Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: 7J8uVfgVJgl7kj9c6MAdL7yLuPgvJzTMNpm3RyhGyz0=
Subject key identifier: 90:4F:49:B3:7B:D2:CB:99:36:3F:49:99:86:9B:72:A8:9B:B5:6F:13
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019CAAC6EF181A69E794046932FB3859AFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:29 +0000
Manifest this update: Sun 01 Mar 2026 19:01:29 +0000
Manifest next update: Mon 02 Mar 2026 19:01:29 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: Jv1II6dm9Ki9V+r67lbkPGj15xvugZ561qz0hSttEO0=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ef:18:1a:69:e7:94:04:69:32:fb:38:59:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Mar 1 19:01:29 2026 GMT
Not After : Mar 2 19:01:29 2026 GMT
Subject: CN=904f49b37bd2cb99363f4999869b72a89bb56f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:64:47:27:8b:59:6d:fc:30:47:83:5f:1f:
62:d6:9d:f7:4f:ec:ea:d2:16:21:6b:11:b9:54:1a:
ff:49:82:c7:33:bc:bc:c1:5c:af:82:3a:77:54:3b:
4a:fb:25:2a:ee:45:69:ef:bc:fc:a5:6d:31:f1:0c:
49:b0:2a:bf:9f:a1:30:e4:74:f1:29:73:97:21:b8:
95:6e:ef:3a:5c:b6:17:92:4e:59:f6:e9:31:56:14:
bd:25:5b:7b:48:6c:47:2e:2c:47:ee:68:ad:96:75:
14:f2:09:16:d0:d1:64:de:8c:79:54:b1:9d:82:9a:
c6:05:ab:22:d7:8b:a3:df:88:99:75:34:23:42:93:
6b:31:2c:a4:d8:1c:f7:c6:91:72:44:3a:27:75:49:
41:fa:17:01:26:d6:a0:94:d4:e4:90:a8:5b:6e:a1:
5d:b8:b3:f3:05:90:0c:d8:07:3a:17:ba:62:fe:1a:
d3:e3:05:c8:40:d8:f1:de:bd:f6:0a:68:28:6d:01:
4c:cf:af:55:d6:3e:58:e6:ba:45:04:e7:31:9f:a4:
52:3c:d3:9c:a7:49:ba:69:36:e4:90:a0:48:db:b9:
e8:c6:6c:a7:83:2c:40:3b:e9:bc:b1:e5:0e:7f:89:
59:19:0e:a8:43:01:b2:79:0d:86:ca:62:3c:de:f8:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:49:B3:7B:D2:CB:99:36:3F:49:99:86:9B:72:A8:9B:B5:6F:13
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:91:d4:56:7f:3b:8b:eb:67:fd:44:89:ab:41:04:ef:73:
aa:88:fc:74:ac:1b:78:e2:6f:14:02:34:91:05:5c:95:00:da:
9b:61:ae:16:35:c0:15:0d:20:6f:b0:0d:7f:e2:6a:47:02:f5:
a8:3b:d2:47:75:26:5c:f2:df:fb:ab:c1:d2:b7:08:ed:c8:6e:
81:ef:a8:8b:3c:0e:83:b6:9f:85:2b:cf:b6:f6:27:ad:05:4e:
6d:6e:d9:82:6d:dc:93:8a:8d:c8:9e:c6:3b:fc:48:a9:3e:65:
b5:46:6e:6b:e4:ba:96:ac:7d:a0:84:e7:92:a3:19:cf:dc:a9:
d0:ac:91:2d:1f:5b:9e:cf:e9:32:b7:54:25:a8:74:4c:a3:44:
27:76:a8:7e:0d:84:34:3f:e0:89:02:49:6a:9d:ae:7c:50:25:
e3:f8:f1:74:5a:b8:5a:de:7f:d1:71:12:da:b6:2e:21:f2:28:
1b:9e:04:df:06:41:dc:ba:2c:f5:04:5c:6d:16:e6:22:b0:08:
71:2b:b4:d8:2e:9e:8b:d2:b5:f8:24:ac:80:b9:bb:0a:76:6f:
71:f7:f8:9f:1c:5c:7e:0d:55:34:fb:14:3e:cb:c4:11:e2:8f:
16:f7:ce:e6:12:c2:e3:8f:f8:0d:5d:b6:a3:ec:00:71:d6:aa:
fe:25:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:51 2026 by rpki-client