Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: bHOiv3+mECkeifxvErW+9qOp2sUwRtgdCo0cJgWtdk8=
Subject key identifier: 1F:7B:F6:52:64:00:5B:17:8E:92:D2:AF:E1:34:B6:74:F5:27:9F:C2
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019E314E1C399D5161D958AC136CD4FEE5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 15:01:02 +0000
Manifest this update: Sat 16 May 2026 15:01:02 +0000
Manifest next update: Sun 17 May 2026 15:01:02 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: wkYr2SSaf/8c+r9iLg3g1BKxN1Xog4tWyInjvoAC8oE=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:1c:39:9d:51:61:d9:58:ac:13:6c:d4:fe:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: May 16 15:01:02 2026 GMT
Not After : May 17 15:01:02 2026 GMT
Subject: CN=1f7bf65264005b178e92d2afe134b674f5279fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:f9:5c:98:7f:a8:43:04:b6:c7:d3:38:a8:
96:e0:4c:26:04:5f:c2:d9:9e:54:68:35:b3:fc:2c:
dd:ea:1d:b4:70:2b:a3:75:52:1f:60:af:39:1e:bc:
d9:93:02:b6:71:bf:6a:67:60:3a:42:53:32:f2:bb:
1f:92:40:57:32:f7:ba:53:ae:ea:43:55:f5:4a:12:
72:3f:a0:35:25:68:75:db:80:14:69:f1:0f:9a:c1:
27:c7:fa:4b:82:dd:9c:f0:40:69:cd:0c:58:ad:2e:
c5:1a:90:77:8a:ea:7c:1e:33:ac:21:c8:96:57:e7:
c4:f6:03:c7:f3:92:82:c6:c3:c4:9b:a1:f9:85:16:
7e:bb:93:4f:ef:64:fa:8a:23:0d:91:13:44:bb:6b:
01:8c:6d:01:7d:cf:1e:40:42:fd:14:e8:6a:96:0d:
28:2b:79:ba:d5:bf:e7:0e:93:49:9e:f3:40:05:23:
ae:e6:c9:56:2f:90:4f:66:b1:a7:68:46:f1:96:94:
41:fb:00:88:00:e0:13:94:e2:51:2c:6d:c6:b5:85:
6c:4f:e2:22:71:a4:50:4e:37:b0:f2:52:85:c9:b4:
90:be:52:44:29:d8:08:dd:c9:79:2f:94:3b:f3:9a:
4e:20:30:7d:f9:98:ac:93:cd:1a:39:f6:8a:11:de:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:F6:52:64:00:5B:17:8E:92:D2:AF:E1:34:B6:74:F5:27:9F:C2
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:20:5d:f4:0e:45:ed:19:be:30:95:fc:68:0b:7d:3d:72:
51:f7:11:50:e6:bc:2e:9b:31:e5:62:6e:aa:5c:5e:21:a6:de:
b8:0a:1f:a8:a0:d1:5e:12:81:9b:09:c4:4c:ae:10:a3:eb:f7:
68:d8:0d:83:5f:da:31:16:b3:cc:8e:25:f9:47:8f:5d:b6:a8:
31:4c:2e:56:9e:13:84:a3:ba:4a:a3:4e:00:af:ea:f1:ba:bb:
45:17:74:23:7d:f9:57:61:34:63:8e:2f:d8:1a:92:0f:4d:36:
b0:69:23:b8:37:70:50:1f:47:98:0d:5b:62:d3:4c:7b:85:8f:
05:13:ea:3e:41:1a:83:03:93:32:5b:46:80:f3:e3:49:1c:c8:
0a:c4:5a:ed:d7:66:42:f6:54:17:64:f3:6a:d9:1d:a7:96:38:
09:90:b3:c9:58:df:78:ca:f7:65:83:3b:e7:a0:c2:e7:8c:da:
dc:a3:85:5a:36:cd:5f:bb:25:e0:00:b8:c0:e4:ba:28:2b:65:
58:f9:98:8e:76:14:9f:40:f7:c7:fc:28:53:5c:a8:27:37:46:
46:14:09:5e:23:38:f6:fb:da:81:9f:c4:4c:ef:66:fb:df:fe:
09:f6:1b:da:77:17:f7:62:48:bc:b6:59:ae:af:ce:7f:29:53:
63:84:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:29 2026 by rpki-client