Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: X+4EjjIWikSTb45C7SJGaFKhcfYOpA1pQelmqUWsPzE=
Subject key identifier: 17:3C:A8:8B:C4:6B:94:39:6B:D9:D6:04:29:43:EC:4B:36:22:B6:34
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019F36A9A80C4928CE7FBBA6D66D33157E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 165E
Signing time: Mon 06 Jul 2026 09:01:55 +0000
Manifest this update: Mon 06 Jul 2026 09:01:55 +0000
Manifest next update: Tue 07 Jul 2026 09:01:55 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: wqN3rVFeBjrU3GCRg4TIoejCVe7aAmt2ngemYxhZ/6s=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:a8:0c:49:28:ce:7f:bb:a6:d6:6d:33:15:7e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jul 6 09:01:55 2026 GMT
Not After : Jul 7 09:01:55 2026 GMT
Subject: CN=173ca88bc46b94396bd9d6042943ec4b3622b634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:6d:fa:bb:10:77:0a:ad:98:0e:eb:03:bc:
0c:1d:1b:f1:ef:3a:e6:99:1d:a5:d7:82:09:98:92:
10:e1:6c:44:79:3a:48:0c:e4:92:c3:1c:df:86:77:
7b:74:fe:01:79:c9:8f:46:cb:b1:af:48:65:b1:df:
69:c6:84:bd:72:c6:0d:eb:87:f6:5a:68:2e:15:e4:
6c:ab:93:ba:ee:e6:36:a1:f6:65:67:cb:6c:73:2a:
fa:e3:0f:99:f5:35:b6:40:93:6c:90:bf:86:8a:51:
78:d6:26:23:3f:0f:0a:a6:c9:19:ee:2b:9e:1e:7c:
22:97:74:f5:69:7b:90:f8:30:bc:9d:70:b6:b7:b9:
a4:dd:37:af:31:d3:2a:51:26:a0:94:3e:c8:b5:f9:
e6:9b:be:d9:31:f5:59:ec:6c:b4:2b:91:84:ef:60:
1b:4b:8b:d2:67:6d:4d:59:f5:cb:da:85:66:62:b1:
be:1e:63:aa:71:24:e3:50:8d:16:b9:2b:d9:f2:98:
77:a5:9a:85:85:4b:7d:68:78:4e:2a:05:07:4f:91:
d0:e7:2c:89:53:05:44:00:90:a9:b0:cb:47:7c:bc:
fd:f6:bc:83:9a:b7:a3:2b:9a:f9:98:46:70:3d:cb:
96:40:15:cf:3f:63:15:b6:c4:0e:43:6b:60:51:43:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:A8:8B:C4:6B:94:39:6B:D9:D6:04:29:43:EC:4B:36:22:B6:34
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:f0:a8:6e:32:f1:b0:b8:9b:8c:69:82:72:79:39:d1:28:
cd:79:12:a1:3c:09:9c:c7:bd:54:c8:85:a2:70:d8:73:8f:7d:
de:b6:d2:af:55:97:a0:fb:5d:09:22:e5:54:e7:0e:42:b9:32:
96:73:40:bd:99:50:ad:ec:13:6f:dc:85:3f:bc:06:d9:f9:2b:
5f:6f:30:cf:8d:0d:0d:f8:12:a1:6b:54:51:1e:3f:f7:c9:a8:
17:de:7e:38:4e:40:30:45:92:68:02:0b:bd:35:8d:ef:42:42:
ac:d4:25:56:b5:f8:8d:44:83:64:6c:4c:b6:0a:01:3b:bc:b1:
03:93:22:1f:eb:0b:78:60:91:70:a3:48:0c:f7:cd:55:9e:e6:
da:f1:d5:41:d5:fc:7f:f5:ed:34:41:26:7c:37:ba:7f:b5:d9:
f4:2b:14:6a:6c:02:0b:3c:bc:31:a7:4e:2c:01:97:9b:44:89:
f7:82:ed:4e:f0:68:04:1a:77:85:22:ff:24:50:58:0e:d6:69:
29:ec:f7:86:2e:c9:4f:d6:64:9a:5c:4e:db:7d:b6:66:84:d8:
1a:d0:48:1d:69:a2:3e:3b:c2:a4:71:cf:06:b6:98:96:1b:c1:
37:c1:99:4e:ca:7c:79:2e:8c:8e:20:0a:51:66:16:24:0a:3c:
71:13:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:12 2026 by rpki-client