Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: nGsT4qOsCKE7z0xBdSlVVIVgxh5KUOlTQ0jLBEf+Yuc=
Subject key identifier: 7E:B7:8C:A2:6B:E4:15:FD:4C:A9:E3:99:33:37:C1:2C:6C:13:19:D8
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 019CAA584F50C9024E423C32C878643A9E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 100F
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: 7blufQfUy3L08m6kBc7bG6gVQ/9mv1WM8+G45lAtcJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4f:50:c9:02:4e:42:3c:32:c8:78:64:3a:9e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=7eb78ca26be415fd4ca9e3993337c12c6c1319d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:6a:4d:7a:f8:cc:09:55:25:20:0c:31:5d:
ef:5d:7c:30:e8:1a:19:35:df:01:d7:be:7d:f2:ce:
25:bc:90:f2:02:36:92:02:3a:bf:d6:07:76:1d:a3:
ab:f9:7d:76:3d:78:b2:d9:9e:f5:72:57:ca:13:e8:
ed:25:ef:0a:97:e4:97:49:92:69:7e:33:1f:3b:9c:
cf:0d:c9:64:41:d6:41:af:d2:2f:bb:4e:3b:ac:bf:
79:37:a3:d9:b4:ae:b3:82:c9:84:52:ac:39:fa:ba:
50:de:81:30:2b:cc:ea:27:5a:2b:90:7e:30:31:c0:
4e:f8:fb:85:8a:34:92:6a:ac:a6:7a:bd:09:2e:dd:
3b:b2:ee:66:46:e8:b0:9a:b7:db:71:74:40:ac:e9:
53:2f:0b:b9:ae:92:aa:c8:f8:c8:d8:73:1e:6b:60:
42:df:4b:14:53:6f:b3:9c:fd:e1:82:dc:ce:b7:6a:
0d:d5:c6:50:28:80:f8:06:87:4d:f0:3f:ae:93:5e:
37:3c:bb:58:b2:c9:fc:75:5d:67:d1:96:f6:0a:69:
60:96:cd:e2:95:15:08:3f:7b:88:b6:7b:9f:0e:20:
b5:6d:c0:97:df:27:1a:78:dc:d6:54:1a:bd:9d:c1:
ea:f4:24:7d:08:87:55:5a:66:25:9b:4a:e3:cb:0a:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:8C:A2:6B:E4:15:FD:4C:A9:E3:99:33:37:C1:2C:6C:13:19:D8
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:53:ee:d8:24:c3:77:55:55:a3:6c:2f:87:5c:55:fa:c2:12:
54:80:b9:bc:4c:39:93:f7:ee:89:07:b6:bf:87:94:8d:4f:01:
9e:56:f3:f1:ac:74:1f:a1:e2:21:db:57:ff:4b:8e:be:20:31:
71:c3:53:c6:2c:d8:6f:58:7c:7b:5b:e1:c8:33:53:52:ba:b5:
cd:e6:57:3a:9b:f2:60:af:d8:31:d0:db:17:33:bd:c6:a1:77:
c1:ec:c2:64:23:60:09:26:8e:10:41:a0:4d:21:f6:60:8c:bb:
31:54:46:80:08:57:e6:15:8f:ae:e8:1b:b8:58:28:b1:bc:68:
73:c3:a9:10:77:01:67:d2:19:09:97:87:58:bd:e2:ab:b9:00:
d0:b1:66:13:b0:bf:2a:a6:7a:01:7b:c2:13:a3:7b:49:b0:8d:
f9:f0:8c:e8:31:4f:b7:0c:d6:45:72:f1:af:c5:45:97:6e:3d:
20:f9:e5:ff:6a:20:e2:cd:36:15:1a:74:c0:02:67:f2:5a:7f:
57:56:97:e0:50:bb:b5:26:1e:1a:97:df:85:76:9a:e9:8f:51:
8e:8f:99:4c:15:86:49:22:bb:8f:fc:87:02:f9:02:12:14:e3:
3a:e7:f1:89:48:1f:ce:69:38:92:36:b9:96:98:38:af:78:e2:
be:47:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:20 2026 by rpki-client