Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: KlYpSyg9v0om7t72pj1lqcM/SealPSUUL/WBAjoGQOM=
Subject key identifier: C6:51:69:42:29:A1:82:3A:08:C3:5C:BB:46:6A:80:E1:18:4D:DD:4C
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019E303B78BDF1C6E5B6276854F370CE9694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0F01
Signing time: Sat 16 May 2026 10:01:04 +0000
Manifest this update: Sat 16 May 2026 10:01:04 +0000
Manifest next update: Sun 17 May 2026 10:01:04 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: lDI6AqpSbw+wzGZHG4s+uNOJxZ4DLL4m0+ObXJ47xCk=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:78:bd:f1:c6:e5:b6:27:68:54:f3:70:ce:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: May 16 10:01:04 2026 GMT
Not After : May 17 10:01:04 2026 GMT
Subject: CN=c651694229a1823a08c35cbb466a80e1184ddd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:c1:7e:8e:a7:a7:74:64:9f:2e:f0:1d:c4:
32:89:75:6d:d0:80:93:39:2d:b4:bb:5d:37:bb:c1:
0b:c0:78:a2:b5:06:74:fa:14:de:d3:b9:9a:b9:b2:
24:0b:f3:fe:c2:a9:e8:3f:bb:94:4c:fe:60:f4:12:
0c:3d:ad:27:9f:9c:e3:55:34:6d:74:f8:9d:11:52:
33:06:ff:99:26:40:f3:c1:29:ce:b0:22:ad:25:5f:
16:f3:2e:14:28:9b:b5:32:2d:76:9f:83:20:fb:56:
b0:1e:89:0b:20:7c:a7:58:79:f6:44:dd:f3:cc:62:
d1:be:0d:cc:2f:5b:ab:6b:e7:30:b2:aa:a4:ea:e1:
e8:06:b8:45:a6:dc:cd:35:09:0f:af:23:d9:4d:43:
04:df:7f:28:f3:b6:ef:f8:cd:68:bf:f8:2a:97:e0:
19:a6:e4:d7:41:7c:9c:61:19:16:ae:56:a2:c1:f7:
aa:3c:60:e3:fa:6e:1b:e4:6a:cb:84:3d:68:9e:d3:
b1:b6:08:56:0c:f9:84:af:55:55:90:6a:f1:f0:e2:
46:19:0a:2e:44:58:de:e8:31:74:b1:18:40:51:42:
a0:4e:27:d4:b7:40:f9:a4:3e:97:a5:30:a3:cc:e4:
32:42:a5:47:0b:73:c4:17:8d:eb:b0:97:95:d1:61:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:69:42:29:A1:82:3A:08:C3:5C:BB:46:6A:80:E1:18:4D:DD:4C
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c9:5d:7c:56:cb:45:1e:e0:e5:17:73:b3:5d:0e:91:5e:3a:
4a:9a:ec:03:df:5d:42:f7:1a:a0:d3:d4:c5:af:b3:b2:3a:93:
88:ff:06:f3:5c:ef:3a:cb:06:83:51:e1:d7:85:fb:ee:b0:e1:
8d:93:b1:d2:39:bf:72:9f:ae:c7:3e:f1:5f:d0:0d:1a:92:0d:
11:dc:ef:7b:3c:41:01:ab:b1:1a:29:5e:c5:25:1a:b2:20:2e:
42:b1:d0:11:cb:b6:91:99:0f:a8:69:36:71:a4:42:25:15:ac:
25:69:b7:a3:f9:bf:ab:d9:d1:b1:b3:b9:25:f1:c4:c1:10:7e:
93:31:c6:9e:73:b1:94:ae:fb:1b:4c:50:bc:01:75:e3:b6:9f:
60:33:9a:46:fe:44:52:5c:3e:4e:33:2a:b7:4e:0f:d7:de:de:
d7:30:78:0c:05:df:ca:b8:85:09:79:45:2d:bc:64:8f:53:59:
e1:e6:52:05:2b:8b:5a:53:64:c0:85:8b:09:24:2b:3d:ef:28:
19:ae:42:e0:d7:94:8d:7a:a9:a6:1e:a7:ed:e1:fd:ac:b6:a6:
c5:10:9f:06:17:95:82:ea:cc:0b:26:25:66:5e:cb:94:35:95:
5b:85:19:43:37:21:9b:40:3a:4d:9d:2a:01:77:ee:03:ba:01:
47:4b:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:22 2026 by rpki-client