Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File: 2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier: qAPd9T25IiNuzEDYo0K2X3Log7bmdybkoKBTdgyJMIQ=
Subject key identifier: 1A:60:6A:C5:23:00:47:B4:FE:89:D9:B6:37:79:DF:C9:25:A8:33:F7
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial: 019CAAC6F55D31B4BA9039EE6FEBDBA0DFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number: 6C
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: piSJhyN1kXEbHr7QUViW3/5oqQ4K4+PQIOUqf204FFk=)
2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
4: P-cBT9GtfwAV2Rbt0kBltwGf42I.roa (hash: sRPFuUPV4/Yh7kICP3uHlk73kVCyDpzxlUWN6hEeTyw=)
5: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f5:5d:31:b4:ba:90:39:ee:6f:eb:db:a0:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=1a606ac5230047b4fe89d9b63779dfc925a833f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:a2:1b:a0:63:62:57:2b:3f:2d:86:82:81:
b6:41:03:50:03:d2:48:d8:5e:a4:15:3c:2b:ff:67:
b4:7b:ee:fd:b4:db:47:93:69:ed:0b:21:5a:73:73:
d2:82:66:6d:d1:27:ff:d6:0d:44:a8:11:d2:fa:f1:
78:92:66:02:99:c1:d8:8c:ed:7a:31:a8:f3:d5:0d:
3b:a7:1a:e3:94:ee:6a:b3:ec:30:63:49:3d:8e:03:
86:cf:0d:7c:bc:3f:c9:4c:ac:86:45:88:94:6f:9b:
c0:39:51:ea:a6:b1:69:29:74:40:06:75:a3:d3:f8:
a5:c8:e6:10:c8:65:48:c2:80:0d:66:cd:69:c3:27:
53:89:25:4f:8c:c8:6f:1a:55:c7:d6:31:14:e4:ee:
52:a8:53:87:7d:c4:d3:a1:e7:2c:fb:70:b7:65:95:
06:c9:98:1d:57:80:3a:dd:5f:16:88:28:01:8a:94:
f6:ca:8f:02:2a:53:65:24:ae:ec:7e:be:6a:b2:51:
6c:e8:99:95:bb:65:ab:b4:ce:c9:e5:a2:85:d1:2a:
37:c5:a7:ab:62:70:ff:21:b0:d7:d4:7a:08:86:7c:
e6:2a:44:7e:59:dd:f4:72:a4:36:54:fa:65:b0:88:
f2:c2:06:39:81:24:b7:af:18:70:1f:f6:c4:f7:81:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:6A:C5:23:00:47:B4:FE:89:D9:B6:37:79:DF:C9:25:A8:33:F7
X509v3 Authority Key Identifier:
keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0b:b7:8e:46:f1:dd:39:32:d9:d0:b1:f7:a6:35:2f:ab:7f:
27:7c:da:cb:e9:17:c9:45:b2:31:e6:dd:8e:8f:35:2a:74:b0:
bc:0b:26:69:96:28:68:a7:17:0c:a9:28:18:94:e9:4b:66:fb:
56:f2:86:55:5b:fb:eb:2e:86:22:07:a4:2b:2a:29:ed:f8:1b:
ff:82:7d:23:6f:dc:99:08:d1:bc:26:d5:ec:1c:ae:c0:9b:53:
19:8d:de:6b:7c:ea:2b:11:ba:da:25:7e:63:a8:90:39:52:a1:
c1:6d:f0:35:96:74:9e:fd:09:ce:fd:3e:7f:2e:d5:73:58:41:
50:be:d5:59:28:4e:4a:83:09:9e:b2:00:cc:75:24:3c:ee:e5:
86:8e:d2:e4:c7:42:63:55:71:4c:71:44:d1:4c:91:a9:6c:15:
c7:b9:f2:d2:c7:26:f4:c4:33:ce:1b:ea:96:46:24:4e:b1:57:
67:21:92:ca:3e:45:84:ce:b7:e8:61:3a:db:ae:00:88:6c:be:
f2:04:3b:ed:b8:0a:67:24:82:7d:ba:a9:26:d4:78:fe:fb:9f:
98:08:49:cc:fd:5c:dc:3d:21:09:52:60:23:d7:a2:02:9a:1d:
99:69:6f:8c:f4:0c:a0:04:53:3f:82:d6:71:68:99:cf:4f:dd:
7a:21:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:28 2026 by rpki-client