Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: KEbJox6dTuKaendM2c7yeevihoFrB4tsd6NobZ39yPo=
Subject key identifier: 0B:44:ED:D4:59:BC:48:CE:79:E1:51:89:90:BF:35:83:35:C4:26:C7
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019CAA581FFCD99C9A73A0975CA933696560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: 6fkc9vbG8GlJ-ztun97m-zUYfg4.roa (hash: zRY0m0UC6TjY6n8pP6oxYqs0avAat2u0qcFHm3tj6MI=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: KriSquWaYCmjvXn/zVg/oALCxkVIegC1jUPfGaC+oiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1f:fc:d9:9c:9a:73:a0:97:5c:a9:33:69:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=0b44edd459bc48ce79e1518990bf358335c426c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:6c:45:dc:5f:b4:4d:31:98:a8:35:61:c8:
ad:5e:1e:af:9c:43:58:35:2b:73:bb:ca:32:5c:49:
a1:1f:cc:55:67:31:ab:1b:be:97:fd:cc:48:c8:e3:
62:bf:07:52:90:b7:dc:c9:51:c9:08:56:cc:e2:37:
3b:9a:62:41:cf:85:b6:df:b9:8b:91:d9:bc:48:0d:
cb:2f:40:c8:f0:04:8c:98:18:93:0e:b7:ef:59:7a:
b4:c4:4a:4f:dd:a3:b9:c6:6b:df:86:c5:fe:5e:c7:
8e:ac:6a:23:8a:fb:26:3a:72:d0:2a:c9:b5:52:28:
35:9a:f4:6b:82:f0:bb:f2:f4:52:75:38:cb:e5:7e:
fc:7c:db:39:6e:80:04:a6:53:04:6d:99:23:af:98:
34:bc:a2:b3:21:8d:7d:f5:da:ea:99:0a:87:4f:3f:
37:87:e9:ac:4b:47:4c:59:7e:d5:aa:75:67:1a:ac:
03:e7:58:da:4d:0d:19:3e:51:d9:67:8a:11:38:73:
21:96:2e:92:fa:6b:40:4b:7c:de:53:83:eb:b2:00:
c9:7c:06:4b:c8:ae:79:96:63:70:ed:01:06:99:e1:
ee:98:eb:09:60:28:a5:dd:de:0d:d5:8d:28:ff:e3:
08:d8:53:df:51:db:3d:82:f8:b5:a5:52:4e:92:bf:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:ED:D4:59:BC:48:CE:79:E1:51:89:90:BF:35:83:35:C4:26:C7
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:28:a8:f4:00:0c:8d:17:17:a3:e8:bb:79:0c:b7:11:53:
b0:ad:71:85:4b:ed:fd:24:76:14:db:1e:37:9d:6c:c7:9d:62:
11:3c:cf:b1:90:c8:9c:46:4a:7f:01:8a:09:bf:bf:ac:19:ed:
ba:6e:56:27:3d:b3:f6:81:e5:97:82:f2:fa:15:26:a3:53:5d:
d0:48:f0:bd:22:5f:53:be:2a:72:68:0a:ae:19:b2:47:8c:29:
6e:d9:47:60:66:ba:e9:a4:6b:66:99:db:ab:ae:84:7a:71:82:
2e:1f:78:39:7b:d9:42:04:9d:8e:d6:58:33:21:88:87:ab:a7:
50:e4:02:2d:b5:ae:21:37:c7:8f:0c:b0:b3:a4:17:fe:6c:18:
2f:9a:f3:ef:27:84:a4:67:6a:e9:59:e2:97:3a:0d:df:91:1d:
ac:1a:9f:b1:7c:88:80:9d:1e:bf:3e:e5:0e:e6:88:be:d4:e1:
55:2f:8e:1e:20:ad:77:bd:cd:0f:47:eb:e3:f2:59:a7:8b:bd:
c9:40:2a:45:3c:41:da:47:28:b6:b9:f8:89:28:94:11:19:47:
fa:eb:c7:62:f6:f8:d7:21:fd:e7:76:bd:d7:6f:fa:84:a7:cc:
f7:24:4e:9c:79:80:c0:85:c7:f3:66:d9:bf:b7:c0:d1:cf:f1:
9c:a6:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:03 2026 by rpki-client