Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: g0Ls02LUDeBoNhSzh/af+KJUIM5UdopRx0seYbda5HY=
Subject key identifier: 61:C8:2A:24:69:31:51:3D:7E:D9:FC:2B:9F:3A:72:F7:76:23:F1:A3
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019E3072AA7C551F25469E12B1CAB6472326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 1053
Signing time: Sat 16 May 2026 11:01:21 +0000
Manifest this update: Sat 16 May 2026 11:01:21 +0000
Manifest next update: Sun 17 May 2026 11:01:21 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: nDZN1HDH91tWA6vZPfr/IGs54yWesPKAv27cjukQz+w=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
3: LZIb0ymnvJVoat3eKMXkwKhNB3s.roa (hash: MiIObMs9Gh9JbmWmMRy+8OGwOPF9Eqpf22VuDL3pf3g=)
4: zWYuzq0jad5Hmb8WA-NfP-3d2Zw.roa (hash: Yyyb//vmnQwxfSQUibaXnsRT2TgMJg/Syp1I0vzXlrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:aa:7c:55:1f:25:46:9e:12:b1:ca:b6:47:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: May 16 11:01:21 2026 GMT
Not After : May 17 11:01:21 2026 GMT
Subject: CN=61c82a246931513d7ed9fc2b9f3a72f77623f1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:b1:68:37:b9:3f:0a:c6:a5:27:8f:27:5a:
f8:1f:c1:27:b3:5e:bc:e6:cc:6a:ae:bc:37:9a:5c:
08:73:4b:3f:3d:47:02:84:c4:58:82:c7:64:42:da:
26:88:09:ee:0c:4c:5c:1a:78:69:42:ca:aa:28:72:
fb:bd:03:d1:37:47:3c:6e:3d:b1:e7:21:33:c7:79:
a9:37:c5:98:bd:c9:76:65:9c:01:31:96:43:33:15:
0e:83:76:55:27:29:38:31:be:a1:6c:70:25:0e:b8:
78:20:d8:9d:45:28:43:df:a9:56:fc:f2:74:a8:b2:
b2:a7:72:96:34:7d:6e:37:9c:d1:83:99:4b:a1:97:
00:09:51:ee:05:e6:93:39:87:74:b6:ea:ff:73:7a:
5a:d0:29:ec:40:23:09:ea:ba:94:29:46:4e:46:ba:
0d:bd:be:4d:00:1d:1c:ac:83:36:39:3e:42:39:fa:
92:5f:1a:92:2b:ce:a0:e1:34:4b:22:2c:9d:07:c6:
0e:12:6a:62:3e:80:6d:c9:58:a2:39:b5:2a:ec:1f:
e9:23:6b:43:3a:37:0a:ca:49:0b:8b:80:53:3c:cc:
67:4b:e5:bf:e7:5a:53:49:e0:72:69:34:a2:ba:3a:
e0:88:e1:3f:a8:00:c1:a8:0a:f6:6a:cd:17:16:46:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C8:2A:24:69:31:51:3D:7E:D9:FC:2B:9F:3A:72:F7:76:23:F1:A3
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:34:23:8a:6b:38:f5:6a:83:2d:08:ca:7d:23:4f:dc:7a:4f:
e5:98:e3:b7:7c:19:6d:6b:5f:87:8f:99:ad:16:c9:69:96:5e:
08:0f:71:25:f2:d8:b0:3b:b7:5c:8c:b0:6d:de:4c:59:5e:8a:
48:c1:d4:2a:ba:3f:23:5b:98:c7:b5:d9:e0:fe:5a:4e:7a:de:
1f:36:8c:e8:13:88:7d:f3:61:b9:6e:0b:2b:77:87:1c:03:52:
50:88:5b:f1:16:b8:bd:7a:11:81:e4:c3:15:c9:32:4d:84:5f:
bf:af:c0:cb:22:6e:e4:8a:84:b2:79:b3:c7:c3:ca:90:58:7d:
f6:7f:e8:82:58:6e:22:44:81:6f:ab:5f:6b:5a:a9:4a:d1:5f:
9b:c8:d1:91:33:4c:ab:a2:a2:1e:93:89:e5:0e:18:0b:fd:e4:
95:b0:c8:4c:a1:62:40:06:13:ad:29:4f:14:be:9e:1b:7d:06:
02:2f:37:95:c2:12:15:38:87:f5:db:f3:be:c2:8b:ef:08:89:
7e:05:3c:65:a4:84:c7:af:30:b3:55:c5:be:3a:95:ba:8c:3a:
fa:1d:1f:f1:1c:9b:99:55:d6:8e:55:d3:73:84:04:b2:b1:59:
23:fd:20:a8:b4:e0:64:6e:2c:e7:e4:d9:8b:59:0e:9f:4f:6b:
96:72:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:16 2026 by rpki-client