
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: rDjgHoAXKxzklNI+eQ3Ps+5DwUR49sbGAlRVucI/s30=
Subject key identifier: DF:1B:8C:06:39:19:81:E9:33:4E:C7:18:BD:06:DE:56:D0:C9:B5:1A
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 019CAD59B178645022FBAD9648A8FAAEDDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:02 +0000
Manifest this update: Mon 02 Mar 2026 07:01:02 +0000
Manifest next update: Tue 03 Mar 2026 07:01:02 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: wINhymgU16+duH4a7+NctcH5FC9MSYDp/vCcsXsCkTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b1:78:64:50:22:fb:ad:96:48:a8:fa:ae:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Mar 2 07:01:02 2026 GMT
Not After : Mar 3 07:01:02 2026 GMT
Subject: CN=df1b8c06391981e9334ec718bd06de56d0c9b51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:2a:90:a1:0b:11:78:df:7c:f7:77:d8:cd:
5b:31:06:30:83:3a:d8:91:f6:02:d4:26:e7:79:d4:
be:cb:f7:57:00:e1:f6:61:5d:32:97:47:40:02:4d:
31:aa:85:94:c4:78:9e:c6:40:c7:7e:43:f4:bc:3f:
ed:a9:f3:a3:a9:6a:03:20:ee:74:00:a7:49:ce:01:
6a:bb:14:c9:e1:02:76:a9:93:df:05:a5:59:44:2a:
1e:ac:67:8d:24:98:8c:75:2a:06:3b:e8:d4:41:84:
a9:0a:36:a7:80:47:9a:f4:e4:ad:66:3e:0a:4e:17:
77:65:09:2b:b6:5c:44:80:02:f0:48:be:29:3c:d2:
eb:14:81:90:53:bb:88:02:d2:3a:83:c1:25:e3:81:
98:af:b3:c8:10:49:f7:d1:8b:52:ab:0a:64:05:8a:
29:8f:e7:e2:11:23:fc:3d:41:f2:b4:c9:3f:9b:ac:
a7:29:42:98:3f:ef:82:04:84:9a:cb:53:cf:6b:ac:
54:d5:d4:ba:0f:b8:b7:3b:b6:23:d2:9d:92:a6:a4:
ae:06:c4:0b:f7:bd:9a:8a:83:97:bc:c3:83:95:76:
54:85:73:32:d9:58:bd:96:56:68:70:1b:6e:7d:14:
78:ee:95:ef:0f:ca:fc:a5:46:21:15:18:d2:3a:26:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:8C:06:39:19:81:E9:33:4E:C7:18:BD:06:DE:56:D0:C9:B5:1A
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:0f:52:bd:6c:fd:40:09:40:99:35:45:13:d5:c4:18:82:
cc:24:7a:4a:26:25:71:ad:90:98:12:ff:98:99:45:65:b4:45:
32:2d:5b:83:ee:e7:92:64:fa:57:65:af:4a:cc:4a:04:61:af:
c4:c9:71:cf:81:08:d8:8f:91:23:52:2d:f0:86:71:43:1a:62:
44:e5:03:35:22:e8:c5:f1:5d:ea:e8:87:e8:b1:86:be:f7:f4:
f9:b7:53:a4:03:64:91:0f:a8:b3:f1:f2:8c:b1:be:c7:2f:e7:
31:4b:77:11:3e:0c:86:31:39:36:03:3f:22:6e:fd:cb:f6:93:
7a:35:fb:c3:4e:0b:24:20:6f:b9:64:d4:95:2c:6e:02:34:ea:
a7:bb:18:7c:8b:1e:17:bb:ac:90:11:c8:f7:56:8b:ce:df:e9:
cf:54:98:c4:5c:f4:bf:e0:9d:4b:80:b3:a2:b8:26:67:74:2e:
aa:83:3e:8c:03:2f:9a:f1:42:9c:ec:fc:3a:14:5b:32:27:da:
fa:ae:f6:bd:c3:14:c5:d8:d1:98:ba:ee:38:b0:4f:2b:07:74:
15:37:d9:44:e4:0f:5a:4d:4e:be:df:a0:6b:4e:ab:29:b7:42:
c5:ac:f4:1b:59:8d:16:f9:0d:55:fb:04:3d:44:e9:1e:c1:81:
fb:22:2c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:21 2026 by rpki-client