Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: 33s8zFglWwUH1oFtLW7SyunDLQaEzuDtWLptMGjnEVE=
Subject key identifier: 3F:D0:71:5A:37:75:15:65:A7:19:63:E4:27:77:F9:2C:24:29:A1:A1
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019CAC102A32DADB02CEA5333CB322301A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: z/EzA0h5Zn60cjuf4zFyT4HmEvszB0bGw765W3P7pT4=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2a:32:da:db:02:ce:a5:33:3c:b3:22:30:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=3fd0715a37751565a71963e42777f92c2429a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:16:1b:60:13:d3:ab:d5:38:a6:ad:5d:3c:
a8:6d:51:5f:2c:85:25:c0:39:39:4f:c2:23:e7:b0:
36:72:44:51:a7:cd:0b:4f:ec:68:bb:58:ad:16:0e:
ab:f0:64:7a:58:1b:b5:4e:8a:0b:70:38:55:87:20:
88:de:91:5d:4d:ab:8f:b1:60:a5:c7:13:7f:1a:0b:
61:58:f7:c9:1d:da:11:0c:e4:01:9a:25:56:55:d3:
de:cf:66:9f:6f:9c:77:03:6b:7c:38:99:2e:1f:10:
52:96:02:31:51:f2:5a:2f:ca:5a:37:0a:23:77:48:
50:bb:1a:1d:4f:a4:2c:8d:89:1d:53:86:53:67:cc:
92:b0:5c:c9:25:c1:36:94:32:a3:cf:be:0d:97:0b:
ed:bd:10:c9:52:dd:71:ff:df:89:48:7c:81:47:08:
ca:3d:93:28:f7:a7:85:b4:fa:ed:80:ca:21:4d:dd:
44:df:7a:51:98:ad:d5:ef:04:d7:73:2d:e6:c7:7f:
c1:8c:75:96:37:71:ee:15:a1:c8:01:4d:43:5f:8e:
1c:b6:17:55:ab:bb:d4:98:e4:98:3f:72:ca:d8:93:
20:97:28:e2:e1:b6:cb:fc:6d:e9:0b:b7:c4:e3:81:
25:06:00:cb:1d:40:54:84:99:2b:a1:f7:ad:5c:7a:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:71:5A:37:75:15:65:A7:19:63:E4:27:77:F9:2C:24:29:A1:A1
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ba:e4:92:32:35:d6:8e:ae:83:f8:81:b7:5e:48:76:a4:07:
95:16:64:bb:19:66:71:4b:0f:b0:cc:0e:6b:47:5f:16:d4:6b:
e0:f9:e4:6f:9b:8a:a1:82:45:d9:ae:59:46:f0:c2:e6:ab:20:
30:74:0a:ad:75:2f:25:01:8d:69:82:1d:f2:15:df:75:27:36:
07:29:61:fb:06:b3:69:c8:19:9e:6f:a1:c4:25:db:bd:34:07:
0e:16:d3:ae:52:98:1e:53:83:89:5d:d9:db:77:6e:95:fc:7b:
d5:50:a1:2d:39:b9:ae:22:5a:be:27:12:0b:3f:58:3b:a6:f4:
a8:ec:1e:5b:1e:23:44:b9:87:cc:4a:03:a5:c0:ac:f8:83:75:
3d:24:ea:be:96:78:10:ee:31:46:cd:59:43:38:2d:c7:a1:12:
43:74:18:72:a4:d6:cc:68:bc:e1:c9:a8:d5:c6:8d:08:de:c5:
5a:e3:8c:f2:16:b1:42:d5:f1:4c:71:a7:55:b8:64:d2:a0:b8:
0e:7b:83:d4:c1:41:79:a9:aa:41:57:26:8a:3d:57:88:14:f0:
ce:4b:94:12:a5:cb:f6:ba:71:d7:ae:c1:11:15:0f:3a:25:4e:
34:67:62:48:10:7b:e4:b7:97:54:94:cb:42:c5:0c:56:59:a9:
9c:d2:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:51 2026 by rpki-client