Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: k+w/ZAT1F5fRGexskgPFwx0lmR4ILJH18lMBwwugSwk=
Subject key identifier: 82:65:90:F8:57:F1:70:F1:60:D3:D3:0B:B6:3B:FD:CC:F2:69:F5:59
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019E30050AF6F2101E612019EFE3A179F366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 09:01:37 +0000
Manifest this update: Sat 16 May 2026 09:01:37 +0000
Manifest next update: Sun 17 May 2026 09:01:37 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: DQfiBYQ3vjVKOFHrhWmdUfk2ELsAQfLWrl40QvdU/RI=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:0a:f6:f2:10:1e:61:20:19:ef:e3:a1:79:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: May 16 09:01:37 2026 GMT
Not After : May 17 09:01:37 2026 GMT
Subject: CN=826590f857f170f160d3d30bb63bfdccf269f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:e1:fb:fa:13:1d:67:c4:59:27:b4:98:b3:
f7:8b:6c:00:6f:bd:0c:52:30:5c:c4:c9:ab:4a:af:
3c:be:4b:71:2c:be:4e:d6:4f:db:69:c9:4e:6f:69:
7a:23:49:4e:bc:74:f0:b9:19:19:1b:a6:61:bb:38:
67:6e:98:e1:66:5f:52:ce:4b:aa:05:01:12:09:d3:
33:87:ce:ff:cf:e8:ec:2c:fa:c0:be:fe:1a:89:f5:
ba:40:33:46:60:bd:c7:50:34:19:f2:d8:46:ec:29:
61:01:f5:14:95:f9:c7:93:77:ba:a3:e5:06:0b:4d:
40:94:15:0b:65:e7:9a:1a:e4:ad:1d:e0:ab:4a:27:
c3:e5:f0:57:fa:f0:41:00:29:7d:77:c9:71:af:3a:
80:2f:6e:ea:63:39:66:9b:11:94:52:25:b4:6f:b9:
d8:b8:b3:75:1e:ca:6e:af:0e:50:19:e5:90:00:07:
d1:d8:15:4b:4d:ed:59:50:0d:c5:dd:fe:d7:85:3e:
73:7c:11:19:20:7a:43:76:5c:0a:90:b1:ac:3a:05:
48:f4:27:19:59:b9:c1:fe:76:ba:28:e9:a0:b5:1b:
15:71:5a:a7:85:9d:b8:6e:83:8f:60:2b:c2:ad:2c:
89:32:f1:4e:9f:7c:80:c1:16:aa:69:53:d3:64:9a:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:90:F8:57:F1:70:F1:60:D3:D3:0B:B6:3B:FD:CC:F2:69:F5:59
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:89:30:06:cf:b0:78:f5:55:92:f7:35:70:f8:e4:1d:a8:
f4:69:7c:11:98:65:8a:df:bf:6e:c1:2f:d6:73:2b:78:b9:5a:
80:f8:65:6b:ea:64:b7:a7:24:a5:09:89:aa:d5:70:de:54:62:
9a:a1:f2:f2:e9:94:e3:ba:a9:e1:df:4e:46:6f:dc:0c:a1:fc:
0e:15:d9:3e:30:c5:5b:40:5c:07:64:74:7c:7c:5f:8c:ec:af:
fa:74:00:04:52:31:43:0f:e5:80:3d:c4:af:bd:84:fe:60:d8:
d8:98:0f:5d:25:d5:8b:1a:0a:4d:36:2e:69:38:ae:46:ed:24:
75:6c:1e:25:b1:a6:38:65:c2:98:8d:a0:dc:9b:40:b7:8e:3c:
9d:f2:f9:f9:95:69:2b:a5:c2:48:51:68:39:45:60:96:2f:ae:
c7:e0:15:04:c0:31:af:b2:15:81:31:e3:64:cc:85:51:07:8b:
f9:8e:83:4e:00:e3:1a:d8:3c:77:0c:d3:ee:64:42:90:b0:b5:
12:b4:ef:4b:d1:10:39:ff:3e:5a:22:04:f7:ae:ef:d2:09:d0:
c2:64:6d:c2:38:c9:42:be:a7:b5:c5:09:bc:74:59:b9:ec:9d:
b1:9c:34:34:7e:50:14:67:1e:aa:9a:eb:e3:61:82:14:c2:12:
f9:1d:fe:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBQr28hAeYSAZ7+OhefNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjYwNTE2MDkwMTM3WhcNMjYwNTE3MDkwMTM3WjAzMTEwLwYDVQQD
Eyg4MjY1OTBmODU3ZjE3MGYxNjBkM2QzMGJiNjNiZmRjY2YyNjlmNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOvh+/oTHWfEWSe0mLP3i2wAb70M
UjBcxMmrSq88vktxLL5O1k/baclOb2l6I0lOvHTwuRkZG6ZhuzhnbpjhZl9Szkuq
BQESCdMzh87/z+jsLPrAvv4aifW6QDNGYL3HUDQZ8thG7ClhAfUUlfnHk3e6o+UG
C01AlBULZeeaGuStHeCrSifD5fBX+vBBACl9d8lxrzqAL27qYzlmmxGUUiW0b7nY
uLN1Hspurw5QGeWQAAfR2BVLTe1ZUA3F3f7XhT5zfBEZIHpDdlwKkLGsOgVI9CcZ
WbnB/na6KOmgtRsVcVqnhZ24boOPYCvCrSyJMvFOn3yAwRaqaVPTZJpPjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJlkPhX8XDxYNPTC7Y7/czyafVZMB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyiJMAbP
sHj1VZL3NXD45B2o9Gl8EZhlit+/bsEv1nMreLlagPhla+pkt6ckpQmJqtVw3lRi
mqHy8umU47qp4d9ORm/cDKH8DhXZPjDFW0BcB2R0fHxfjOyv+nQABFIxQw/lgD3E
r72E/mDY2JgPXSXVixoKTTYuaTiuRu0kdWweJbGmOGXCmI2g3JtAt448nfL5+ZVp
K6XCSFFoOUVgli+ux+AVBMAxr7IVgTHjZMyFUQeL+Y6DTgDjGtg8dwzT7mRCkLC1
ErTvS9EQOf8+WiIE967v0gnQwmRtwjjJQr6ntcUJvHRZueydsZw0NH5QFGceqprr
42GCFMIS+R3+9Q==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:03 2026 by rpki-client