Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: m04JQT7GBQwBHig0SWl/Txilou0b9lcr+HxHp6tbbPU=
Subject key identifier: FD:B5:AD:2E:6B:BA:CB:DF:08:8E:9E:C8:B8:5A:47:FD:13:8C:E3:97
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019CABD9C7141C6AE98414D04DD54CCE7C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 149E
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: cAOsq0NKQBP/O9VAjSa3wtz4yXBMEYh6upw6t43XpBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c7:14:1c:6a:e9:84:14:d0:4d:d5:4c:ce:7c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=fdb5ad2e6bbacbdf088e9ec8b85a47fd138ce397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:89:63:61:d0:4f:a0:b3:e2:80:c1:2b:12:
65:42:0e:84:28:3f:53:ff:1f:55:08:35:15:9f:bc:
48:5d:d9:da:fe:36:c0:c2:24:1f:f5:75:4b:f6:2f:
8f:0e:fb:6d:4b:ba:97:2c:a6:f3:af:15:f1:58:c9:
5e:77:c8:9a:c0:ab:be:fc:47:43:b2:99:cb:28:7b:
5a:25:f5:46:24:d2:a7:18:5e:c9:36:b1:86:84:78:
ec:c2:b9:5e:d1:4f:52:f7:a8:78:aa:8c:fb:ab:c8:
82:be:3a:a6:fa:21:f0:1d:bf:fd:12:48:39:91:a9:
b2:fd:a3:e6:1d:ee:8a:4f:aa:17:fc:01:32:c2:c9:
55:90:2c:b3:e3:0b:e3:df:0b:f2:13:d7:b5:c1:19:
9d:78:57:cd:7d:89:e0:c8:e1:3a:3c:95:7d:9e:8b:
68:ea:5d:05:c0:0e:fa:a1:6c:f0:11:94:5e:b7:67:
cf:99:eb:4e:24:8f:eb:37:3c:da:c4:78:e6:34:45:
c1:1a:84:1a:ff:0d:ab:66:15:5b:2f:ed:44:66:9b:
8b:53:cc:0d:be:f3:44:0a:77:fd:e3:df:0d:6c:c5:
41:3a:54:44:20:ba:c3:4e:0b:b1:50:b7:0d:29:58:
80:ed:d7:9c:9f:2f:b9:6d:25:fb:5b:5c:f5:67:b5:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:AD:2E:6B:BA:CB:DF:08:8E:9E:C8:B8:5A:47:FD:13:8C:E3:97
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:b1:03:24:82:c1:f9:eb:25:5e:8b:90:0d:11:09:5a:e0:
34:d5:75:75:9c:69:30:8c:3b:63:6b:3b:a0:b4:7b:ac:97:98:
44:de:e1:59:0e:57:fb:e6:b9:53:97:ac:3e:01:bd:98:61:6b:
0b:96:c2:01:0a:c4:01:67:52:e7:17:9c:c8:7c:e7:dc:3c:1b:
fb:3c:bb:46:fb:a3:a9:2e:f7:17:5b:5f:f5:44:26:df:b0:b6:
06:48:c1:ca:6f:a7:43:fb:b4:07:2a:0e:16:2c:0c:ab:43:cc:
b2:ba:05:34:36:f6:ce:85:2a:6f:1e:54:a1:1f:c3:5d:63:21:
97:27:ee:0f:e9:ed:92:75:fb:c0:88:55:7a:3d:ca:48:2c:5f:
86:c2:1d:96:fb:eb:e0:11:37:fc:5d:37:8f:34:63:18:76:fa:
24:3e:4e:6b:81:fb:24:2a:a6:25:96:ae:f3:f1:df:40:dc:83:
47:3b:f6:e0:27:c0:61:ec:c8:0b:9b:28:89:7a:7d:9c:01:f2:
f1:bd:d5:85:e4:b7:23:2e:ea:c1:20:88:02:51:b6:4e:21:6e:
51:98:a6:d1:a1:8e:56:52:85:f6:97:bb:35:d5:90:44:6a:1f:
f3:bb:8f:34:14:ec:fa:bd:2b:41:1d:64:1f:b3:86:d9:31:8e:
ce:02:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:48 2026 by rpki-client