Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: 6W3onwikATbsYqjGFs6cWjf4360zpZqkTjnyWs5+6Os=
Subject key identifier: 7C:7A:2B:D0:F8:CA:36:D9:8D:04:79:4C:9C:33:0A:9D:7C:EF:61:CA
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019E30054E49CCE63DF20C806E58CF8231D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 1567
Signing time: Sat 16 May 2026 09:01:54 +0000
Manifest this update: Sat 16 May 2026 09:01:54 +0000
Manifest next update: Sun 17 May 2026 09:01:54 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: jMrJ8mx4DEPNu+JMIDYdC7gKxKFKVJu2lXzXwmJeY7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:4e:49:cc:e6:3d:f2:0c:80:6e:58:cf:82:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: May 16 09:01:54 2026 GMT
Not After : May 17 09:01:54 2026 GMT
Subject: CN=7c7a2bd0f8ca36d98d04794c9c330a9d7cef61ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:94:3f:fa:cd:02:8e:b1:8c:d9:8a:1a:13:
18:93:c1:cc:18:a9:d1:ec:79:45:2b:df:eb:83:c5:
14:a0:cd:9c:d3:ff:8a:d7:52:78:5a:03:49:34:5d:
3c:e2:b3:95:3f:e1:bd:03:c0:86:d6:76:57:b2:41:
70:54:a8:07:27:9d:a0:fd:05:a1:02:8e:44:16:49:
a6:dd:76:48:44:7a:55:22:bb:6c:3c:c0:7c:e7:19:
5f:ab:2f:e1:60:79:72:23:63:e0:42:90:ff:a5:ed:
17:47:a6:83:f3:60:a0:06:da:ae:67:1e:65:b0:4b:
ac:83:64:f7:e2:f1:0e:66:2a:2d:22:d8:c5:ce:b5:
b4:fd:58:8f:66:cc:20:46:84:e2:43:1a:e7:96:0e:
12:62:3c:6f:13:59:b9:2f:a7:30:f4:cb:ee:e8:20:
09:a8:da:5c:db:4f:92:fc:12:b8:77:3d:fa:5b:6e:
91:c7:32:ca:1b:f6:3e:da:a5:c2:3c:32:ed:22:41:
98:b3:5e:a7:53:e6:59:15:2a:73:39:56:81:e9:4f:
07:9d:1d:d9:54:62:08:49:0e:70:a1:72:c6:ff:4e:
fe:a3:12:ab:86:08:1b:aa:99:c0:2f:89:8d:a2:6e:
e9:15:b3:3d:54:ed:35:35:e3:6b:7a:99:55:bc:f3:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:2B:D0:F8:CA:36:D9:8D:04:79:4C:9C:33:0A:9D:7C:EF:61:CA
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:ed:fa:94:55:a7:52:ca:78:15:de:ac:82:a6:84:a5:fc:
53:28:88:da:f0:99:2a:40:31:2f:46:42:52:d8:c9:47:f7:99:
72:46:94:cd:de:9e:69:90:6e:30:63:e9:56:e4:53:ae:78:cf:
d0:c8:57:d6:32:ca:35:04:b4:88:e0:46:37:f0:c0:ef:15:ea:
d5:2a:c0:e9:0b:f0:24:b4:1c:61:c5:0b:d4:89:7c:74:07:50:
ee:6b:42:77:d1:30:b4:5e:72:32:9f:f1:07:1d:56:44:90:03:
a0:07:c2:3e:7d:41:1f:66:48:77:57:0a:49:a2:b7:c0:7d:2f:
d7:c7:6b:1d:f1:16:ce:6b:be:59:a4:9c:08:2e:5d:76:f2:aa:
1d:ce:4f:a0:1d:8c:f4:cc:50:68:08:90:b2:b7:29:5a:f1:40:
c0:24:ab:0a:96:f6:ee:83:71:0c:b4:c8:8c:75:ca:00:d5:17:
fe:85:c1:35:d7:44:6e:e1:4c:20:bc:c1:64:0e:89:fc:5f:e8:
5f:71:fb:0c:9b:86:36:de:fe:0c:7a:94:5a:60:9b:fe:2f:d9:
a0:3e:52:3c:0a:74:8f:86:e5:6c:ff:e1:9e:d6:fe:bc:f5:55:
e5:8b:36:0d:10:c1:8e:f6:5a:0c:f9:0b:f9:2c:65:f2:b3:96:
6e:fc:93:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBU5JzOY98gyAbljPgjHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5
NzVjYTgwHhcNMjYwNTE2MDkwMTU0WhcNMjYwNTE3MDkwMTU0WjAzMTEwLwYDVQQD
Eyg3YzdhMmJkMGY4Y2EzNmQ5OGQwNDc5NGM5YzMzMGE5ZDdjZWY2MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoriUP/rNAo6xjNmKGhMYk8HMGKnR
7HlFK9/rg8UUoM2c0/+K11J4WgNJNF084rOVP+G9A8CG1nZXskFwVKgHJ52g/QWh
Ao5EFkmm3XZIRHpVIrtsPMB85xlfqy/hYHlyI2PgQpD/pe0XR6aD82CgBtquZx5l
sEusg2T34vEOZiotItjFzrW0/ViPZswgRoTiQxrnlg4SYjxvE1m5L6cw9Mvu6CAJ
qNpc20+S/BK4dz36W26RxzLKG/Y+2qXCPDLtIkGYs16nU+ZZFSpzOVaB6U8HnR3Z
VGIISQ5woXLG/07+oxKrhggbqpnAL4mNom7pFbM9VO01NeNreplVvPPLIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx6K9D4yjbZjQR5TJwzCp1872HKMB8GA1UdIwQY
MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt
ZTM1ZDJkNWYwMGY4LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4
LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyDt+pRV
p1LKeBXerIKmhKX8UyiI2vCZKkAxL0ZCUtjJR/eZckaUzd6eaZBuMGPpVuRTrnjP
0MhX1jLKNQS0iOBGN/DA7xXq1SrA6QvwJLQcYcUL1Il8dAdQ7mtCd9EwtF5yMp/x
Bx1WRJADoAfCPn1BH2ZId1cKSaK3wH0v18drHfEWzmu+WaScCC5ddvKqHc5PoB2M
9MxQaAiQsrcpWvFAwCSrCpb27oNxDLTIjHXKANUX/oXBNddEbuFMILzBZA6J/F/o
X3H7DJuGNt7+DHqUWmCb/i/ZoD5SPAp0j4blbP/hntb+vPVV5Ys2DRDBjvZaDPkL
+Sxl8rOWbvyTyg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:48 2026 by rpki-client