Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: q91ULWVc4tMtqQcuCM/PYbYaDT5O0dCO0NeewQE0obY=
Subject key identifier: 3B:5C:85:B0:ED:A2:A9:5C:1F:34:7A:F9:8D:0F:6C:6B:98:41:2B:43
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 019DCDBDFA80DD70C109F577D93362F3AB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 133A
Signing time: Mon 27 Apr 2026 07:01:12 +0000
Manifest this update: Mon 27 Apr 2026 07:01:12 +0000
Manifest next update: Tue 28 Apr 2026 07:01:12 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: 0rSojML204B2x9rnksXJXz/YqzuBVfnwg6dllVRBBL4=)
2: 7ozQf2Lgf43OlxMxJfVXI46HKEE.roa (hash: 2WRxX71MqlNLXAV8Z7Z41sZwXZzoqEFDU3UWBkUqAn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:fa:80:dd:70:c1:09:f5:77:d9:33:62:f3:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Apr 27 07:01:12 2026 GMT
Not After : Apr 28 07:01:12 2026 GMT
Subject: CN=3b5c85b0eda2a95c1f347af98d0f6c6b98412b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:d7:42:03:14:24:78:95:13:cc:8f:b5:23:
14:68:5e:1c:f1:c3:b8:f1:dd:b6:64:a4:63:3c:55:
af:3a:67:db:c8:56:d6:b2:11:09:aa:34:5b:89:e1:
91:e7:d8:df:73:c0:c2:02:68:86:55:39:b2:46:04:
9f:f2:06:19:5f:a8:48:89:55:6b:76:48:66:6f:7c:
5a:7d:46:69:29:00:0c:77:84:10:3d:e4:92:6d:b7:
48:19:6f:9e:91:0e:9a:cb:85:1d:7f:2c:f1:bf:48:
13:2c:c3:23:c3:61:52:30:bc:f8:db:21:65:a3:5e:
3e:59:dc:8b:d5:65:fe:62:a5:54:f7:45:2d:bb:c2:
80:9b:89:0e:7e:d8:e2:2d:55:18:5f:14:db:4b:d2:
59:ee:e0:77:c3:c2:8d:27:5f:97:cb:bd:f1:61:b5:
fe:e8:c7:c0:f8:dd:8a:4f:1b:8d:6e:b2:22:5c:0e:
69:ec:99:e3:4c:3b:83:73:a4:49:d4:6d:0a:d0:fa:
8a:37:0d:30:ce:4a:bc:73:0d:c9:6f:8e:0f:a6:36:
d1:32:39:f5:4d:86:de:f0:44:e8:ed:27:a5:a0:57:
7e:15:a6:e4:23:60:42:77:e1:20:d3:db:3b:ec:4c:
79:60:66:eb:5c:9c:a1:f9:df:3b:b8:23:a4:f2:b7:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:85:B0:ED:A2:A9:5C:1F:34:7A:F9:8D:0F:6C:6B:98:41:2B:43
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:89:b0:cf:83:8d:d6:ca:5e:82:5e:ed:a3:4e:b4:c9:ee:
2c:63:e2:f0:ac:a4:02:0f:94:2f:a9:78:9d:01:f4:80:0f:1f:
5d:86:fc:5e:bf:b4:cf:d4:43:88:7d:fc:50:0f:f9:55:1c:d0:
2d:1a:b4:b9:ed:26:86:30:af:29:a1:f4:2f:0c:3b:d0:0d:93:
0b:fc:ba:70:ae:4f:6d:22:44:27:d8:a3:da:e6:9b:ed:d5:2b:
e9:25:3a:be:ae:6e:71:a4:a5:71:e1:e2:ee:02:c1:fd:30:61:
ea:10:45:07:b5:42:8c:eb:71:e8:45:eb:a4:1f:d0:73:4c:d4:
39:44:bb:d6:5c:eb:73:45:b4:e6:10:6e:34:40:56:bd:aa:f8:
b9:02:50:b8:8e:06:12:d1:d0:55:7c:1b:94:1b:de:a4:64:db:
ce:54:63:21:66:db:fa:1b:51:bb:c7:08:38:ab:b0:99:35:4b:
6f:aa:20:88:82:c4:d0:82:f2:13:ac:6e:12:be:ef:c6:c3:ce:
5f:f8:73:6a:98:de:d6:83:6a:c2:2e:18:cf:e4:cb:19:0a:d0:
e8:08:39:09:34:51:53:89:f1:c9:d3:ee:01:39:98:38:30:21:
d7:57:f8:6f:97:b8:60:16:0c:7f:23:e3:dc:96:dc:a9:62:6c:
5f:e6:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:38:40 2026 by rpki-client