Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: RuNCgQvlsyiBDIFzYR9TQOZ8bDOhxa7lm7EyVCGaEZc=
Subject key identifier: 59:47:55:9F:84:C7:48:51:19:6C:05:C5:B0:01:FD:0C:2E:05:AC:14
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019D329AA7C2A746CA1F663301501777DEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 05DE
Signing time: Sat 28 Mar 2026 04:01:29 +0000
Manifest this update: Sat 28 Mar 2026 04:01:29 +0000
Manifest next update: Sun 29 Mar 2026 04:01:29 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: WpgqMNwPbyqJm/pRgFEXzuleJUaVUA6L2Rx2RuKPpVA=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:a7:c2:a7:46:ca:1f:66:33:01:50:17:77:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Mar 28 04:01:29 2026 GMT
Not After : Mar 29 04:01:29 2026 GMT
Subject: CN=5947559f84c74851196c05c5b001fd0c2e05ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:bc:5d:13:9a:ad:21:7b:bf:41:ee:03:ba:
86:34:ed:c1:e9:f7:38:e0:df:72:dd:ee:bc:a1:08:
27:80:86:26:b8:5e:4d:93:98:b6:d9:87:ca:d8:4f:
e2:4f:e8:62:84:98:60:59:f8:06:d0:b9:0a:d6:f2:
4a:0c:22:cb:0f:d6:c5:61:9d:a6:47:48:31:e2:7a:
24:8b:94:83:fc:5b:46:f3:bd:54:cc:3f:6d:23:14:
07:06:bc:1c:2c:28:1a:a0:ae:bf:bf:1d:e7:0e:29:
47:c7:25:d6:72:ef:51:20:e4:88:0d:a1:74:64:0a:
a9:11:bc:ec:07:a3:06:a2:47:d1:72:89:a4:34:13:
22:28:c5:53:27:7f:56:4f:f4:36:58:6f:fb:99:b9:
76:7e:3d:54:34:e2:f4:71:c3:c7:0c:ca:af:c8:d4:
8a:9e:50:50:f5:97:31:2f:a6:9b:bc:b1:91:de:84:
d9:97:fd:49:da:f3:21:c6:0c:7a:ff:e3:13:d9:6e:
4e:c9:96:07:e0:e0:52:b6:84:fe:6f:fd:1e:83:30:
84:36:9f:a2:a4:d6:75:86:5d:99:d7:c3:dc:42:7c:
c0:86:4e:0c:10:93:fb:aa:7e:02:af:ec:42:5e:a5:
04:20:72:9b:45:3f:c6:42:33:e7:20:e7:91:5b:d2:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:55:9F:84:C7:48:51:19:6C:05:C5:B0:01:FD:0C:2E:05:AC:14
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:ad:79:d9:1d:1c:e3:f9:9c:a6:dc:85:a7:f2:e8:87:d7:
4c:62:24:c6:cd:e0:cb:75:90:64:6f:85:d8:2c:9a:38:a6:05:
fb:81:5c:a0:99:81:7a:54:98:0d:48:aa:a5:da:cb:3a:18:61:
8c:07:9a:63:0d:83:c9:fa:be:48:3c:73:06:2b:bf:3b:0e:ad:
e8:7c:ef:bb:d1:fe:2c:db:c1:df:c5:07:a3:fc:2d:fd:6a:a9:
07:32:48:05:89:d6:0f:07:3a:d8:b7:60:ec:22:42:7a:c2:c7:
1e:7e:58:b3:d2:b2:3b:22:15:64:d0:a7:ad:c5:1f:5e:19:03:
69:46:36:9b:84:1f:19:78:29:d0:f8:12:e0:70:ef:e7:c7:2f:
42:a1:d6:f2:fb:39:d6:8c:8c:fd:f2:b4:5a:c4:b3:4b:cf:28:
be:4c:f9:fa:1a:8a:ab:4b:6f:15:87:fe:bf:b1:76:c8:0d:24:
bf:22:76:43:4e:31:25:87:93:dc:d3:bd:15:dd:c5:de:0a:89:
9d:7b:2e:9c:48:2b:4b:13:ae:f4:55:ea:f5:78:5f:34:fd:01:
8b:92:ff:75:fc:d9:a8:95:a7:0c:79:02:ed:06:7d:8b:4c:e3:
66:f7:df:7e:9e:63:4a:95:fd:01:ef:ba:3a:8f:53:18:53:7a:
eb:6c:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:30 2026 by rpki-client