Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: xw0s5d2tYleWO9sJ1VjV9t3QzRkHaZ1rEdWzjtVRIKM=
Subject key identifier: 56:12:B7:79:70:58:36:85:8C:BE:B4:00:68:A8:98:2F:0C:C6:77:D1
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019CABA2133094A004CF42B496A2D01A5750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0A52
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: 6134t8bOtxoLsDVZgqMv6oehjwso9sC+yC6jHrFCTrE=)
2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:13:30:94:a0:04:cf:42:b4:96:a2:d0:1a:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=5612b779705836858cbeb40068a8982f0cc677d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:f5:20:66:e8:7b:73:0e:5a:4a:eb:e1:87:
ab:ee:a1:f4:11:2f:e8:5d:5e:28:44:e0:a5:47:d2:
c0:54:59:7f:61:92:b5:95:2a:10:70:37:35:c8:63:
ab:4f:5f:c5:3e:25:d7:81:e9:54:c4:c0:92:f7:58:
c9:9c:3d:e7:6a:ee:03:c3:19:b6:d5:8a:62:c5:ef:
a2:3b:77:17:f2:eb:17:08:ca:c3:d5:c8:3d:e1:8a:
ef:98:62:e3:c3:85:47:ff:63:ba:31:ba:5a:d0:fb:
a1:61:8f:1c:83:6a:c2:5e:4b:a8:d0:d1:65:12:9f:
31:96:c4:68:70:cc:d5:55:59:81:1c:bc:28:f7:98:
9e:f2:c0:76:be:ec:58:2c:b6:08:ef:59:90:55:d8:
ff:b6:5d:39:6c:e4:5f:46:27:ec:ba:dd:af:17:b6:
87:4d:e2:83:9b:b6:73:ea:cf:c4:0a:7d:26:4a:61:
30:02:88:44:5e:da:02:3a:3c:dc:35:6b:99:66:75:
96:80:12:df:04:0a:70:43:39:51:da:7b:c5:c4:24:
01:73:46:be:29:09:08:5f:0b:a6:47:3f:56:df:dc:
3b:c2:8a:94:c7:42:23:c0:df:3e:f6:b0:cf:22:b5:
e4:c4:19:04:a6:44:cc:7d:d3:be:c5:e6:03:39:77:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:B7:79:70:58:36:85:8C:BE:B4:00:68:A8:98:2F:0C:C6:77:D1
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:97:e0:57:5c:ce:29:6c:9a:84:93:06:99:72:2b:64:28:4e:
56:08:2f:81:85:85:65:74:79:e9:07:69:95:f3:2f:a8:2e:5b:
91:f6:b2:32:90:c3:67:8d:99:2a:c2:29:9c:30:4d:78:37:d4:
7e:9d:b7:b7:5a:4a:66:b7:4d:87:eb:42:d0:38:4c:c7:03:72:
cd:fe:3b:f3:d4:5b:a1:9b:eb:a5:80:54:6f:20:0b:0d:c7:3a:
83:6c:4a:43:36:84:8c:4e:fb:d0:5b:ae:f6:c5:62:66:3b:56:
a0:71:eb:94:f6:9d:47:f2:a7:ce:84:56:4d:79:91:b9:75:c1:
64:cc:28:e6:e2:94:20:1b:92:33:da:58:21:d3:40:e8:f3:42:
35:9b:3e:1e:a9:6a:f4:51:7c:b8:0b:a9:5b:e7:dd:31:6a:48:
df:a7:f7:3c:a3:01:5d:06:bb:48:2d:09:5e:a0:c8:71:9b:98:
9a:29:7d:fd:37:dc:37:99:1b:8d:b4:f5:5d:53:bc:62:37:7c:
ab:d4:ba:d8:22:76:ab:88:41:7a:26:66:90:1f:72:93:e9:0a:
5e:a8:b9:9d:18:97:61:de:3d:f6:b0:a1:a6:9e:d9:64:16:23:
ec:e6:25:a3:be:b1:17:68:93:40:2f:ae:37:9c:91:7a:c0:2c:
5e:57:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:52 2026 by rpki-client