Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: I9jmDDWMtTV0F9hgZ+i4TwZwJPoRNLRsiyEzV6/0TRY=
Subject key identifier: EB:51:01:80:5E:2B:11:D1:B5:A0:B7:83:19:48:94:01:EB:FA:9B:EF
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019CAB6AE4CE04A87A3E5699067A56159004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: 8Oju+fV8+BxnfKqE3NAPxG1awvnQ9J32EvNicMXU6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e4:ce:04:a8:7a:3e:56:99:06:7a:56:15:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=eb5101805e2b11d1b5a0b78319489401ebfa9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:fc:56:bc:15:28:46:4d:23:d7:da:33:24:
08:70:73:f1:87:f4:50:5d:20:83:f8:74:5a:c3:1a:
cb:4d:58:d4:18:1c:fa:ed:96:63:6e:5f:84:36:1a:
7a:d4:92:09:4e:8e:a2:5b:54:a3:c8:9a:0a:a2:b9:
c8:64:0e:fc:c9:40:03:5b:7b:17:c5:0d:ce:a9:3f:
c2:00:89:93:8f:25:e5:4d:2d:18:db:04:4d:d8:64:
88:b0:5f:af:02:af:68:66:bf:03:8f:51:12:e0:e2:
47:eb:1c:7a:d5:80:98:fa:ae:41:9d:1c:7a:10:20:
31:f7:1e:33:f1:78:43:26:80:8b:00:88:37:a1:fe:
72:a5:39:89:16:0c:03:40:1e:5a:0e:0e:78:4a:95:
5c:1c:8a:64:38:43:73:00:36:2a:92:cd:9d:7f:63:
7f:78:91:20:9f:5c:3c:1c:e6:7c:88:7c:b8:fd:fc:
41:69:db:b3:13:85:ba:26:3b:8c:ca:e5:1f:40:bd:
ce:63:ce:6b:f0:2d:49:ab:a6:23:fa:15:ba:75:39:
06:d9:a3:8e:b5:ec:82:ae:25:6c:47:1e:c4:77:93:
b2:0c:1c:4f:81:62:50:13:ae:a5:e1:c4:3a:b4:ec:
ba:61:f9:f2:6b:a1:e4:85:35:7b:6c:f6:13:f4:a6:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:01:80:5E:2B:11:D1:B5:A0:B7:83:19:48:94:01:EB:FA:9B:EF
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:91:f5:a9:13:52:7a:df:d8:e3:67:a8:8f:28:f4:9a:67:85:
5e:e0:a7:e8:b0:a6:2b:c6:0e:53:e4:76:04:d5:66:61:33:73:
8c:28:58:3a:57:72:46:fe:55:02:3a:67:8a:ad:4c:0d:2b:a0:
19:cd:dd:aa:4b:21:e3:75:24:27:29:8f:2b:e9:53:39:30:de:
ec:c1:43:74:b4:c6:01:35:05:61:b3:c8:6a:34:81:c9:1e:d8:
44:69:21:a3:13:c8:ca:86:32:f0:e2:aa:d5:11:d2:57:cc:e7:
4a:d7:b0:7a:70:39:9b:49:fa:21:d8:87:28:00:29:d1:c2:db:
56:57:13:01:7a:15:d5:6e:80:c2:1a:44:f7:35:e8:fc:b4:50:
ce:f8:c3:b4:39:4f:79:10:b1:ce:0a:06:84:5e:13:3b:fd:61:
5c:2d:fc:98:8b:57:d4:76:be:12:d0:4c:76:87:e9:ae:db:af:
22:48:a7:26:a9:a2:b9:04:8b:fc:85:2a:85:0e:0a:18:8b:6e:
45:94:31:01:04:9a:c8:ea:6a:c6:a7:25:00:53:c9:f4:79:be:
d2:36:df:a3:55:0d:47:8d:b9:0c:02:b2:54:67:57:0b:9d:6e:
8e:83:db:47:82:eb:c1:1b:32:6d:6f:2c:55:44:e9:b2:59:64:
dc:9d:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:09 2026 by rpki-client