Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: 5/+atYQsEp+nhkN/D8BxaAtqtPVGoq9R5pLhDYLR+dQ=
Subject key identifier: BB:50:CF:98:EB:78:38:FD:E0:FE:78:EE:4F:6C:13:0F:AB:E2:E4:6E
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 019CAA589CCC6C4357FDEBA46695D99C9E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: zNw0DtHbKpPLIT8U1VGSEoaFsT5wC12xpgasSVhcm30=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9c:cc:6c:43:57:fd:eb:a4:66:95:d9:9c:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=bb50cf98eb7838fde0fe78ee4f6c130fabe2e46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:c9:9a:94:9e:64:7a:b4:17:c3:11:a6:61:
26:2d:79:ee:8f:5c:ae:85:7e:20:ff:5f:6c:6b:aa:
19:c1:f7:c8:e2:31:5c:8a:73:19:1f:59:6a:43:96:
66:d3:f8:2a:9a:30:07:cc:bd:a2:41:f9:ff:c6:f6:
61:8c:7f:ff:2a:68:c0:e0:64:51:5d:90:15:9a:d2:
30:9c:f6:e7:7e:71:a5:7f:1e:a2:d7:9d:7a:26:8a:
fe:33:cd:3c:1b:8b:6a:d0:df:2c:0f:6e:fa:1f:ec:
c3:0f:e7:f3:d7:81:37:04:ad:82:63:28:56:a5:77:
54:29:46:b4:15:1e:dc:dd:4d:4f:65:e3:fa:88:e2:
ce:84:28:bd:1a:55:2b:71:32:b0:9e:68:c0:7f:61:
04:27:01:a3:94:21:ad:e8:d4:79:20:92:43:6b:70:
45:2b:a6:3f:df:fd:39:7c:09:81:c6:41:f6:ad:cf:
86:76:ed:48:cd:05:4d:f5:7e:f4:fc:c0:84:82:5e:
bc:d7:24:f2:82:3b:b6:2e:01:a1:a0:bc:c2:64:4b:
29:9e:f3:87:00:58:85:53:77:3f:93:58:2e:a7:fb:
ea:7b:35:22:d7:aa:8c:50:de:34:d4:df:1f:ae:1b:
f0:a2:31:a0:c7:8c:66:48:d0:04:1d:03:f7:b3:86:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:CF:98:EB:78:38:FD:E0:FE:78:EE:4F:6C:13:0F:AB:E2:E4:6E
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2c:a5:f2:9b:ab:45:35:27:40:30:12:43:07:c8:6f:84:b5:
15:a1:c1:7d:9e:3e:4b:2a:74:b4:5c:f1:06:42:17:60:ad:ed:
ca:ae:4f:19:7b:50:2d:3d:c0:db:af:66:0f:a6:81:db:9e:66:
30:89:71:3f:8f:e2:41:e2:6c:5e:8f:54:47:da:a6:a1:5f:8a:
74:b3:67:4b:92:d0:34:31:0e:ed:57:75:64:b7:81:e2:da:5d:
66:18:62:25:0d:26:e9:59:40:07:18:06:fd:98:8d:98:0c:6f:
ce:b7:a6:ff:d7:b8:09:32:e9:8b:19:cd:56:c3:f4:17:bb:47:
e7:6d:94:cb:c4:eb:79:b5:76:56:db:48:d6:30:6c:7e:8d:d9:
5e:a9:3d:6a:a4:c9:fb:3e:6f:2b:d9:7f:c2:b3:17:87:50:20:
db:74:9d:c4:c6:96:35:dd:95:68:1c:dc:70:85:54:d0:31:ed:
ba:62:bb:78:3a:e3:ed:a1:24:bd:3b:36:b3:27:fa:7d:ec:bf:
a5:63:9c:15:e2:29:a8:15:b2:ff:2a:31:f9:dd:fb:98:35:3d:
bc:35:7c:df:cc:68:f1:f8:47:f9:10:db:b7:96:7e:e5:14:3b:
e0:e6:24:74:6d:98:e2:05:7d:c3:4d:7d:a4:1c:19:72:9d:c9:
01:c1:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:30 2026 by rpki-client