Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: CoZFIuL1sHXJ8NyYUbqjXE7gbeQoZBFsMjt8HSqHS+I=
Subject key identifier: 3E:1C:69:8A:69:DE:34:95:77:B1:B3:2F:48:38:82:2B:7E:3A:9F:DA
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019CAAC6B26BB55E9A27653F7880BA076AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: Oq0q1iDezU0A2MWfPfCuRBuQoUO5bVV693ZC8SB/SNc=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b2:6b:b5:5e:9a:27:65:3f:78:80:ba:07:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=3e1c698a69de349577b1b32f4838822b7e3a9fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:32:39:95:89:a8:c6:d8:a5:6a:79:b8:40:
c9:30:c0:10:3e:95:ee:d3:48:e9:72:73:40:ce:17:
d0:cc:6d:64:81:0c:ff:62:94:cc:f9:90:55:4f:44:
7e:08:5a:a5:eb:74:8f:f7:0c:07:ce:34:b2:b8:6b:
21:92:08:0c:ee:60:7a:9f:a4:e6:64:6b:35:95:28:
1b:1e:63:77:df:5c:b9:a2:e7:fe:56:4b:d8:ff:57:
46:4e:7a:a2:16:fc:26:56:af:3e:ce:73:fa:5f:9f:
fb:92:45:41:f6:93:82:86:1d:8d:d5:0d:48:92:30:
d7:62:f5:47:b4:fc:56:7a:b9:ae:e7:bb:f9:6f:ab:
97:b0:2f:8f:03:e4:49:47:21:72:bf:48:48:1c:fe:
38:0c:17:83:d5:8b:a0:97:4b:29:47:c9:a7:c0:2e:
51:a8:58:fa:d4:95:8c:1c:97:b7:a5:3b:c3:cb:e6:
c9:cc:66:1f:9e:df:2a:74:7c:54:68:e8:40:d5:ec:
af:e4:63:4b:91:b1:99:b3:71:cc:41:cd:fd:fc:b5:
6a:c2:99:c6:17:ad:8a:09:6d:ad:8e:df:ac:7b:e8:
ce:02:c4:5f:5a:e9:da:d2:63:4c:6a:b7:f4:fc:98:
65:26:97:07:33:aa:7e:6d:7a:bb:ed:d4:1c:60:d6:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1C:69:8A:69:DE:34:95:77:B1:B3:2F:48:38:82:2B:7E:3A:9F:DA
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8d:72:e8:a8:e3:c9:ba:39:57:cd:84:ce:4e:10:32:2f:54:
b0:5a:63:db:1b:09:38:23:5d:ee:eb:58:58:7a:4f:7d:1d:1f:
86:ee:b3:c7:57:06:ab:4e:3f:a9:a8:c3:7d:ac:31:c0:fa:99:
b3:18:d0:68:81:c1:98:d7:98:a9:e8:34:5b:5e:b4:a3:db:ff:
d3:d1:fe:87:20:c7:bd:e4:f1:b6:98:8d:84:a7:7c:bd:e3:6a:
c9:b8:7f:99:cf:ae:cc:bf:58:85:f5:fe:f0:63:37:3e:df:93:
03:a4:47:a8:8e:b9:6e:0a:a4:ef:45:a2:09:76:63:b7:ac:1f:
dc:2b:b7:d2:50:43:8f:6c:17:7e:82:89:97:1f:63:7f:bd:2b:
d6:3b:d0:2a:90:af:03:9c:98:ab:65:74:fb:64:c3:5a:dc:86:
cd:a5:e0:51:88:70:23:67:d8:a3:b3:f9:15:14:16:a3:c4:f0:
1e:00:6a:a1:94:6f:cf:96:3c:18:da:4a:8d:51:c4:6f:6c:8d:
7e:1e:b1:8d:5a:71:28:1b:3f:a8:9b:06:1e:40:5b:82:ff:61:
c4:82:1f:38:11:8c:e4:23:2b:bf:f0:5c:c0:48:15:06:36:8f:
0b:d0:5a:65:d9:cf:25:90:65:fa:7b:16:42:38:ec:cd:e3:12:
cc:9f:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:25:47 2026 by rpki-client