Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: C9BhGo1wZAYpJTMRTEi9mhj/K45qhJ4YlLZgq468ryI=
Subject key identifier: 46:57:24:EC:BC:E8:E3:D5:81:70:03:BE:90:9D:0C:2B:EA:64:81:F0
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019CAC7E11A19FB5237A1C1367EE9A141A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 02B4
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: NaQTDF0nWA8HV/BeKRcmN4nyJ0ZUIDozFyno2SaGbc8=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:11:a1:9f:b5:23:7a:1c:13:67:ee:9a:14:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=465724ecbce8e3d5817003be909d0c2bea6481f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:66:90:48:52:29:c7:be:ef:d7:3b:f5:e0:
bd:60:4f:4e:ae:96:9c:fe:dc:06:b1:0a:71:e7:8b:
61:37:46:2d:7b:fc:20:03:5d:c1:bf:c6:ee:c1:a6:
98:5c:cd:7f:f0:bf:39:36:e2:11:1e:26:de:a3:5b:
03:81:41:26:c3:d5:ab:f5:58:69:4c:04:a0:a4:be:
59:3d:22:f3:96:9c:63:d7:49:81:ec:02:3f:ab:fc:
1a:b2:b1:29:63:90:ab:9f:4f:54:a5:c0:2e:2a:e9:
53:f6:76:98:1b:a0:c0:74:18:01:7d:71:8a:98:02:
71:d4:32:c2:1f:95:00:45:b6:cc:3e:81:10:86:58:
91:f8:db:23:79:69:23:62:4c:12:ed:47:76:1b:d9:
0d:b7:ef:40:4c:0f:4b:ec:8f:e6:96:c6:7a:38:f7:
aa:1d:99:1f:ef:0d:d4:af:4c:ba:aa:73:5e:ba:70:
db:02:03:af:19:b7:7b:a1:20:97:0d:82:3a:53:c0:
95:2f:ee:9a:44:eb:68:e7:a9:7d:0e:cf:b2:1a:d8:
cd:97:53:6d:d4:c6:d4:03:7b:65:61:1c:1f:43:8d:
93:90:b8:87:79:1a:7c:a1:2a:95:c8:de:81:48:a6:
17:f9:bc:93:7a:67:b3:a9:a0:c5:cd:20:46:c5:b4:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:24:EC:BC:E8:E3:D5:81:70:03:BE:90:9D:0C:2B:EA:64:81:F0
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2b:ba:de:51:e5:cb:b7:d9:79:26:da:1b:57:fd:80:5d:52:
e5:e4:c9:82:5a:5c:23:a8:dc:d7:9c:c0:4f:93:a1:d2:3f:fb:
4b:ca:58:2f:94:b3:77:ae:df:76:59:f0:45:6d:a8:fa:4e:bc:
3e:ab:72:39:a5:57:d3:8c:74:7b:7d:5b:ec:09:a9:bb:e2:d4:
26:ae:cd:df:7d:57:1b:df:c3:7b:e5:8c:34:2c:77:c7:a6:f1:
80:ac:72:45:2c:7b:94:c8:c5:53:52:31:a8:ee:b1:3b:00:f1:
91:da:c9:f6:b5:00:ec:72:23:dd:d0:01:f6:03:3a:5e:68:b8:
85:ef:ab:e3:e6:e6:92:e9:ef:01:1d:3c:a1:12:76:87:15:40:
be:85:76:51:4f:82:1b:46:ba:09:1b:b7:eb:86:aa:d5:d8:1f:
f8:47:7b:0e:ec:85:dd:f7:fd:44:9c:e0:ca:2f:20:14:bf:fc:
50:f7:8b:e4:56:70:fc:e9:c2:10:72:a1:0c:3c:70:27:7b:05:
2b:5a:2b:ea:12:41:a7:4b:b3:e5:f4:b9:2c:fb:cc:28:d1:8e:
ed:e3:ce:b6:5b:cf:35:b3:b0:cf:fe:23:44:ce:e4:2d:4d:cc:
80:3d:b9:7d:d1:04:6a:15:0e:c7:dc:e7:50:81:c6:75:c3:4f:
68:9f:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:31 2026 by rpki-client