Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: MhqAleAYQEvyZsNiRvnzlOT9pKGNE31l2bGejO8reJ4=
Subject key identifier: C3:DE:8E:3B:8A:AA:49:AB:43:C5:72:28:AB:51:52:DC:A4:1E:A4:F2
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019CAC7DB8851F36F8B6A7A3941EA770ECCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1561
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: MhhBFT9UERkCMerxbwH/ixm50kepBSNiS5KMWkfxqCQ=)
2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
3: NCGBgWXRVgbgMAgfdWE4jwZPG0I.roa (hash: JGFZNQOApb7/WqwWE/c/9V/F0GH77gyItWPb/xZX69Q=)
4: p_00TDJoC_df0xtW1aS0ds5xGjc.roa (hash: INFP5QiogulQL7SH7SMy9hPl8oqUwzl8wp+SCc9XujY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b8:85:1f:36:f8:b6:a7:a3:94:1e:a7:70:ec:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=c3de8e3b8aaa49ab43c57228ab5152dca41ea4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:2b:47:e3:ed:8a:e8:cb:60:6c:25:98:6c:
d5:d1:50:23:d7:a4:f2:b9:97:12:9f:c2:c6:0f:50:
ba:e7:fc:8b:25:64:a4:26:a1:40:25:d0:67:df:4b:
b1:56:ec:ee:78:e4:0f:8e:7d:b9:8a:26:8f:4c:63:
c8:e7:7c:37:9b:61:00:ae:4b:7e:c1:40:e2:80:98:
c3:02:26:6f:59:b9:5a:bf:38:3a:e5:36:0b:8f:58:
e2:1b:53:d3:35:5e:b0:e9:91:96:d4:34:93:51:a9:
0a:ff:a6:b7:c7:86:1d:2c:ff:a7:41:5e:c0:a7:7a:
33:f2:91:3d:ba:2f:45:33:7f:16:02:7c:7e:3d:93:
03:2c:92:50:31:5e:7d:81:49:46:0b:29:ac:74:19:
f8:b9:b7:81:7a:84:c6:9d:6e:55:bc:c3:b6:a3:a7:
54:de:aa:25:de:33:ef:14:ca:0f:41:66:c9:94:7c:
5b:30:3a:e4:cd:35:ad:e8:6b:ed:96:62:08:0a:00:
9d:37:fe:88:72:c2:de:06:61:1a:e6:33:73:f3:44:
47:50:08:77:76:e5:66:39:ad:64:67:af:8e:d1:41:
a1:7e:16:47:91:f8:25:01:3f:0e:99:cf:52:4c:41:
7a:b7:49:31:bc:02:e9:f8:da:98:79:1a:a5:8e:8f:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:8E:3B:8A:AA:49:AB:43:C5:72:28:AB:51:52:DC:A4:1E:A4:F2
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:77:9a:de:b4:2a:49:ee:b2:50:47:1d:cc:2f:10:1d:e1:
e4:2e:cd:4b:9a:87:97:23:d4:ca:f9:a0:8e:63:da:e3:42:46:
1a:d7:8a:52:91:16:08:c3:1e:ed:ea:5a:f5:73:24:51:59:ba:
ec:38:f0:47:fb:1f:b0:3f:93:62:97:24:a0:ac:dd:22:22:07:
db:e2:c2:93:4f:3f:79:74:e1:c8:94:a2:2d:05:8e:d9:2c:d6:
d0:a1:8d:f3:8c:ab:d7:ed:81:26:b1:1f:3b:7b:ae:c7:18:f8:
10:f8:90:3d:94:b2:9b:ba:b4:8a:ef:88:3b:34:95:c0:83:d0:
9e:4a:e8:43:46:3d:69:e2:ff:47:ea:a7:96:11:b8:7c:ad:af:
0e:30:73:e2:0a:ad:13:4d:c4:fa:7c:0f:b5:f6:15:e6:23:e2:
8b:30:fe:12:ad:47:11:00:e0:cd:c4:22:7e:3f:ac:bd:34:f6:
bd:21:9f:4b:4b:ad:86:00:ea:34:b8:83:94:08:7e:5d:84:14:
9a:4f:41:68:ed:f9:84:b5:50:f5:0a:ad:6f:39:98:82:5c:eb:
bf:92:19:e6:53:e2:e5:15:22:72:c0:e5:99:bb:47:a0:fe:33:
1f:20:d1:05:fb:75:8e:0e:c2:eb:42:5c:39:53:39:d8:2b:1d:
12:85:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:18 2026 by rpki-client