Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: NtKY9qNEqT7eDkw5MAC1zV3Y7GP3WsVyq6eqfML2/1M=
Subject key identifier: B2:7F:4E:CD:FC:05:EC:5F:E1:AF:4C:10:12:E4:58:EE:AB:81:6D:0C
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 019CAC102A6D34C73BB9A2FC2B5462E5CFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 17D5
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: dp7L5BtJKCrUxw5Liz7rPlQEqVOLMJrhI5Voon++D24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2a:6d:34:c7:3b:b9:a2:fc:2b:54:62:e5:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=b27f4ecdfc05ec5fe1af4c1012e458eeab816d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:cb:ce:74:4d:db:ad:c2:ad:89:0c:e6:76:
3d:f8:47:ce:5a:5b:3d:a7:e5:34:8f:8d:5e:cd:4f:
81:0e:26:31:3a:51:df:8f:f6:90:43:62:44:89:2f:
8e:b4:5b:8a:4d:a3:18:b8:55:ab:be:b1:10:33:53:
06:54:c1:e7:9b:c2:bb:b1:2d:a3:2d:28:e2:aa:7d:
8e:77:5e:de:a2:c5:25:9a:73:52:09:9c:98:78:1b:
13:a1:51:51:32:a3:82:9e:a0:bd:ed:7d:8b:be:f0:
9d:63:71:13:66:cb:03:20:8a:28:d5:fa:ad:98:18:
4f:8b:bc:ce:99:29:fd:e4:24:f1:d3:12:15:0c:bb:
b8:2a:c7:45:c6:96:5b:e3:d4:25:31:e9:4f:c7:32:
df:4f:6e:e2:7f:12:45:a2:10:43:55:ec:b6:cc:14:
1c:da:56:05:0b:c5:8f:79:23:13:ab:47:13:25:4c:
a4:ee:97:0f:f7:1f:9d:dd:ec:74:0a:71:cb:bc:13:
36:87:e9:bf:55:f6:8f:2a:1d:0e:a5:b9:2e:ad:47:
5c:1b:89:3b:c8:a0:62:7e:ca:04:72:96:87:d0:06:
6d:9e:49:de:2b:a9:4d:78:ef:e0:fc:2f:86:cb:fc:
34:92:e1:b1:f3:6c:5a:d1:45:e9:94:41:dc:3d:90:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:4E:CD:FC:05:EC:5F:E1:AF:4C:10:12:E4:58:EE:AB:81:6D:0C
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:46:08:d4:61:e3:d7:fe:3e:d0:29:1d:35:c7:c2:da:a8:
78:db:ce:df:3a:f7:5b:48:0f:a1:78:ae:6b:46:5f:01:7c:4b:
4d:b5:dd:91:ec:71:44:b3:23:f0:ff:41:1d:b7:0d:e6:bb:ee:
dd:89:b3:93:c0:81:32:11:dc:e6:00:82:40:15:56:46:3a:ed:
11:db:e6:fa:2a:51:db:e9:99:7b:0c:ff:37:de:38:91:b7:b2:
d1:cd:d9:2d:60:8d:35:b6:e0:08:e7:e1:3c:69:6a:ec:75:55:
17:bc:5f:72:be:0a:20:0e:67:92:9c:7c:58:d9:ac:17:e2:76:
41:58:12:5e:3a:76:cf:b9:4e:b3:f6:66:a4:77:1a:94:8c:87:
80:d4:09:18:ac:05:c9:10:b8:fc:3c:30:73:44:a4:70:68:21:
ed:8d:33:85:c6:ac:eb:0c:dc:02:0e:01:7d:79:11:36:73:80:
fe:ae:1f:8f:19:c5:06:08:e8:69:e2:6f:d1:6f:aa:cc:81:71:
fb:57:80:d6:63:c8:7d:9b:a3:52:21:28:ee:b0:f0:87:e2:b2:
98:85:d6:4a:44:2c:da:4c:cc:48:b2:ca:ef:ff:88:f3:75:ef:
4b:43:83:83:4a:cb:e9:fb:11:98:42:3f:be:52:22:18:e6:fc:
de:ad:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:15:46 2026 by rpki-client