f:0d:f9:92:f1:b9:27:68:57:f0:
62:4a:7a:c9:8a:18:99:4d:3d:c4:25:61:be:33:12:
43:50:83:cf:d4:09:1b:9c:e0:85:79:5b:8f:24:87:
c2:4d:4c:6c:6b:54:38:10:17:98:9d:fc:27:3a:c9:
73:59:57:2e:28:8f:b0:27:0c:ed:c2:52:2f:d0:04:
0d:74:a0:84:16:bf:b3:0c:4f:52:c5:c5:8f:18:35:
df:2c:06:db:6c:5c:79:cd:f0:b4:84:f3:76:b3:04:
37:5f:db:1c:d1:dd:80:12:3b:36:70:46:83:6a:b7:
93:44:4a:d1:81:e8:f1:db:94:56:0a:9f:09:97:ab:
2a:77:18:55:dc:b8:2d:38:08:4e:96:78:02:5a:c9:
4e:e0:02:18:29:23:35:b5:49:90:95:3a:95:52:25:
4e:34:02:2a:b8:7c:2b:01:58:62:d8:f8:cc:5a:02:
70:1c:f1:72:6d:4c:5c:8b:cd:3f:74:9c:33:e5:01:
95:00:5c:bb:48:ac:a4:01:97:e0:b3:65:44:cc:33:
32:20:2f:0b:d0:ee:91:3b:2f:81:bd:15:73:4b:8c:
9a:b0:92:7d:0d:9c:84:8b:d9:0d:ca:ab:b7:fb:62:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:64:16:58:7D:52:51:7E:1A:01:81:D8:22:82:0E:15:E6:50:DD
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9d:07:08:73:f8:28:62:07:55:5e:49:3a:89:5a:69:48:e4:
23:3b:b9:34:51:ce:e7:c7:35:08:7a:f7:17:36:1d:9a:4d:ab:
0f:4c:f7:88:db:a3:56:e5:3e:10:7b:20:c7:00:61:2f:04:4a:
9f:db:43:4f:7b:75:6c:36:c6:25:05:40:5f:75:c0:a0:23:d3:
b1:1d:e0:3f:47:fd:20:c8:a0:4a:fc:bf:b3:eb:fc:35:2c:a7:
8c:60:dc:e5:5a:35:e0:dc:44:f9:72:10:9b:6a:3c:eb:3a:f6:
9d:fb:f8:5b:a3:af:b8:aa:7a:d3:86:a5:28:01:bd:59:b7:8e:
72:45:ff:dc:00:12:5d:fc:48:50:7a:f2:ec:37:9e:c4:9c:9c:
e8:7a:f8:53:65:a3:0f:4f:7f:0c:86:a5:72:3e:09:89:4d:77:
5c:99:7f:71:6f:12:f8:05:2a:3f:8d:45:cd:66:4f:20:9d:8a:
ff:c9:f1:99:0f:34:fe:e4:c4:90:73:f1:4f:d9:d3:0a:f8:3d:
fb:3e:81:70:a7:8e:22:7f:6e:7f:08:80:ce:97:ec:36:38:45:
26:ab:35:e2:07:d6:79:95:c3:37:29:cb:47:ef:29:2e:b5:ba:
41:1a:2c:51:ba:83:55:00:8d:aa:a7:99:1b:a9:2e:96:ec:7d:
73:68:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:12 2026 by rpki-client