Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: sgrkHeBfvOe07E5d6ZM3s2AsKmnzT2kh42tTxZgQo+Q=
Subject key identifier: D8:E9:5B:06:26:80:3F:B3:FC:D9:30:9F:85:0B:53:51:1F:8A:84:ED
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019DCE999492A4C70ADEF723E3D1964B4323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 11:01:04 +0000
Manifest this update: Mon 27 Apr 2026 11:01:04 +0000
Manifest next update: Tue 28 Apr 2026 11:01:04 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: Ogs7jboNaoO04kw2kyPb04e8XEhaxGyxrLv/XEKcy6I=)
2: mdgwEYDWnao0bVx89QT9Skm53nM.roa (hash: /jy8t/OJp9tVxCw/0qf7Mw46uVUZ9NIjSKlEDS6qgU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:94:92:a4:c7:0a:de:f7:23:e3:d1:96:4b:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Apr 27 11:01:04 2026 GMT
Not After : Apr 28 11:01:04 2026 GMT
Subject: CN=d8e95b0626803fb3fcd9309f850b53511f8a84ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:ec:af:0b:b9:40:11:e0:07:c7:0e:85:fe:
b1:60:fc:08:e3:35:3c:bc:66:56:d6:f9:4b:cf:01:
61:a1:fc:14:47:37:ab:56:79:0a:67:fb:f3:2f:eb:
ac:39:9d:ab:0d:01:5b:fc:46:46:97:82:0e:07:82:
6b:5c:69:0a:96:11:4c:d2:8f:da:c4:4b:2a:46:94:
56:0b:3f:df:8e:e2:f9:2a:5f:db:37:a7:33:ac:e5:
59:c8:67:96:34:63:34:26:57:a3:b9:79:59:27:e3:
b4:3b:50:c1:3d:ab:4a:06:9e:0a:51:9b:70:2e:4f:
3a:5c:c3:10:09:01:c7:67:99:a6:42:d6:91:cb:09:
b3:b2:c9:1d:3e:62:5e:57:3b:ec:5c:40:c4:3b:bf:
bd:cb:78:89:db:35:04:ee:b8:41:48:93:f9:54:d8:
78:3b:95:e7:77:c9:e3:ec:fe:2c:79:db:90:24:36:
db:b2:19:6e:6d:a1:73:87:33:cb:2e:e0:ff:e6:96:
ae:ea:bf:92:46:ab:7b:95:1c:44:44:ce:66:ae:76:
3c:ea:12:c5:1c:87:75:d2:34:38:1c:2b:a5:89:ff:
b8:d6:4a:a0:12:0f:30:ef:a5:31:b8:92:86:6d:71:
eb:aa:d6:64:39:e9:19:66:3f:30:69:f3:38:1f:31:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:5B:06:26:80:3F:B3:FC:D9:30:9F:85:0B:53:51:1F:8A:84:ED
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b9:18:c3:75:4e:37:e3:cf:1e:36:1c:b2:5e:dd:f8:13:97:
b9:8d:f7:36:a8:0e:da:a7:38:f9:fd:2f:04:62:db:ea:6e:7f:
87:31:7f:d7:57:78:3a:b5:2b:b5:70:ea:12:39:45:e2:6b:e3:
a9:1e:d7:e4:47:c7:bf:47:b4:25:df:31:be:b2:f2:48:4b:45:
1e:d5:1c:e3:e1:4a:a3:a5:c0:47:85:94:d0:74:65:2e:8a:a0:
31:f0:c4:38:52:22:fc:44:c6:d0:8d:a4:49:e3:62:8d:d5:2f:
07:3f:90:89:34:17:c0:18:23:3e:8a:85:2e:26:a0:27:01:e0:
8f:b0:d1:a0:5a:61:2f:80:df:87:70:81:47:e9:c4:d6:62:3d:
2a:31:b6:47:1d:72:22:d5:1d:5a:b0:a8:21:2c:67:79:8d:85:
26:f1:c8:15:53:0d:91:6d:4c:07:bf:cf:db:db:d3:ce:8f:e9:
bb:29:f5:a5:72:2e:7e:70:d8:be:91:14:ee:70:0c:e6:f5:65:
d8:8e:a0:a4:18:a3:a9:6d:08:cb:7f:94:e9:52:62:80:32:49:
08:37:43:55:69:43:41:03:d2:ce:2a:f7:75:8f:04:12:e5:13:
18:9c:f6:74:fd:4a:fb:3b:e3:ed:d3:a7:60:72:56:f5:6b:ed:
f2:da:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:28:17 2026 by rpki-client