Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: HqzdozT/CaGpAXsGuGukqkqkJXAixtkCY1vd0a1sZ1A=
Subject key identifier: AE:EB:FE:CB:DE:BC:5E:51:FA:2A:3D:46:67:2D:78:2D:14:14:04:D1
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 019CAB34318D121A98DDAF5F3AF67EA3819B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: ff6MSDETS42Z30IWEBAuqnhUuknfoQziKmM+0UrkfaY=)
2: Fa2Vtt7OBxYgHIfhflgQOmFFexE.roa (hash: nsncXi1fM+9rcTyQmSh9C2tHMk0W4t5U2Q/c/sbGWGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:31:8d:12:1a:98:dd:af:5f:3a:f6:7e:a3:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=aeebfecbdebc5e51fa2a3d46672d782d141404d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:74:13:b2:d2:5b:f6:ff:2a:ee:64:3b:45:
6e:f4:a0:69:41:64:ac:08:4f:ad:a4:e1:e5:b2:23:
3f:64:43:c3:09:8d:75:84:ce:dc:26:c4:97:19:f3:
2b:e7:04:11:6e:2a:55:76:a6:c2:11:c0:4a:49:33:
cd:e5:a0:28:ce:f1:26:96:84:a8:d2:46:c8:a6:ea:
ce:0f:64:1b:6e:bb:00:e4:4a:a4:ca:9e:6e:b2:1e:
c0:0a:a9:d5:a1:88:27:37:11:3d:81:53:03:24:d5:
2c:19:de:d0:75:cc:bb:4d:74:e8:2b:7a:7f:ec:4e:
15:2a:66:d5:da:76:94:cd:57:45:3c:17:0c:f5:97:
55:a3:fa:53:33:96:83:51:5c:a1:fc:15:fa:5f:84:
9e:64:69:82:08:b3:ec:5f:d6:cb:3d:ef:a4:97:57:
bf:63:a3:5d:84:df:9d:7d:9b:b8:3c:22:d3:6c:d4:
9e:fe:b8:b9:cf:4a:aa:c5:74:b2:2c:1c:ad:ac:35:
ef:74:1e:fb:9e:aa:4f:e7:59:66:b6:7d:fc:dd:32:
b4:9a:88:aa:99:b8:0c:89:69:eb:6b:e9:62:e4:41:
24:b6:e1:76:3d:ce:ab:b4:31:70:f6:e1:59:83:40:
a1:ba:81:ac:7a:89:7d:cb:10:e7:96:0e:de:03:6c:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EB:FE:CB:DE:BC:5E:51:FA:2A:3D:46:67:2D:78:2D:14:14:04:D1
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c8:d9:e6:6d:4a:be:15:e6:ae:41:e2:7b:f5:e4:79:66:cb:
46:7a:f0:ed:35:6b:5d:bb:e8:f6:ef:e1:db:cc:fc:9c:00:3f:
86:ab:59:0b:9f:dd:ea:0c:38:a5:2f:74:e7:2f:dc:33:69:7a:
7a:f4:cd:93:e0:ca:5b:ff:41:4e:aa:f4:31:f9:e0:22:c5:b3:
73:9d:24:30:fd:ed:ca:9a:cb:e7:86:c6:f6:3d:a9:3a:40:cd:
b3:8a:75:51:a1:d2:82:64:e0:00:10:b9:e8:2d:7f:cd:67:bb:
15:a4:d1:57:d3:a2:18:9b:dc:db:6b:c2:3f:50:70:13:16:b4:
e5:c7:25:08:c4:ad:a7:8c:91:90:8a:34:43:5a:a1:57:f4:86:
20:73:49:a2:06:b9:98:20:ba:79:94:dd:36:a2:9d:6d:85:28:
b1:e6:86:44:c2:7b:f0:85:53:59:c8:6a:d6:dc:ad:5c:fa:89:
d2:d7:64:4b:2f:29:fe:2b:1d:03:0f:54:94:89:11:a1:cd:ca:
23:94:7b:74:82:54:50:ac:c4:e7:00:6f:db:ac:57:c0:5d:3a:
fb:e7:59:94:1f:32:fe:8c:d3:70:01:e7:d4:98:d5:ea:20:c7:
da:f5:e3:bc:28:85:04:41:db:cb:65:3f:9f:76:14:aa:b1:f4:
6e:73:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:06 2026 by rpki-client