Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: IMo+UPkPNmBjp8pUTiutBgKqptSMiGyLwpS8hMLQDPw=
Subject key identifier: 0F:D2:CB:80:54:DC:3B:46:B6:DC:7C:3C:C7:D6:F3:3D:FB:AC:91:03
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019CA9B4181024EB07C519075B845C85955E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1118
Signing time: Sun 01 Mar 2026 14:01:17 +0000
Manifest this update: Sun 01 Mar 2026 14:01:17 +0000
Manifest next update: Mon 02 Mar 2026 14:01:17 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: 2xGSXo9sIRiDHW5+e5tbg/Pmulk7Z6cbYbNzxnuLRfE=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b4:18:10:24:eb:07:c5:19:07:5b:84:5c:85:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Mar 1 14:01:17 2026 GMT
Not After : Mar 2 14:01:17 2026 GMT
Subject: CN=0fd2cb8054dc3b46b6dc7c3cc7d6f33dfbac9103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:62:6d:4a:dd:ec:5b:a8:7c:13:ed:12:23:
f7:31:c3:e3:bf:fa:c8:6a:9e:48:fe:44:a0:fc:b1:
1a:29:ef:e2:2f:c3:ae:29:ec:7a:c9:5d:af:ae:57:
24:07:36:4f:5c:29:68:79:50:b1:8a:c0:60:c8:6d:
76:28:63:69:e4:83:cc:92:6f:66:1d:d9:55:0c:80:
81:75:73:32:88:4c:38:1a:84:59:28:75:6e:9e:3a:
bf:87:49:94:03:b5:82:e7:42:cb:9f:9e:48:cf:ec:
d8:c6:c1:da:0d:df:0c:5f:f6:7a:6a:af:bb:2a:dd:
3a:82:8d:58:82:fe:b1:f2:d3:d7:d2:5e:2a:27:42:
e5:30:de:5f:ef:b9:f9:1f:28:bf:a5:ac:95:7c:e0:
44:61:d5:c7:cf:5b:e0:99:fa:7b:56:80:ba:0e:c8:
e5:61:4e:ce:62:a6:c8:6c:b7:9e:a5:6d:2b:4e:c0:
55:67:f0:cf:32:ac:53:f9:80:0f:09:4a:0d:88:a1:
d9:93:c7:5d:34:57:af:3a:2e:9b:2c:b7:42:4b:96:
c7:6b:ad:af:97:e1:5a:89:58:c1:de:e5:aa:d1:6c:
09:86:3a:86:ca:0a:7a:eb:e6:ff:a3:0d:60:85:b8:
ea:68:b5:79:c8:cd:3a:0b:0c:be:68:bd:12:5d:56:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:CB:80:54:DC:3B:46:B6:DC:7C:3C:C7:D6:F3:3D:FB:AC:91:03
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5b:6d:d2:d2:b6:26:9f:27:a2:f2:28:73:23:ff:0e:65:70:
66:2f:fa:8d:d7:ce:15:f7:da:44:ab:ed:ab:22:e6:fe:5f:0a:
a9:ce:37:40:57:be:a3:01:1a:df:ac:b4:a8:bb:3e:54:94:70:
cc:f4:01:66:b5:e9:5c:88:25:07:99:c7:26:ae:00:9d:39:4b:
19:1a:d0:4c:c9:8b:29:c8:b1:d8:c9:2c:23:99:0b:a0:f0:fc:
6a:98:25:db:b3:87:3b:17:a5:4d:ee:88:ea:d5:61:03:ca:81:
5a:03:e6:40:18:a1:c4:f6:13:32:cf:0c:7a:cc:45:b9:0c:be:
81:3a:ac:fe:6c:14:4b:43:b8:1d:76:0e:fe:88:34:3a:04:0c:
8c:e5:60:bd:28:ac:d6:02:1f:cd:a6:aa:d7:f7:c6:13:5a:67:
c0:15:55:66:1d:d8:6e:bb:59:3e:19:fd:33:e3:b3:55:fb:6a:
70:1b:d5:0a:c2:5a:c0:c7:a7:ba:61:60:03:8d:03:a3:13:91:
74:bb:4a:6c:64:f4:15:6d:bd:eb:31:d9:60:d7:a9:e2:78:85:
62:06:b7:5a:a3:7d:0a:65:93:8a:45:44:25:6e:46:c9:40:7a:
f5:dc:74:9c:57:26:6a:78:ce:a0:3a:7e:e9:5f:0f:9d:4b:12:
a4:ab:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:26 2026 by rpki-client