
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: WA3/i9Yi6H5n/gWIHn001fxTr1kDmG1ICOCFouYtakE=
Subject key identifier: 1C:B2:B0:F8:7F:6D:07:24:33:A7:D3:4A:6A:C2:13:80:AB:3C:93:55
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 019CABD969FC1D2E2BF403423F5EF6801FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 14F4
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: 0rL4KcIWDWxgVp2p471QysyYlqZz1bhYIWcnXr/LpaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:69:fc:1d:2e:2b:f4:03:42:3f:5e:f6:80:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=1cb2b0f87f6d072433a7d34a6ac21380ab3c9355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:c9:cb:cb:bd:c0:d2:8e:c6:fe:11:50:21:
c8:81:0c:cc:93:30:f6:df:95:26:89:47:93:e1:c2:
47:22:de:0e:9b:54:d7:f8:d2:a9:c0:a5:ee:a6:76:
e8:16:27:04:98:b8:f1:b4:04:5e:07:61:ac:20:14:
90:83:27:76:6c:2e:1d:9b:09:7f:8a:0a:50:73:66:
45:28:96:dc:91:12:3f:82:34:86:85:97:9b:0a:42:
12:40:e5:e9:b0:2c:08:92:8c:35:7d:0e:f1:69:9c:
59:19:ae:19:b4:6e:12:a7:1e:b8:54:64:9a:3a:c2:
fb:a1:d9:04:7b:00:04:ba:e5:f3:cf:bd:c5:f9:ec:
b6:75:87:11:5a:08:ae:46:de:cd:e1:fc:31:3a:2a:
83:59:c9:8e:f6:71:88:ff:4f:80:46:4f:80:54:5e:
3c:96:e4:b2:15:3b:1b:bd:2e:56:01:c3:5c:f4:41:
41:c8:4e:a1:80:26:33:23:3d:60:47:43:5a:1d:89:
cd:3f:cd:95:a1:f8:2a:5a:a7:ab:ba:41:75:10:d3:
ce:19:02:c9:d0:f2:99:28:20:83:3d:95:a8:ff:06:
cd:b2:58:c8:57:1d:de:ee:7a:ad:77:7e:c5:53:32:
4d:79:ef:67:6a:b7:0f:00:6c:4e:3f:80:ed:3e:5c:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:B0:F8:7F:6D:07:24:33:A7:D3:4A:6A:C2:13:80:AB:3C:93:55
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6b:00:e7:58:ec:eb:ba:c5:c7:04:bd:c8:9b:e2:ad:5f:81:
10:46:6c:fc:ca:13:5e:95:66:a0:ea:ad:92:06:1e:e4:f6:71:
73:0f:33:e8:5d:a5:35:01:53:be:d7:d0:d8:02:79:44:b0:b1:
b3:81:99:84:fa:41:e2:07:dd:99:35:eb:b2:e9:f2:e2:23:17:
57:1c:fa:26:77:8d:f7:16:15:f5:cf:2d:d3:cb:9c:1a:0d:54:
79:1c:52:bf:e2:ea:f9:e1:56:fa:d7:3a:00:ad:c1:6a:44:c2:
c4:7e:8d:41:be:6a:34:2e:6a:c2:d6:3d:96:a7:2a:a2:af:6c:
fd:1f:31:d6:56:af:de:ee:16:c0:4e:54:af:cb:16:28:91:16:
88:ed:b6:98:d4:16:75:be:61:4c:6c:6e:aa:ca:a0:88:4f:c2:
03:67:d9:5d:42:7e:94:d6:5d:1c:89:c5:24:d1:a2:6c:7e:bf:
8a:cf:91:76:d3:be:fa:6f:6c:7d:eb:6d:dd:53:0b:6d:0d:1c:
cb:e8:75:82:3b:15:d4:2e:7f:16:ba:89:a1:7c:73:36:5b:f5:
d3:fc:f5:93:cf:89:68:b1:78:ac:b8:ad:19:9d:e7:79:a4:72:
5a:dd:5d:90:7d:69:8c:9e:1b:3d:fd:0c:a6:57:fa:5d:f5:fd:
60:78:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:33 2026 by rpki-client