Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: XoR0KXfwPFVkZs8l+w/fG761t59lDjs+uBRxeq82sjg=
Subject key identifier: 86:A7:59:CC:5E:F0:4E:A7:47:05:ED:CC:35:2A:27:CF:BE:29:4F:BF
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 019CAD22B1DE75E3C665E7358031AA64DC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: esXO1+d07KB/935uDjCTsWC0mhFClSec6khy2qfQL8s=)
2: Fa2Vtt7OBxYgHIfhflgQOmFFexE.roa (hash: nsncXi1fM+9rcTyQmSh9C2tHMk0W4t5U2Q/c/sbGWGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b1:de:75:e3:c6:65:e7:35:80:31:aa:64:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=86a759cc5ef04ea74705edcc352a27cfbe294fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:dc:2a:8f:76:d7:26:2c:7d:f1:86:dc:09:
07:20:79:e6:5f:86:f6:99:48:50:5e:a4:0f:d2:57:
16:12:d8:3f:dc:f2:ab:e5:2f:0a:9f:69:ab:09:81:
c8:2e:68:27:d2:c3:0b:ef:70:a2:c1:f3:96:ba:a5:
df:31:2f:b0:dd:32:14:f0:1d:3e:97:2a:41:10:81:
6d:55:ea:5a:30:22:d7:5d:45:87:8f:0f:a5:ea:6d:
eb:e3:18:0c:d0:ec:bf:32:2e:2a:29:0e:b1:9f:8a:
75:b0:95:c3:74:68:c4:a0:cd:19:05:1e:79:41:70:
71:85:47:64:21:0d:fe:6a:d3:af:aa:07:6f:62:cf:
1e:33:2d:93:1e:bc:69:e4:a0:54:7f:e4:09:fe:47:
cf:c7:6d:65:ca:a7:9d:c1:9d:31:93:1b:50:43:f9:
02:14:22:96:44:55:ca:b3:5c:65:f2:07:60:a5:dd:
b5:8c:ca:ea:d8:5b:1e:9c:ef:27:4b:e1:c6:6d:9d:
0a:e4:10:9b:e1:27:2a:ac:55:0e:3e:c4:d9:82:b0:
92:d7:ad:9f:dc:17:44:04:0c:9d:00:96:3e:09:ae:
1f:cd:54:31:f8:a1:75:6c:df:b7:76:11:13:42:eb:
84:be:ba:e5:61:63:4e:69:d5:2a:b9:df:50:49:c2:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:59:CC:5E:F0:4E:A7:47:05:ED:CC:35:2A:27:CF:BE:29:4F:BF
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:19:ae:15:e6:6e:ed:56:bf:b2:5c:c7:e7:93:35:ca:59:72:
54:c7:59:9d:a8:61:1f:fd:28:8b:08:c9:69:55:12:fa:fe:b8:
ae:c1:68:99:39:9e:19:b8:8f:2f:86:59:3f:5c:79:5d:aa:38:
55:72:bf:f8:20:98:b8:03:8c:ab:04:e8:d8:c1:26:1b:5f:e4:
20:67:8d:ff:76:19:1f:aa:d7:82:98:6d:3a:a1:a8:28:77:fc:
c6:74:3e:bb:f8:c0:df:1d:49:ed:14:87:5d:3f:b1:b6:cd:f5:
11:d5:55:12:32:b0:0c:e0:ec:8f:31:19:61:a8:08:54:ad:94:
87:d3:e6:cb:9e:b0:9e:dd:e3:d7:a8:ad:d4:2f:36:b0:62:f6:
4b:36:e9:38:aa:66:1a:97:cd:7d:78:63:4f:7d:37:98:22:d7:
8f:53:cc:9d:ff:85:e0:fb:09:78:3f:42:c3:bc:b3:94:b7:c0:
05:11:22:9a:0c:7b:c5:3c:f9:c1:08:eb:bf:81:49:81:51:c9:
0f:3d:b3:63:0a:fb:c9:bd:ed:87:9c:52:f8:88:8b:20:db:c2:
7f:82:fc:ea:10:4d:10:e6:a7:ed:58:85:a4:d0:8a:39:ef:93:
b3:91:74:22:53:36:c8:32:87:b0:de:31:65:7d:3a:89:d3:57:
de:ff:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:51 2026 by rpki-client