Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: vRie8qeqcgB1BXn6QtkBtsghSLC2DHacbCJKEXn7xXk=
Subject key identifier: 40:63:89:A9:3C:62:06:68:B8:A0:CF:6F:7C:32:C2:C4:4D:C5:A9:18
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019E3005000A6FAA753B323649DBE657C5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 15D6
Signing time: Sat 16 May 2026 09:01:34 +0000
Manifest this update: Sat 16 May 2026 09:01:34 +0000
Manifest next update: Sun 17 May 2026 09:01:34 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: rbr0/mIwKJlrm5Muy0lNtzEZkoH77iwwDsX4kSw1weQ=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:00:0a:6f:aa:75:3b:32:36:49:db:e6:57:c5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: May 16 09:01:34 2026 GMT
Not After : May 17 09:01:34 2026 GMT
Subject: CN=406389a93c620668b8a0cf6f7c32c2c44dc5a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:c7:81:2e:a5:42:c1:0a:fb:c1:e3:99:1c:
be:05:bb:0c:be:c8:dc:a7:99:9c:dc:d1:61:7a:51:
9d:f7:45:44:08:6e:c4:6a:e2:b0:8b:2e:cf:14:02:
97:ed:18:78:9a:af:33:a9:4e:a4:9e:28:5d:1f:25:
35:e3:63:55:87:82:5d:c7:d2:12:be:ca:3d:5b:f7:
bc:a4:19:af:1b:e1:dc:57:bb:cc:9e:f4:98:d8:d5:
53:37:1e:1d:7e:78:6e:b1:33:8e:d0:25:b7:29:4c:
52:74:66:b9:b5:5f:36:dc:c2:bb:8e:15:fa:60:c5:
94:4b:b8:f7:15:1f:14:98:57:21:97:51:36:e1:c1:
d0:1e:60:37:92:63:18:b2:80:24:17:49:04:24:95:
7f:fd:58:a6:d2:f5:f1:9d:c1:cd:9e:35:2e:1c:60:
7c:c7:b6:f6:41:51:c2:75:be:5f:36:63:cd:ce:22:
d9:bd:31:48:cc:86:1c:ab:62:b3:55:58:5f:8a:71:
38:09:b8:18:c7:e0:af:b7:1f:1d:eb:f2:b5:b2:82:
15:19:9d:6c:84:89:83:5a:ab:d0:81:74:2c:07:0d:
e6:cd:9b:f4:95:7f:83:aa:43:f1:b8:63:d4:3f:ad:
53:cd:6b:c5:4b:9d:7d:8b:ca:b4:e9:3d:a8:46:fb:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:63:89:A9:3C:62:06:68:B8:A0:CF:6F:7C:32:C2:C4:4D:C5:A9:18
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c6:36:4c:87:e9:28:8b:c0:8f:02:85:98:a6:e9:f1:b5:dc:
1a:f2:07:bc:88:c0:11:55:29:b6:83:37:e7:2d:96:2a:0d:af:
66:07:4b:9e:c4:4b:ae:2a:01:8b:c3:e4:99:98:32:2a:4c:c8:
22:81:8b:14:d4:10:e5:93:ea:a6:96:60:32:1e:3b:8c:86:d0:
c7:ae:f0:c8:80:83:d5:c8:db:af:d6:ed:d8:02:4f:ab:8b:d8:
79:be:ff:14:7e:34:00:33:0d:2c:b5:d3:41:c6:b9:af:4e:6e:
15:da:ff:cf:af:f1:3f:95:56:cc:a4:29:82:40:9d:6c:84:6a:
74:3f:9e:bb:aa:e7:d3:b9:ad:2e:b7:cb:0d:2e:00:ba:03:7b:
b6:ee:09:e9:7a:8b:c9:5d:5e:7a:4a:26:a0:f7:86:e9:74:41:
e3:83:c0:21:0e:df:c0:9c:9c:3d:04:3b:16:72:94:1b:fa:93:
df:63:49:2e:e4:b5:d5:31:27:51:b2:40:49:d3:14:d1:dc:de:
22:0c:18:0d:24:62:94:e3:52:8c:ea:3c:9a:6c:24:03:90:aa:
fa:fa:1e:d2:07:b1:50:06:87:9b:a7:7b:a5:fb:13:51:de:84:
08:09:a8:66:22:0d:d3:d9:4c:b1:c6:4b:f9:7b:44:21:3a:f5:
d9:ec:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:35 2026 by rpki-client