Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: cq3DXs2HCu3+D75DttbaJIqCIgCY00zr+yBoJCqhDG8=
Subject key identifier: D1:21:FE:2D:69:71:9B:AD:B9:28:6E:DD:AC:3F:45:1A:5E:75:67:CB
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019E307231FB8BCEC408C105D5B16F994FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0EE9
Signing time: Sat 16 May 2026 11:00:50 +0000
Manifest this update: Sat 16 May 2026 11:00:50 +0000
Manifest next update: Sun 17 May 2026 11:00:50 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: ka7KAR9RjKj2CJDJ9vpTrcakan0E+87GqYeLV/p4VHk=)
2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:31:fb:8b:ce:c4:08:c1:05:d5:b1:6f:99:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: May 16 11:00:50 2026 GMT
Not After : May 17 11:00:50 2026 GMT
Subject: CN=d121fe2d69719badb9286eddac3f451a5e7567cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:05:46:59:2a:10:01:13:ca:ab:d2:6d:67:
57:fc:73:34:f7:b4:34:d2:07:51:c5:41:cd:74:3b:
e8:00:6e:ec:67:b8:75:77:fa:3b:5d:4a:01:29:55:
04:49:9a:9c:9a:6b:ca:71:78:4f:10:7d:ed:83:e6:
7b:d9:96:63:56:4f:4f:fe:80:72:b7:c9:74:3d:92:
1d:bc:4a:71:f2:14:90:ae:8e:3a:42:45:ee:85:36:
bb:38:bb:bb:7a:b6:17:47:55:8c:0c:79:99:51:ee:
9b:2c:b2:87:c9:f8:05:6d:b5:ce:69:d8:c9:ac:b4:
92:8f:b5:83:db:a4:98:df:4c:bf:5e:fb:e9:e0:a0:
2a:b1:0d:b6:7d:20:68:13:d9:23:0c:79:e0:f1:a7:
7a:44:3e:ec:b1:cf:1f:82:91:13:11:c8:c3:ce:49:
a7:42:e5:c0:e5:48:d7:19:4d:0f:c2:fc:30:bb:2e:
54:e4:29:33:ab:9e:5e:5c:12:8f:8e:18:c5:58:70:
5a:7e:28:81:d2:69:37:60:c6:29:31:dd:83:f1:71:
bf:a4:d7:4c:c3:4c:f7:d8:71:ff:32:64:61:97:4f:
b9:d6:7d:89:9d:84:3a:1b:e8:b4:d2:b4:b6:84:76:
bd:d6:45:39:a0:57:e8:73:2c:32:ba:5f:0d:da:6c:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:21:FE:2D:69:71:9B:AD:B9:28:6E:DD:AC:3F:45:1A:5E:75:67:CB
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:fe:d2:5c:35:e4:9a:87:f5:9d:a7:57:b6:9f:fb:c9:11:
c4:ac:ff:36:59:9d:db:6b:c1:b6:07:34:9e:8f:65:1d:16:81:
c4:a6:9e:5b:78:7a:11:2d:49:2a:f5:08:45:16:de:ec:38:2b:
77:af:96:4c:8f:21:66:eb:5f:91:90:a0:4a:e9:4c:e9:94:1e:
ad:c3:e8:32:6c:16:18:6e:76:ad:f4:c7:84:f3:61:70:31:21:
99:91:78:4b:5a:49:f0:47:18:bb:5c:bd:46:9e:75:20:b5:cb:
fe:08:2b:b8:b0:87:be:28:40:96:e9:51:88:ac:e2:55:64:e6:
f3:64:b2:9e:2c:31:9f:71:e0:17:b0:b3:70:9d:a8:4c:66:35:
95:e2:83:a7:ce:cd:89:01:db:84:d3:7e:a0:a6:91:63:b4:5e:
dd:d5:38:d1:6d:6b:d8:5e:3a:8b:3c:b4:1e:b5:5e:b1:0d:49:
33:a5:54:a3:a3:c3:e0:d4:66:21:85:0c:2f:20:46:c3:15:3b:
38:e0:3a:7e:01:7d:a8:0b:b5:23:4d:8b:ce:90:2e:9e:35:17:
1b:0c:54:7f:ee:de:63:fd:d3:0e:70:ee:ee:5f:1d:c6:e8:c9:
19:d7:fc:f1:59:5c:41:a1:79:d3:3b:43:67:ef:f2:a3:9b:86:
00:13:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:45 2026 by rpki-client