Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: gb3rp7jFTLOlPDSafqnSmSG47xrWLAtZLFP8dXv9Sbk=
Subject key identifier: 76:6D:70:73:87:F0:D0:8C:32:7A:5C:13:8A:D6:0A:D0:13:07:6B:98
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019CAA2142AF71C13469A1DFD46CFBBC50F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0E37
Signing time: Sun 01 Mar 2026 16:00:32 +0000
Manifest this update: Sun 01 Mar 2026 16:00:32 +0000
Manifest next update: Mon 02 Mar 2026 16:00:32 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: AXFhDCRSAE83K+aDZjp4cGgN8w0Nlg+TzS1m0BMfo4s=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:42:af:71:c1:34:69:a1:df:d4:6c:fb:bc:50:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Mar 1 16:00:32 2026 GMT
Not After : Mar 2 16:00:32 2026 GMT
Subject: CN=766d707387f0d08c327a5c138ad60ad013076b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:6f:93:0f:ce:4b:7c:9d:7a:3a:dd:d6:7e:
f1:38:5e:a7:40:b8:d5:f4:bb:00:b9:59:e7:37:96:
5e:14:4a:3c:6b:ab:70:64:cb:e2:f7:4e:d9:83:b6:
e9:28:4f:86:3f:91:b9:60:bd:17:9c:06:7c:b2:c3:
a6:43:e5:9b:db:e2:bf:67:28:88:f2:eb:1c:e3:51:
57:4b:e0:a0:49:fb:f2:60:a3:dc:8a:5c:a9:fa:09:
6d:54:50:cb:4a:c1:e6:6b:a7:20:a5:12:bf:98:ce:
0e:ef:4b:ff:71:23:22:1f:08:ab:08:dc:1a:78:37:
ea:92:4b:da:56:f3:45:95:94:99:05:70:7b:bf:58:
17:d8:b3:8c:9c:09:41:f0:e5:f8:6f:08:0e:bd:71:
d7:0a:2c:40:4a:e5:7f:6f:81:0b:23:65:71:f2:f4:
4e:04:1d:d7:ec:05:5f:6b:a2:d4:81:ca:fa:32:45:
b4:87:7a:39:96:99:16:c6:35:4c:06:5d:65:56:a7:
c5:43:e3:a5:94:fa:33:4c:a8:30:5b:61:d9:18:18:
79:32:55:44:93:21:5e:a3:91:a2:ad:49:f9:e2:4f:
92:a7:aa:c3:d0:71:41:37:ba:58:fc:e0:c4:6a:f5:
ac:40:8f:c6:dd:74:f8:27:af:de:53:6b:90:b1:25:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:70:73:87:F0:D0:8C:32:7A:5C:13:8A:D6:0A:D0:13:07:6B:98
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4c:0b:62:cf:94:71:48:ee:30:05:27:e7:49:74:57:3e:b4:
ff:32:a4:fb:3c:3a:20:5f:a0:95:77:1e:d2:9f:b3:7e:cf:20:
46:d1:50:b2:36:49:c3:0a:db:f0:bb:e8:84:97:8a:4b:8f:ae:
9a:9c:91:0f:0d:15:dd:23:43:a1:47:ea:a8:98:7c:7d:56:3d:
95:4a:01:4c:c6:57:c1:0b:29:04:be:41:52:f3:8a:28:4a:e3:
61:38:e9:f4:57:74:e0:a2:3d:e3:d0:ff:88:93:77:ab:ef:38:
82:bc:29:13:c7:11:62:db:dc:ae:3e:b3:e0:ae:3e:d4:c6:e0:
4d:a7:78:4c:c2:85:ec:d0:09:ff:26:f7:29:2e:c9:43:7d:4d:
60:1b:16:44:db:6c:4e:38:b2:a5:38:c2:90:c3:53:72:23:49:
54:70:b1:42:47:80:0a:d2:59:97:b5:d7:d5:2a:60:9b:4b:c0:
1b:a2:7e:84:96:0e:32:13:69:bb:47:c8:b1:be:3b:4d:34:99:
fd:d4:ed:3b:93:61:d8:b0:02:67:13:a8:7b:58:1a:82:d7:79:
40:09:ad:d2:d6:59:d4:0c:db:3f:ad:06:20:e4:31:21:81:db:
a2:31:b1:84:fe:39:f6:1d:dc:d0:1b:4f:0e:04:47:b6:9e:8a:
61:f8:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:46 2026 by rpki-client