Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: OejAiYLDMwIC4jkYRDPH+fu+aAsoCuMjgYCLWtdi9JI=
Subject key identifier: 90:77:79:DF:78:2A:8A:A0:72:22:CB:DB:0C:88:39:82:F9:66:50:2D
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019D38D35B9CC66242F03770FB582099ACEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1556
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: OV1Xc2nDgOmWuibDoln96NzfGEh8MvXIJSobPYF8id8=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5b:9c:c6:62:42:f0:37:70:fb:58:20:99:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=907779df782a8aa07222cbdb0c883982f966502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:54:47:95:09:98:f0:b0:d3:81:f0:02:ee:
c5:ce:c0:12:da:30:71:16:83:f8:63:6e:f6:4e:56:
cb:a8:79:62:de:c0:41:38:ef:90:2c:cf:9e:54:8d:
c2:88:3f:bd:6f:b9:6a:8d:1c:2e:69:74:d9:1c:18:
ca:52:47:3d:b6:a8:68:f0:86:6a:ab:e6:ce:86:4f:
46:c7:3a:a5:31:03:14:d1:a0:a1:ff:a4:52:ee:4c:
55:2a:42:91:0a:47:d8:76:fa:39:d0:4e:4c:f5:95:
be:48:87:d5:c1:6c:4a:fa:b5:e3:bf:dd:67:3c:d3:
5e:ed:4f:55:4a:c5:f1:ec:50:86:3a:41:75:37:ad:
a3:91:7c:14:37:27:5e:d7:98:60:88:20:14:4d:a8:
33:cd:a9:a9:fb:e9:64:01:3f:55:3a:58:ba:61:40:
d3:57:d1:52:20:d0:51:ef:4c:7c:d3:51:4d:69:f2:
b1:b1:da:69:b1:0a:16:dc:89:ad:47:86:b5:87:9e:
b1:cf:75:f7:8c:17:6d:ec:3d:dc:b0:52:cf:21:35:
c0:fe:40:2d:10:da:b9:9a:b5:21:b1:3e:10:c6:1e:
e0:73:2c:d9:4c:7f:3d:cb:4e:61:91:0b:e1:74:e8:
86:ed:a4:f9:93:86:f9:72:b0:24:c3:f3:2e:51:ab:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:77:79:DF:78:2A:8A:A0:72:22:CB:DB:0C:88:39:82:F9:66:50:2D
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:cd:88:9d:a4:cb:28:f7:88:61:73:f8:1d:da:93:c1:99:
90:de:48:2d:2c:6f:f7:ac:2c:67:83:bf:a1:44:5c:26:b1:4d:
07:79:db:23:06:bd:81:ab:01:2e:88:b9:45:8a:8f:ad:61:e9:
41:eb:8d:d2:d9:ce:42:20:64:00:b7:83:08:e0:93:db:89:49:
a0:33:18:3c:ed:74:2c:63:c2:de:d6:1b:fd:8b:0b:a5:99:b7:
df:31:f0:08:10:fb:41:54:30:65:f0:4d:e0:83:6f:26:ec:2a:
3b:83:e1:bb:6b:55:b3:7e:f1:a6:05:4a:96:99:a8:d5:d6:1d:
19:bb:92:60:91:f4:6e:be:08:03:c1:e8:db:44:36:89:81:11:
b6:4d:dc:66:8e:aa:6c:ce:06:73:a9:fe:46:35:e0:bd:da:f5:
76:e5:5e:51:03:c0:8e:90:b1:d7:9d:df:e0:50:56:53:ec:12:
64:bf:69:51:e6:d1:b8:38:a7:c7:fe:3d:d4:75:72:ec:12:ef:
22:48:f0:f5:22:26:38:0d:33:7e:62:12:a4:bc:f7:08:f8:6e:
e9:97:76:8c:f9:ff:8b:a8:66:b2:5f:38:0b:eb:23:6d:8f:a1:
a1:5e:f3:d2:b9:d0:6c:c0:31:a2:a6:8f:b5:5a:3b:fd:34:cd:
ca:93:10:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0401ucxmJC8Ddw+1ggmazuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjYwMzI5MDkwMTA4WhcNMjYwMzMwMDkwMTA4WjAzMTEwLwYDVQQD
Eyg5MDc3NzlkZjc4MmE4YWEwNzIyMmNiZGIwYzg4Mzk4MmY5NjY1MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S1UR5UJmPCw04HwAu7FzsAS2jBx
FoP4Y272TlbLqHli3sBBOO+QLM+eVI3CiD+9b7lqjRwuaXTZHBjKUkc9tqho8IZq
q+bOhk9GxzqlMQMU0aCh/6RS7kxVKkKRCkfYdvo50E5M9ZW+SIfVwWxK+rXjv91n
PNNe7U9VSsXx7FCGOkF1N62jkXwUNyde15hgiCAUTagzzamp++lkAT9VOli6YUDT
V9FSINBR70x801FNafKxsdppsQoW3ImtR4a1h56xz3X3jBdt7D3csFLPITXA/kAt
ENq5mrUhsT4Qxh7gcyzZTH89y05hkQvhdOiG7aT5k4b5crAkw/MuUatz/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB3ed94KoqgciLL2wyIOYL5ZlAtMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkvNiJ2k
yyj3iGFz+B3ak8GZkN5ILSxv96wsZ4O/oURcJrFNB3nbIwa9gasBLoi5RYqPrWHp
QeuN0tnOQiBkALeDCOCT24lJoDMYPO10LGPC3tYb/YsLpZm33zHwCBD7QVQwZfBN
4INvJuwqO4Phu2tVs37xpgVKlpmo1dYdGbuSYJH0br4IA8Ho20Q2iYERtk3cZo6q
bM4Gc6n+RjXgvdr1duVeUQPAjpCx153f4FBWU+wSZL9pUebRuDinx/491HVy7BLv
Ikjw9SImOA0zfmISpLz3CPhu6Zd2jPn/i6hmsl84C+sjbY+hoV7z0rnQbMAxoqaP
tVo7/TTNypMQuA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:50 2026 by rpki-client