Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: eFagl4Nb5wh/W2o8RuTq20xczrPxjFI+ljYtWc3P2VQ=
Subject key identifier: 71:48:EC:D8:AA:D2:82:A5:5C:58:46:78:04:01:A8:6E:1B:F8:F4:94
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019E4FC697669754FA5124F70AC6926902C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0992
Signing time: Fri 22 May 2026 13:01:15 +0000
Manifest this update: Fri 22 May 2026 13:01:15 +0000
Manifest next update: Sat 23 May 2026 13:01:15 +0000
Files and hashes: 1: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (hash: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o=)
2: ew71Dr2hxhH6I9_RZhH0lsluIig.roa (hash: 0cm9urifI/2Uh0AOprLssITUSaMSxFAaeqTRzg9iNI0=)
3: jCJ22Fdf8SnbI8DcZqU35nF2Zew.roa (hash: JVckqbft6dBMO2AzO5LhlxSJUFnZrQ2XDuU3MVU82uA=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: MlQAuu7vA9Ts2dHK8sHBg7xw/gjheMAO5ef7+0lGJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:97:66:97:54:fa:51:24:f7:0a:c6:92:69:02:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: May 22 13:01:15 2026 GMT
Not After : May 23 13:01:15 2026 GMT
Subject: CN=7148ecd8aad282a55c5846780401a86e1bf8f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:84:20:3b:4b:99:3d:6a:eb:95:20:50:35:
14:c0:46:77:20:f3:b0:87:73:e5:23:ce:7b:14:a0:
af:2c:cc:22:f7:2d:a6:a4:a8:95:e7:18:4e:b3:4d:
cb:ed:d0:85:6d:fa:f1:3e:37:38:da:1b:6e:37:44:
6c:5f:2e:55:df:99:3f:fb:f7:0d:6c:92:37:5b:a7:
68:92:21:72:53:81:1f:ab:a7:b4:56:37:dd:90:72:
0d:5d:43:59:6a:eb:a5:65:3f:96:24:d8:1e:11:04:
aa:ae:08:65:2c:fd:14:36:8f:eb:d7:a1:9b:8a:3c:
36:18:6f:e2:e2:61:8e:e6:21:76:f9:86:93:12:28:
0b:82:d3:7e:fd:ee:1f:5d:b2:3d:55:3e:0d:d7:b1:
38:1d:63:eb:aa:5d:b1:25:7f:94:c9:1a:df:dd:dd:
48:67:3f:cd:84:4d:8f:30:62:2c:f1:5d:e5:de:5c:
10:ba:22:00:54:a5:91:87:a1:24:64:4b:04:b0:b6:
d8:22:c9:8d:15:a0:47:ee:27:c0:6f:e9:5e:48:8e:
d1:b2:2c:20:ae:cb:92:70:24:50:43:a7:bd:44:2b:
a1:60:ac:9a:4e:f9:49:8c:18:e3:c9:81:f1:0a:b4:
98:b1:fe:2d:56:48:f6:ea:30:2e:62:cc:6c:2d:5c:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:EC:D8:AA:D2:82:A5:5C:58:46:78:04:01:A8:6E:1B:F8:F4:94
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7f:73:39:f7:b0:aa:09:c0:82:4d:ca:12:67:d3:9d:44:a9:
96:7b:17:58:0c:58:00:c6:7f:47:d8:87:0f:1c:63:28:f0:c4:
75:73:d0:7a:39:35:fa:f1:64:ed:76:25:9a:65:34:1b:35:f8:
ac:e5:9f:c8:f9:68:72:fb:d6:49:57:7e:07:f3:03:8c:a2:88:
11:ba:91:53:ad:13:08:83:00:f4:3f:7d:69:32:1f:32:7e:e4:
01:1e:ce:3e:ae:95:a9:65:31:3e:37:d3:2a:fa:f1:40:35:ae:
e9:50:38:38:45:92:5a:e6:77:5b:96:f0:a7:e3:ae:24:e2:07:
03:3a:bb:e3:72:a6:b9:48:76:2b:85:6c:b0:66:b9:b5:81:2f:
5b:ea:cf:7b:a9:de:3f:1e:be:df:07:a2:26:f3:a7:58:7d:09:
73:25:28:66:32:fb:ef:8e:52:20:b1:72:10:23:76:06:a4:2b:
c5:e5:ee:1d:07:9e:44:54:b8:11:eb:e0:d2:b9:5d:c0:39:85:
89:8f:00:82:79:40:09:17:d4:cf:56:02:8c:b8:ab:a2:da:03:
71:c2:f4:b2:e7:bb:67:00:63:f5:f1:3b:71:80:7a:6b:0d:f1:
b9:15:f0:23:c0:5d:25:9d:fa:79:96:a5:66:cf:8a:aa:ad:32:
89:6d:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:13:27 2026 by rpki-client