Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: +H8Tt9w9w/RxxnBAx3pl2V8L1ioqqnwLZzZESLY6cXQ=
Subject key identifier: D5:F8:81:89:2B:5C:30:FB:B2:3D:BC:B7:74:5C:82:11:02:79:14:C1
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019CAA58DBFD585E6D805DA4C2923DD4DB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0E1F
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: UwZFYPnaSTAu/u5dGCnNUZJYCIr7Q+dcgYTw+ZRD5qI=)
2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:db:fd:58:5e:6d:80:5d:a4:c2:92:3d:d4:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=d5f881892b5c30fbb23dbcb7745c8211027914c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:bd:f3:b5:98:86:15:ff:3a:6a:89:e2:74:
61:44:81:7e:a8:98:6f:b3:35:63:77:dd:94:58:02:
8a:2a:76:b1:59:df:14:16:d9:16:b7:af:0f:a9:ba:
5f:17:c6:2b:f4:6c:3c:7f:c0:10:36:ca:48:16:e8:
d2:ce:cd:64:dd:d5:61:43:c6:56:53:a9:49:d4:68:
35:76:53:d2:23:c2:d2:30:3d:40:ef:7e:11:81:98:
6e:7f:92:04:6b:d4:29:fd:89:a3:c4:6a:d9:2d:fc:
8d:fb:75:c7:7b:1f:2f:78:cf:3b:24:63:6d:10:bf:
9a:4d:96:e7:28:09:d9:58:e0:64:45:90:a6:5f:e0:
ee:64:dc:75:32:6b:d3:87:d2:03:5b:e3:5f:80:20:
45:dd:0f:86:7a:eb:1b:1a:ee:f5:df:f2:d4:01:a2:
2c:3e:b5:85:34:8f:39:b0:3b:77:37:8e:de:8f:2b:
a9:fd:be:13:16:22:c8:39:7e:66:c3:f9:82:fd:d7:
3e:e1:9e:df:c0:2b:cf:20:5b:91:21:77:78:21:34:
3b:8c:35:1e:aa:34:f6:4e:16:3a:16:6a:99:49:cd:
da:39:87:09:74:2f:c3:6c:a6:19:39:c2:1a:5c:3e:
15:dc:9c:c3:a4:82:56:54:63:09:23:7c:4a:51:b2:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:81:89:2B:5C:30:FB:B2:3D:BC:B7:74:5C:82:11:02:79:14:C1
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cc:4b:05:b7:95:c7:96:38:9d:ea:a4:99:d7:72:ab:78:55:
6c:a1:32:5a:b6:b3:86:56:3c:5e:82:f7:a5:0a:11:a2:9c:21:
98:ce:3e:e5:4b:7d:2d:c0:5b:97:05:a3:03:ac:4f:9c:51:a0:
4f:ff:14:71:00:24:46:99:f4:ad:15:79:ea:d9:78:ec:69:fd:
f3:fe:3b:c4:53:19:a5:2a:13:a3:bb:a7:d3:f7:96:0e:1f:57:
ac:ab:8c:c2:c2:e8:af:44:14:7b:6b:d8:af:ca:b4:49:1a:64:
c6:84:07:37:20:6c:5f:70:23:44:cf:bf:d7:ad:b1:19:c8:76:
f4:9b:5c:04:2d:03:6c:3a:38:4d:eb:e6:b6:31:7b:d7:85:da:
84:43:1c:35:d0:4a:9e:2c:7e:c8:0e:74:7e:0d:20:f7:16:4f:
12:ea:66:f1:33:a7:3c:95:03:8e:6c:8d:10:5a:8d:ba:8a:65:
f0:c3:e7:65:ce:2e:33:f7:b8:85:61:70:ef:90:8b:6a:93:33:
50:af:77:28:ce:09:4f:2b:09:37:4f:f5:0b:74:a6:b5:17:ff:
1f:10:f7:24:ab:23:94:a8:44:e5:9a:30:c2:77:e8:32:2c:28:
66:06:a3:7f:5a:ac:d3:9e:5d:ac:f9:dc:17:9b:27:66:b5:96:
21:68:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:58 2026 by rpki-client