Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: 5gmPtD+JNjK5aJwcvhWaaBX2yKi/km9up3UBOAExX2k=
Subject key identifier: 09:42:73:E4:13:FE:20:92:3B:69:26:88:04:8A:F5:41:52:13:60:B0
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019CABD9572843AFE0245F1456F9D1C79F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: uLB6bCg8tkOgH75pAFBmrvVVf9Oda3ImOStcx7QKgaI=)
2: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (hash: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:57:28:43:af:e0:24:5f:14:56:f9:d1:c7:9f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=094273e413fe20923b692688048af541521360b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:89:ba:c5:10:b6:5d:b7:06:c9:13:03:8e:
5e:9d:10:9f:56:fe:65:b6:8d:e4:b8:ad:a0:c7:4d:
53:65:de:65:be:c1:62:0e:51:cd:f9:87:f1:bc:7a:
66:2e:e1:f6:43:fa:6f:95:1d:9e:85:6c:bf:81:53:
a7:f6:f7:8c:74:38:45:e4:36:db:43:32:bb:6a:4d:
fc:55:dc:57:1a:3d:03:83:5d:d9:57:66:1c:e7:37:
a0:fe:01:eb:40:9d:4e:7d:60:7f:61:70:50:62:9d:
24:53:00:30:ca:4c:56:f2:64:c7:da:bd:7d:6f:7e:
bf:dd:fa:ed:c8:a7:67:fe:89:5d:a4:da:b1:0d:4f:
30:fe:5f:54:a4:fb:53:be:dd:4d:06:59:96:42:50:
f8:db:f6:c3:5b:48:58:9a:49:fb:ff:26:d6:84:d3:
9c:0f:e0:1c:74:46:03:7b:ee:a0:dd:9b:13:46:f8:
03:98:df:eb:c9:e4:31:55:5e:1f:00:a0:9c:d7:34:
b4:71:9c:22:51:b2:05:d3:b5:a6:45:0d:c3:a4:a1:
8f:f8:4a:b2:fe:1c:a5:34:6d:02:c6:c0:54:32:bf:
20:84:f4:a5:43:77:c0:99:a8:d1:23:0b:99:0b:58:
ce:8e:50:1f:bf:17:04:61:17:34:b4:84:16:86:8d:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:73:E4:13:FE:20:92:3B:69:26:88:04:8A:F5:41:52:13:60:B0
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:4e:34:6c:ec:9b:3f:57:e4:1a:00:9d:ce:73:f7:b5:b9:
1d:ab:8a:35:f4:98:9b:a5:d8:ff:85:8e:e9:c6:5e:21:ca:9a:
e6:db:ce:33:47:f7:00:3b:44:d2:59:17:4e:76:a5:2d:56:23:
ba:91:1b:63:19:e1:d0:59:25:8f:b7:ab:e0:4e:fd:35:87:d1:
12:32:74:0f:93:c6:5b:58:91:d4:81:c4:4d:ee:e3:07:fe:2c:
54:7b:36:f4:b6:66:d3:3f:a9:e1:1a:af:59:59:d2:f6:c8:e7:
26:a6:67:d5:b5:f0:31:dd:09:b9:a6:9f:12:f0:e1:78:8e:60:
8b:7e:80:ba:a3:59:98:83:7a:73:04:52:2e:4e:0f:6a:32:08:
5a:94:a0:e8:1f:3b:e0:f9:81:55:22:e0:82:16:89:c9:05:75:
e6:1d:6b:6b:59:07:81:6f:31:5a:b4:70:9c:5e:9a:e2:af:63:
67:9a:8f:d2:36:c5:a5:82:6c:47:a6:78:dd:05:59:3b:a5:42:
89:c3:40:17:e5:14:f3:4a:94:ae:b5:da:d0:e4:f1:d1:20:6a:
e9:61:9e:4c:46:99:3d:0a:f8:eb:84:c8:e2:d7:1e:87:d6:aa:
33:49:17:19:bf:58:11:98:ba:f7:7c:8f:80:d0:40:f4:c3:80:
9a:f1:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:27 2026 by rpki-client