Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: PR3iJ4KXg0FxlMoyyDLHhezy16R51RF3xUpjE1dCIO8=
Subject key identifier: 42:C0:4F:F3:6A:41:9B:F7:A2:BB:50:D0:76:C4:00:FB:24:FF:1B:76
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 019E307225EBDC0C7C45AA2469E1955540C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 11:00:47 +0000
Manifest this update: Sat 16 May 2026 11:00:47 +0000
Manifest next update: Sun 17 May 2026 11:00:47 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: N9g2rFLWRM7P/lfUla3ccsjOhmhP/jtDdaafsDoqLwM=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:25:eb:dc:0c:7c:45:aa:24:69:e1:95:55:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: May 16 11:00:47 2026 GMT
Not After : May 17 11:00:47 2026 GMT
Subject: CN=42c04ff36a419bf7a2bb50d076c400fb24ff1b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:1b:4f:e8:84:78:3a:4e:ea:a4:50:43:8f:
66:db:3a:de:3c:4c:a0:54:19:43:f7:da:d2:87:b8:
45:ae:88:46:91:b7:a7:2f:a4:37:50:8a:9b:07:ed:
d9:70:4b:d4:5a:50:39:50:d0:5e:df:03:96:0b:5f:
ad:a0:eb:33:6f:d2:9c:d4:37:88:45:fa:6b:57:4b:
21:db:16:78:98:20:66:a7:e4:ae:55:bc:81:05:80:
47:bf:52:ff:08:9a:34:3a:6d:d7:5a:40:c4:dd:97:
1f:5e:8b:02:b5:61:d1:3a:a2:83:80:87:7a:64:4d:
e8:36:3a:14:ce:7f:47:ff:11:95:af:a5:de:91:cf:
2c:fd:41:7a:2d:de:8a:c2:fd:35:81:23:77:2c:2f:
9b:10:44:3c:83:04:a1:8c:f9:43:e9:15:7b:c2:cc:
36:c6:28:be:9e:a4:90:c7:81:b6:47:23:e0:6f:c1:
9c:d5:b6:0d:9d:c3:f0:f4:c7:ed:61:f8:79:5e:68:
ae:d0:bd:9d:d9:f3:d0:03:3e:59:9d:af:5d:c7:e4:
a4:52:30:0d:a3:29:6a:ba:74:44:50:97:f0:0c:97:
ea:7d:f9:14:3d:3c:d9:8c:4a:b4:cf:58:ac:ad:eb:
75:e5:9d:7a:8d:f9:f8:df:5d:ff:a6:a7:3f:5a:55:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:4F:F3:6A:41:9B:F7:A2:BB:50:D0:76:C4:00:FB:24:FF:1B:76
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:e3:ee:98:a4:8f:33:97:38:5a:ba:46:67:5e:2a:fb:4d:
6c:61:95:58:d4:e5:09:50:b0:d8:f8:8c:4f:d6:4e:2f:24:79:
05:d8:e2:c1:ee:2d:5d:1b:ed:73:36:3a:51:76:4d:2d:04:6d:
25:f6:bf:95:1b:5b:9a:1a:55:86:ff:81:23:9c:29:4a:06:d0:
20:80:e6:f2:6c:59:4d:36:01:5c:2f:b9:4a:de:3a:cc:cc:d9:
c1:c0:f9:83:cd:9d:16:de:59:73:b7:4b:a1:5d:3d:d1:e1:24:
90:64:17:58:97:1b:04:02:33:b5:7a:a5:9f:4b:e1:f4:9b:eb:
d4:05:35:0f:85:6e:c0:e1:ea:aa:a3:7c:cc:2c:26:96:13:3e:
b2:c0:8e:4a:38:1c:b5:44:ea:58:b1:00:0c:fb:bb:25:e5:8f:
d6:40:fc:99:ff:34:e4:7f:36:14:73:e8:02:f6:50:c6:85:4d:
34:c4:87:98:ba:78:2f:1a:8a:03:41:e3:52:10:0b:01:8a:7b:
a6:b5:41:57:54:98:03:7e:6b:12:f1:31:49:3c:c7:aa:5f:cf:
a2:91:55:3c:9e:74:7b:57:44:1a:c5:7a:41:50:5a:59:2b:8d:
49:3f:24:a0:1f:4d:80:c3:22:25:7e:d4:f8:44:1e:3f:2e:b3:
4d:b3:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:01 2026 by rpki-client