Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: fGWw8FklGzwfFkg7wENmgLQ1WKjBBO9PneLqEFVzmRA=
Subject key identifier: 7C:BE:B0:C1:1A:F4:53:23:03:D1:96:8A:3B:DD:88:C6:23:3D:91:43
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 01A020562F5BBA2132ABBD8C47515EA1D3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 16D7
Signing time: Thu 20 Aug 2026 18:01:54 +0000
Manifest this update: Thu 20 Aug 2026 18:01:54 +0000
Manifest next update: Fri 21 Aug 2026 18:01:54 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 3btk8VHTXiz3Fl3O3+pZDfZ362vsHA7xi9kUbnihrJs=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:2f:5b:ba:21:32:ab:bd:8c:47:51:5e:a1:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Aug 20 18:01:54 2026 GMT
Not After : Aug 21 18:01:54 2026 GMT
Subject: CN=7cbeb0c11af4532303d1968a3bdd88c6233d9143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:01:fb:e6:bc:9d:f1:78:27:84:04:05:b5:
a2:f1:7d:72:33:b4:d6:03:9c:5f:4f:76:d0:2e:ac:
3e:b4:3b:ba:da:c4:61:f5:f0:ad:01:44:b7:ab:58:
ef:24:7b:de:4c:0b:3d:7b:fe:45:5f:8b:c2:6c:4e:
95:71:1b:1a:1d:2d:9a:91:7e:30:9c:ba:a2:19:af:
65:34:02:52:60:8b:04:19:f5:d5:9a:49:32:e8:1b:
b9:56:1e:30:7e:1c:d7:8e:6d:44:b3:10:f0:05:fd:
4e:ec:9f:08:8d:d1:a5:9c:bd:c6:54:7f:95:30:c5:
9e:19:50:65:b1:73:46:72:c8:49:3e:38:62:c0:d7:
f1:f4:44:c3:35:5f:8c:86:55:05:46:51:a9:88:a3:
75:49:a6:50:67:2d:96:90:19:40:e4:0f:c6:af:51:
84:88:d8:8d:05:f9:e1:2f:70:a6:80:50:86:e8:eb:
2e:67:10:68:30:c3:83:54:94:3c:54:49:f1:c3:b6:
c7:87:f8:dd:f1:09:72:05:1a:2a:79:cb:e1:4b:0d:
0b:c6:fb:af:9e:f5:b6:16:c3:e6:19:a7:12:ca:7e:
e3:61:90:3f:02:5a:8f:18:6e:e0:af:cf:4f:13:64:
17:f4:25:0f:0e:54:b9:a7:f4:e9:1b:36:32:c7:3f:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:B0:C1:1A:F4:53:23:03:D1:96:8A:3B:DD:88:C6:23:3D:91:43
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:06:64:ff:70:db:4a:64:4f:00:59:fc:58:e0:c0:a9:b6:65:
e0:b9:19:e4:91:07:ab:83:69:39:5b:74:fd:f2:d5:21:b1:70:
56:90:b3:29:14:f1:93:f6:74:ac:77:64:85:c8:92:13:cc:29:
3a:32:e2:f7:04:7e:82:0a:9a:64:88:e6:f6:90:d2:80:d0:a5:
a8:6f:ec:e2:80:2f:eb:40:c0:bb:4d:d7:1b:41:5f:08:c4:8d:
1e:d4:32:fa:3c:7a:b7:20:37:b4:ea:ef:13:7d:86:20:d7:e1:
88:20:f3:2e:57:2f:84:65:b5:b0:e9:07:1c:87:24:b7:a9:d5:
4e:f7:42:5e:e5:14:6a:d4:da:32:50:c5:71:ac:1f:df:17:c6:
3a:8c:49:5d:94:5e:34:2e:0d:d8:29:b5:80:53:81:ca:97:87:
de:91:7c:92:35:75:0c:a7:1b:0f:35:e0:ea:d6:0e:5c:4d:c8:
db:95:6a:af:7c:e9:1c:ab:32:ad:e3:b2:98:31:e0:b8:0c:2c:
68:fc:bf:8e:f8:9d:1d:82:f0:be:0a:93:d3:7d:93:2a:33:41:
8b:4d:c3:04:88:3e:e1:63:01:e9:2a:9c:af:4c:95:a8:9f:f3:
2a:cf:b5:83:e1:18:e4:f4:93:0c:b1:50:b8:3f:b9:f2:13:c3:
db:33:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:23 2026 by rpki-client