Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: gzb6Bzy8luHXtfWnaYl0v6D9YwFT+cz/jUTQyF2RiAM=
Subject key identifier: 3B:15:C6:C3:25:8A:CB:B6:5D:8E:49:E9:4F:0A:D4:60:9D:1E:03:9A
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019CAA8FCE69BD9CFF95372ACEF4DDDA2B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: SeEi5vbFOAOGJyBlchkclPhACiDg/WszPYdwJTYeAV8=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ce:69:bd:9c:ff:95:37:2a:ce:f4:dd:da:2b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=3b15c6c3258acbb65d8e49e94f0ad4609d1e039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:82:fd:ef:14:4d:45:c6:79:68:1d:e2:57:
89:19:24:07:c3:8b:4a:b1:e3:78:58:9b:bd:8a:23:
b3:d9:64:59:6f:88:b0:c7:da:16:4e:8f:53:49:7e:
25:6e:7e:64:45:8e:e7:00:b0:b3:a5:5b:8a:6d:f4:
2f:3e:32:44:75:a2:f4:c0:65:6f:e6:22:0a:f1:0b:
52:3b:46:d0:de:8e:5b:1a:2b:d1:e0:0b:9e:56:c0:
59:22:4c:80:dc:47:d1:91:73:01:0b:c5:81:89:6a:
7d:f9:b4:c0:91:33:87:9a:49:10:7b:66:4a:cd:23:
5f:30:f7:a6:04:2b:e6:8f:86:3b:72:03:31:94:11:
f6:e8:22:fa:59:af:7f:2a:b8:f7:de:c7:90:5c:7c:
25:61:96:61:b4:21:8f:7d:40:f2:e2:28:71:5d:14:
5c:52:56:6f:c5:e2:1a:33:3f:3d:59:1e:41:e0:2b:
0f:01:e9:51:c4:d1:64:16:2c:09:6e:61:44:13:a1:
33:7e:03:8e:90:7c:b1:ee:a9:51:4e:03:f4:5d:83:
55:e1:20:c7:9c:34:32:af:37:c4:c4:3b:1f:d9:12:
08:b1:52:00:00:15:a1:6c:cd:52:90:d8:9a:d8:b7:
bb:71:9c:70:53:de:b2:c9:3d:f8:96:ff:5e:a2:87:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:C6:C3:25:8A:CB:B6:5D:8E:49:E9:4F:0A:D4:60:9D:1E:03:9A
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:2d:85:e0:97:45:9f:77:86:8a:22:f2:4a:52:24:a5:82:
e1:95:84:af:e3:be:9f:e9:94:5b:e2:da:3b:cf:05:96:c3:ee:
6b:67:30:1a:61:f9:c1:4a:d1:4f:e6:7f:05:76:35:6f:b1:ae:
1a:ca:5d:89:8a:51:b1:85:16:2f:c7:2a:16:59:c1:10:e9:54:
d7:7c:09:dc:52:dc:97:63:5e:cd:98:06:9e:73:fb:e6:62:9e:
62:a0:d6:99:77:6e:13:ac:56:40:41:02:46:64:35:fc:45:6b:
44:0d:7c:4b:17:5b:1d:dd:f8:c5:18:45:33:88:7e:0f:88:28:
e4:4c:49:56:41:51:ee:b4:ba:7c:90:e5:76:8f:98:21:33:47:
72:ef:5c:06:bb:af:c4:df:25:25:39:0b:ab:9d:df:40:9b:1b:
80:e3:95:a9:e6:21:e8:a0:8e:15:2e:7f:58:c4:2d:c2:52:ce:
7f:5d:81:33:9b:8f:8f:a2:aa:a7:fa:8e:e4:cd:ba:1e:63:f6:
ed:d5:06:9f:94:ad:b5:bf:43:d9:b4:86:f6:3f:d6:88:59:14:
87:9d:bc:56:08:0e:76:59:21:f6:31:d1:9a:7f:0a:18:ea:7c:
1f:4f:ee:45:f0:bb:20:1a:05:0c:18:f3:89:b7:d2:4a:c8:a8:
ce:1c:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:49 2026 by rpki-client