Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: QKc8u7mD3TuE9PLp7U6qnPZWKze6DDxE0Lso34sEURc=
Subject key identifier: 64:9E:BE:69:CA:8A:2B:62:E8:55:50:F5:E8:6D:D0:9E:0B:27:65:01
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019CADFE8C43F88CB085086814DB04F4BAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 10:01:06 +0000
Manifest this update: Mon 02 Mar 2026 10:01:06 +0000
Manifest next update: Tue 03 Mar 2026 10:01:06 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: oZz3gYJlJCv6laSy5/8x3q5hMU3gkuujsdsGX0x4M7k=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8c:43:f8:8c:b0:85:08:68:14:db:04:f4:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Mar 2 10:01:06 2026 GMT
Not After : Mar 3 10:01:06 2026 GMT
Subject: CN=649ebe69ca8a2b62e85550f5e86dd09e0b276501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:ed:14:50:87:62:88:d0:1e:6a:b0:8d:a3:
fb:e1:d1:e4:8a:c2:c2:e1:db:38:15:93:05:7f:91:
fc:f7:1a:15:b0:21:04:46:06:65:21:3c:4a:2b:9d:
73:ce:2e:26:4a:29:42:0a:7e:39:20:e5:49:27:ee:
e8:fb:13:78:ee:46:8f:ad:ed:90:2e:87:49:0e:a4:
3e:be:20:6c:65:b0:99:79:22:6f:c1:5f:e5:56:44:
50:2e:f5:42:1e:fb:15:8b:d1:c4:9c:f9:41:cd:b9:
07:83:cb:d0:2a:a3:3b:2c:2a:8f:07:79:5d:7d:10:
3a:3e:97:54:7f:60:eb:eb:03:b0:2a:76:04:f8:ce:
b2:13:cc:7e:f6:8d:aa:ec:43:7c:41:83:b0:89:d6:
93:9c:a3:a4:ef:3c:d7:70:da:1a:28:04:0c:68:15:
3e:7c:d7:b6:fb:18:e7:29:88:81:49:1b:e7:fd:4f:
6f:c2:2f:f0:0b:fb:69:30:de:b7:28:d8:f4:52:be:
3e:47:15:64:50:5e:19:28:63:58:54:3d:a0:8f:f1:
38:9d:89:5a:6e:95:ef:2e:1b:f7:d4:92:47:ea:c8:
97:db:51:6a:c2:35:8e:96:0a:97:0c:45:b0:c4:a0:
33:43:67:02:e7:49:aa:2c:a7:f7:33:89:77:b2:77:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:BE:69:CA:8A:2B:62:E8:55:50:F5:E8:6D:D0:9E:0B:27:65:01
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:5b:55:43:84:0c:61:18:59:02:78:d1:59:0f:c7:52:0a:
7b:cd:9d:8e:fe:ed:94:5b:6d:41:25:e7:d7:b3:11:9a:c5:b0:
b3:dc:f0:77:26:2f:43:dd:94:84:c9:25:4b:4e:ed:b7:c2:61:
3f:82:1e:60:85:b6:10:8e:5d:6a:c3:d1:ec:ec:1e:00:6d:cf:
b0:e8:a8:cf:33:13:70:04:b9:57:bf:9a:19:71:91:59:b6:a7:
cd:99:33:58:ce:9b:55:95:3d:0a:1f:2c:20:b9:4d:8b:00:d1:
59:d4:b6:9b:3c:ff:f9:96:fa:47:fe:d7:42:26:45:cf:36:5e:
1b:e2:2c:03:82:5f:b8:dc:f6:a1:d0:c2:ae:cb:b0:07:cc:1d:
db:ae:ee:98:0f:b2:5a:8d:f7:e3:80:3e:b3:c9:54:c1:15:88:
12:15:2e:11:06:a8:e9:70:9d:f5:06:47:63:8b:80:3f:9f:ea:
46:76:60:1c:64:d9:fb:d7:30:a5:a0:98:b8:e4:d7:b5:00:3a:
1f:b3:01:fa:c7:f1:01:02:b5:65:28:ef:5a:fe:2b:7f:bb:5a:
39:5b:34:63:49:32:77:b1:0e:07:b7:e3:91:2e:81:9f:a7:a5:
9a:b0:63:c2:97:a7:98:a5:8a:46:61:70:d1:20:fb:82:9d:fb:
da:e8:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:44 2026 by rpki-client