Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: NjNlqSg8hW/mPXp0w5YQV5zrAYtFXCaccbJSzcSOokM=
Subject key identifier: 88:0D:2C:49:64:05:EA:4C:CB:46:32:57:E4:BC:24:A9:8D:1D:78:C8
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019CAE6C26482E6E7E939246B559D9EB083C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1562
Signing time: Mon 02 Mar 2026 12:00:49 +0000
Manifest this update: Mon 02 Mar 2026 12:00:49 +0000
Manifest next update: Tue 03 Mar 2026 12:00:49 +0000
Files and hashes: 1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: rtqEVeN9cqXBMsI7BjkQWBzW1OvTG8z807CU5lDBcB8=)
2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
3: NCGBgWXRVgbgMAgfdWE4jwZPG0I.roa (hash: JGFZNQOApb7/WqwWE/c/9V/F0GH77gyItWPb/xZX69Q=)
4: p_00TDJoC_df0xtW1aS0ds5xGjc.roa (hash: INFP5QiogulQL7SH7SMy9hPl8oqUwzl8wp+SCc9XujY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:26:48:2e:6e:7e:93:92:46:b5:59:d9:eb:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Mar 2 12:00:49 2026 GMT
Not After : Mar 3 12:00:49 2026 GMT
Subject: CN=880d2c496405ea4ccb463257e4bc24a98d1d78c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:e0:d6:b4:8d:57:b3:45:31:a5:4a:d5:23:
ab:28:81:5b:1f:60:20:c2:73:72:77:7b:52:85:4d:
0f:b7:b2:5d:b1:ff:c6:d9:ad:2c:db:bc:28:fb:ad:
15:f4:36:95:18:00:b3:1c:52:c6:9f:99:f8:9b:8f:
f7:2e:91:de:9d:90:ad:bf:8b:ea:dc:65:ec:4a:d0:
f6:81:19:3e:da:72:df:64:56:3b:69:83:5d:26:b5:
73:a1:5a:f0:d3:f2:9c:a8:79:31:a4:1f:44:04:44:
77:2b:da:94:0a:19:fd:c2:fd:83:89:c4:f0:af:dd:
d1:93:2e:a4:9a:9e:93:6e:34:72:ab:46:f9:87:28:
43:b0:58:a7:89:01:2c:34:ee:43:62:6a:3d:db:39:
f5:ad:6f:24:e1:df:87:6d:be:29:16:27:06:3e:05:
08:b7:3b:cc:fd:c3:1b:bc:f0:d8:e6:40:96:73:d2:
4a:b6:4d:8c:7f:2c:bb:7b:3c:06:1a:d2:c3:4a:0a:
35:70:89:56:13:9c:04:92:e0:8c:bd:e6:10:2f:1c:
88:87:c2:79:e9:53:2c:da:a4:00:b3:57:cf:dc:a0:
65:cf:3b:c4:52:74:fc:22:17:9c:5f:01:cf:09:0a:
f7:58:0a:79:78:1c:87:f3:32:86:85:f6:f1:2e:89:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0D:2C:49:64:05:EA:4C:CB:46:32:57:E4:BC:24:A9:8D:1D:78:C8
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:84:c2:69:e6:20:73:44:bd:f9:47:ac:11:dd:17:ba:02:
ba:03:c4:13:0e:6c:8e:60:be:7e:cc:9b:f6:81:96:f6:e9:b8:
0f:58:62:69:89:ae:d3:36:00:7a:75:33:f9:2a:e8:27:3a:fa:
93:99:9a:be:1e:50:7b:f7:ba:5c:19:a4:34:c3:1d:16:3d:a6:
b0:1b:05:45:f3:19:5b:51:68:87:44:b4:06:23:7d:5b:00:d4:
28:e3:33:c0:24:59:26:68:ee:6e:41:60:26:40:4a:74:13:f8:
94:e2:6a:21:db:1c:74:dd:75:dc:bd:7a:91:27:0c:d7:c9:95:
80:cf:ee:13:c7:1a:9f:74:e4:5b:3f:b1:94:d1:59:86:5e:5c:
5f:c7:a2:1a:16:f9:26:6d:02:b3:2d:aa:1c:99:e5:3a:08:70:
8f:d1:aa:95:62:ba:5d:aa:96:a9:74:b1:e1:16:a8:98:bc:38:
0f:b4:d1:b3:c8:37:a9:cd:4c:90:6d:dd:57:be:7c:07:15:73:
e5:c5:d1:8e:56:31:ee:19:b9:5a:40:a0:2c:8b:99:a7:0b:d7:
d2:f6:fc:f7:74:b9:4e:df:fc:b2:fc:ad:1d:ff:68:c0:11:c0:
9f:7d:ce:79:ab:c9:7f:df:15:98:dc:16:2e:d4:75:55:fa:6d:
99:13:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:06 2026 by rpki-client