Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: I/BRdWn9z60GeprTnyHGqj85H/OnmjnpgooIeAULhnY=
Subject key identifier: A9:6E:8C:48:06:7B:B1:B3:C6:2A:CB:A8:E5:A3:F9:2B:9B:3A:14:12
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019E2C282B91D8CD74C2772E7AECE67E920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 18BD
Signing time: Fri 15 May 2026 15:01:30 +0000
Manifest this update: Fri 15 May 2026 15:01:30 +0000
Manifest next update: Sat 16 May 2026 15:01:30 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: 6VAWVHysbwpvPr5dL4NnXBsGAcuvFdbp9foslEwlF94=)
2: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (hash: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:28:2b:91:d8:cd:74:c2:77:2e:7a:ec:e6:7e:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: May 15 15:01:30 2026 GMT
Not After : May 16 15:01:30 2026 GMT
Subject: CN=a96e8c48067bb1b3c62acba8e5a3f92b9b3a1412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:64:ef:4c:34:de:0e:16:47:fb:c2:33:38:
d3:0b:44:b1:a9:0f:f2:42:12:c8:ee:b3:b0:e4:c1:
55:42:c8:d6:a7:5d:ba:87:8e:83:6e:f5:29:2e:82:
ec:c8:1e:38:64:2e:69:b6:bd:f4:a4:0e:b0:0b:a3:
a5:84:f0:eb:85:ad:b3:7b:64:28:63:28:1d:44:c5:
49:d3:91:45:83:2f:d3:c3:e6:b2:8f:3a:47:6f:b2:
9b:60:3d:77:3b:ad:75:69:c2:5e:c9:70:90:5c:54:
ed:c3:03:63:a5:6b:ac:a3:c1:c9:8d:7a:de:89:7b:
f4:3a:11:ef:1a:dd:0a:30:51:20:30:0b:35:63:5d:
ea:f7:24:1a:43:90:23:cb:ed:b1:e8:62:82:0f:b9:
bc:9b:ef:94:3d:e7:a0:c8:da:47:1f:a8:98:ff:f5:
4a:d4:39:6a:6c:2e:0f:d9:12:79:e5:a8:1f:6f:07:
a1:f2:3f:e2:fa:fe:70:aa:c0:9f:da:8e:cd:54:84:
65:d8:56:07:ac:b5:f4:dd:4f:4b:6f:bf:a2:fe:bd:
38:03:87:33:c8:74:13:e0:bb:07:01:ae:4a:ac:bc:
40:84:5d:c0:06:c8:fe:b6:91:03:86:73:e7:0a:23:
50:59:b6:12:dd:76:cb:50:d7:10:f5:36:69:9e:07:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:8C:48:06:7B:B1:B3:C6:2A:CB:A8:E5:A3:F9:2B:9B:3A:14:12
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ab:39:f4:63:13:43:23:09:d6:67:13:f6:74:68:e3:af:ea:
fa:54:eb:4b:87:23:d2:6c:1c:49:05:d0:45:d8:65:9c:c6:47:
5d:b9:dc:7c:84:27:dc:5e:e0:56:bb:fa:0f:6c:38:68:15:b7:
89:17:4a:3b:81:79:23:b6:d2:e7:16:b7:db:5f:93:25:c3:75:
76:28:48:fb:bc:09:63:88:e4:22:af:93:57:c0:ae:c7:01:2f:
75:8a:b1:fb:a6:5b:96:34:b7:50:1d:5d:a0:eb:d3:d7:3e:93:
42:0b:d4:7e:b9:ba:20:79:49:3d:19:71:2d:c2:d4:fd:8a:47:
44:d0:fe:9f:a8:ad:06:a9:3f:78:af:b8:23:df:71:42:50:56:
b9:eb:59:d0:38:14:f6:34:ca:da:30:be:9b:a2:4d:33:10:30:
46:d4:e0:a3:76:91:f8:d1:96:5e:75:be:b4:0c:de:94:9c:7d:
68:00:ee:1e:57:8a:6b:cf:48:5d:29:28:88:8a:f6:d5:e2:7d:
f8:93:5d:ec:ba:66:90:60:9c:95:51:ae:11:db:49:1d:1f:f2:
3b:5a:6e:c5:76:20:b7:a7:ff:2c:2e:24:46:76:d1:36:61:c0:
33:03:73:d5:e8:f2:a5:1a:c3:cf:1b:a8:ba:bf:52:c5:54:3c:
8a:2c:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:06:13 2026 by rpki-client