Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: gNet8iK2ArmFrgG8CT/NJgnItwacVY71BNRVg6jr26c=
Subject key identifier: 3C:3F:E4:C3:44:CD:68:9C:D6:A0:FC:89:90:53:33:04:97:77:0F:16
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 019E30A989636824BF65F9CDCD44B2305014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 07C1
Signing time: Sat 16 May 2026 12:01:17 +0000
Manifest this update: Sat 16 May 2026 12:01:17 +0000
Manifest next update: Sun 17 May 2026 12:01:17 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: Rw3kY1U0rtLv1mBLZ3Zvattk3guWV4VozPU63UfY/Nc=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:89:63:68:24:bf:65:f9:cd:cd:44:b2:30:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: May 16 12:01:17 2026 GMT
Not After : May 17 12:01:17 2026 GMT
Subject: CN=3c3fe4c344cd689cd6a0fc899053330497770f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:e9:ac:d3:38:28:23:f2:ef:d5:9e:71:6b:
3e:52:79:f0:50:cf:e7:8d:2f:80:05:51:c5:7d:5d:
c8:c7:3f:50:c2:a8:f6:61:86:77:45:96:71:4f:00:
e1:95:dc:33:a1:72:19:90:07:71:19:b9:12:3a:3c:
65:04:db:c9:d6:ba:aa:be:75:c4:c9:83:93:29:af:
8b:90:64:ac:6a:d6:b8:2d:ca:48:54:db:7e:3a:32:
e9:a9:a0:80:8e:ab:71:82:ac:56:8b:7d:53:a0:73:
48:74:6f:64:a2:b4:26:d2:9d:f6:0b:b7:6b:c3:65:
75:f1:f7:9d:e7:d0:d4:58:53:fe:ad:93:18:4a:76:
dd:d4:1a:a2:68:3b:95:3a:83:ff:55:f6:7e:9c:32:
b9:cc:66:5b:a6:41:93:34:d9:08:64:50:81:0d:02:
62:e8:6d:0c:b3:bd:c6:85:67:7d:72:ee:af:c9:a0:
ba:2f:74:b6:be:d7:0a:99:da:fb:70:69:d5:eb:f5:
4e:6f:e4:9c:55:aa:56:ff:11:6f:9a:b8:84:97:3e:
6b:21:38:bf:2d:93:68:2d:2b:bf:1a:19:c8:ce:f1:
d2:94:a5:c1:ec:ed:53:df:0f:de:f3:de:18:37:cc:
63:fe:7f:5a:e9:90:63:30:02:83:1e:3d:45:a5:c2:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:E4:C3:44:CD:68:9C:D6:A0:FC:89:90:53:33:04:97:77:0F:16
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:33:64:ca:5f:a3:b9:1c:40:fe:5f:b3:6d:9f:c8:0a:46:79:
94:82:77:f6:31:a8:98:6f:de:73:2e:54:26:ae:a0:64:ea:fe:
78:13:8b:5b:64:cd:44:c3:84:92:1f:16:29:ee:f9:fa:25:67:
b7:d7:c3:d4:bf:42:56:17:df:46:09:bc:48:88:c6:45:28:93:
df:2e:d5:27:36:3c:3e:c1:9f:ef:5f:14:60:3a:b3:83:f2:04:
80:51:4a:ce:2c:eb:ad:11:d8:de:09:6c:db:6e:48:a3:09:67:
13:35:9d:5b:c1:02:bf:82:cc:b8:7b:89:7f:6e:c1:b3:61:04:
12:46:6b:0d:18:9d:43:f6:a6:02:fc:d4:82:35:3a:9f:ba:23:
26:e7:f7:55:60:fe:5e:de:f8:4f:3c:96:18:fa:b8:91:c6:4e:
d4:f5:ab:eb:7d:43:18:14:46:24:45:75:7a:28:20:74:5f:a2:
41:d7:6f:cc:65:05:96:ea:ed:55:2c:bf:99:c9:3f:38:86:13:
92:d1:29:d3:f2:8e:9e:b1:6c:2d:11:2f:a7:69:28:36:91:b8:
e1:91:9f:71:b6:4c:f0:4e:7e:b8:b1:d7:c7:4c:56:5a:bc:53:
52:c4:91:9b:76:79:fd:a7:ff:27:c8:7d:75:d2:a0:28:82:ab:
23:71:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:24 2026 by rpki-client