Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: jcez2BvGKuu/nIfgz+Af3nVHIjfRJYGySRimiGUoBVo=
Subject key identifier: 45:9A:67:EB:79:C0:20:50:1C:F6:05:9A:04:80:BC:29:DC:7E:37:C6
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019CAB6B013F0536D338E06B2627236CBFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1636
Signing time: Sun 01 Mar 2026 22:00:42 +0000
Manifest this update: Sun 01 Mar 2026 22:00:42 +0000
Manifest next update: Mon 02 Mar 2026 22:00:42 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: oZtppQFkyE/wF9Q+Gba9Rh6hCw5yyG+YrnD845P5UvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:01:3f:05:36:d3:38:e0:6b:26:27:23:6c:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Mar 1 22:00:42 2026 GMT
Not After : Mar 2 22:00:42 2026 GMT
Subject: CN=459a67eb79c020501cf6059a0480bc29dc7e37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:09:c6:e8:73:6b:4a:1b:9d:b5:a5:fd:a8:
83:48:af:61:ce:74:e5:fa:a0:a5:98:61:27:8a:50:
a7:1a:df:4d:05:b6:00:53:73:06:73:bc:71:c4:fe:
02:57:81:bc:0a:a4:c3:32:6f:be:46:85:1d:ed:46:
f2:76:dd:c1:9e:1c:24:04:a5:16:b4:22:57:bd:85:
20:e0:59:e5:e9:ff:b1:5e:43:5d:3c:10:9b:9f:89:
88:21:47:3c:e2:c1:a2:06:c2:7b:01:94:27:3c:87:
2a:68:37:eb:1f:7b:d5:75:e2:32:6c:3e:7a:32:9c:
f2:fc:70:38:ae:8f:83:ce:3d:23:18:df:ad:9b:11:
d9:63:f7:42:33:6a:03:b7:e0:7c:4c:0b:fb:c1:52:
ca:be:47:96:c5:cb:16:ea:e2:f9:0c:f9:c2:51:33:
43:19:0a:13:ae:99:75:1f:f7:51:95:05:a7:da:4d:
97:63:64:dc:9e:7e:54:f9:5d:26:91:36:44:dd:6b:
89:29:17:bb:50:c2:55:83:20:05:dd:30:b9:88:92:
91:79:73:51:9c:9b:9d:99:17:a4:5c:fd:a0:12:36:
29:82:da:8c:83:9e:c5:e0:18:74:51:47:24:92:fc:
30:81:3e:5c:3d:df:b5:71:d5:29:a6:dd:cb:a4:b6:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:67:EB:79:C0:20:50:1C:F6:05:9A:04:80:BC:29:DC:7E:37:C6
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:18:4c:57:1e:25:0e:3e:e6:76:33:5c:21:7e:18:52:79:01:
b5:f8:fe:46:23:f2:11:94:47:5a:ca:9f:ce:09:28:1b:80:a1:
41:82:22:0d:d0:d1:2c:9a:1d:7f:8c:6c:5a:6c:66:77:26:b1:
bc:7e:06:a8:cc:62:ba:1c:99:1b:4c:98:e7:7d:6e:aa:85:d6:
cb:95:34:f8:1d:c3:89:0d:da:f5:b9:01:e4:00:c6:ad:6a:41:
25:14:62:4a:56:e5:70:8f:fd:1f:c8:42:6e:87:7f:04:6f:51:
99:7a:c0:cc:8a:2c:15:44:9f:b0:09:be:60:56:f8:21:67:b0:
a5:46:21:94:6c:9f:e2:42:7f:3f:14:6e:99:ee:b8:94:6e:fa:
ec:d8:67:58:4f:4f:48:d6:a7:ab:31:74:53:42:c0:03:e0:bb:
0d:48:df:22:83:02:67:fe:60:61:44:f5:85:21:e2:a5:c8:48:
ef:35:be:66:bb:1d:67:f5:12:06:0d:6a:62:a9:8f:20:b4:8d:
be:52:dd:a3:63:32:7e:14:68:47:a3:12:65:50:21:75:71:b0:
2b:ca:94:94:9d:fe:c3:d1:03:e2:bc:d2:6e:66:c8:4e:5e:8c:
5f:9b:7d:75:0b:b2:7a:ba:05:b5:20:54:11:b7:c7:61:89:5a:
f5:da:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:26 2026 by rpki-client