Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: zjOFVhV/B7MBpoMWht1R9th30oI6+dLCwSkQBFW6Hr0=
Subject key identifier: DC:D7:47:0C:3C:3A:4E:E8:9E:77:0C:48:CE:84:4C:F9:77:4B:5F:71
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019E3298264D99EC397AB0789B03AED9D488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1925
Signing time: Sat 16 May 2026 21:01:32 +0000
Manifest this update: Sat 16 May 2026 21:01:32 +0000
Manifest next update: Sun 17 May 2026 21:01:32 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: +hDBYfGLF4vCOh665yMAdMVEuFZNn955aKW0EBy5ssI=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:26:4d:99:ec:39:7a:b0:78:9b:03:ae:d9:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: May 16 21:01:32 2026 GMT
Not After : May 17 21:01:32 2026 GMT
Subject: CN=dcd7470c3c3a4ee89e770c48ce844cf9774b5f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:9f:95:0b:31:96:ee:d1:f8:ee:a5:61:f5:
70:86:dc:35:2e:61:41:c7:3c:5a:7f:4f:80:89:e2:
46:d0:4d:ad:e6:2f:6a:0a:31:2b:49:84:f7:1e:b7:
43:5d:bc:af:0d:73:90:ba:7d:bf:80:c1:67:b9:c0:
31:e2:77:32:40:b0:4b:32:df:75:5b:6b:4d:0d:6d:
1a:c6:06:26:2f:67:14:3d:58:c8:0d:8e:1f:b7:01:
02:05:a7:2e:95:f1:ad:5a:7b:1c:b1:59:ba:db:97:
bb:2f:3d:7a:92:34:44:fc:8f:41:cb:ab:43:85:07:
c4:a0:3d:f1:a5:a2:c8:5f:e3:e2:bf:28:e0:35:44:
5e:f6:6e:98:3e:72:e5:0e:ec:df:34:ae:eb:9b:de:
3d:17:1e:ce:db:7f:eb:18:05:d6:96:1b:5a:3f:b6:
b1:2a:20:78:c4:e0:6b:52:49:8b:8d:b9:7c:d8:e1:
72:a3:2a:f5:3b:74:d7:98:1b:28:1f:9f:02:ac:d1:
bb:60:3d:cd:c6:24:6a:b6:5f:9d:e7:89:51:4c:da:
52:58:b7:8e:90:31:21:7d:ed:78:a0:53:6e:43:fa:
71:e3:63:82:be:80:d2:7d:14:b1:9d:15:b2:21:4a:
f7:8a:ab:04:4b:fa:c4:92:0b:1f:be:70:0b:de:2c:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:47:0C:3C:3A:4E:E8:9E:77:0C:48:CE:84:4C:F9:77:4B:5F:71
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:9a:9d:5a:4b:6a:b7:d1:27:2c:6e:54:91:63:be:89:3e:
68:79:a1:f7:fa:3a:43:00:8c:e8:31:2a:cc:25:ac:4b:01:ad:
cf:4d:43:21:f6:ba:3b:e4:07:fe:bf:02:a7:f6:cc:0d:0c:10:
f5:86:54:f2:f1:8e:ce:b3:a3:ba:e7:b6:0e:db:cc:0b:fc:38:
29:65:05:7a:79:ac:59:ca:5a:df:44:de:b3:e9:5c:bb:63:6a:
94:b8:1b:1c:38:8f:39:43:ee:7c:39:17:37:2e:06:ea:9c:cb:
9f:f8:b2:2d:2c:89:97:07:40:c2:88:7b:50:95:c1:19:bf:d7:
5d:3d:33:69:00:55:bf:39:83:b2:e6:9b:7d:aa:91:5d:89:cb:
fb:7a:af:5f:e4:d2:b0:89:b8:71:28:de:3f:4e:b7:7e:e2:65:
89:a7:ce:1c:b6:fb:85:5f:66:c6:4d:cd:07:87:a1:30:65:89:
eb:71:c8:d5:b6:0b:c4:7b:d8:68:99:51:15:14:4f:d7:fe:66:
14:95:68:6c:18:5f:7a:2a:61:b9:25:6d:75:50:45:01:e9:c1:
66:44:10:b4:eb:75:87:76:33:c1:8e:b0:59:95:e9:e0:98:2b:
e5:ce:e9:c0:a0:7d:69:28:ee:30:46:38:08:c9:f8:e6:8e:82:
f7:b4:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:17 2026 by rpki-client