Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: NPOhyEhO+qvxPYE5i8GLxWWuFCgCmzVBHGQK5xB7RC8=
Subject key identifier: E4:D8:58:9E:25:FF:24:2A:56:68:E4:EF:04:D1:76:16:EC:D4:E3:44
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019E28EFB3FEF1E0114D66F62DE43F5FAA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 0175
Signing time: Fri 15 May 2026 00:00:58 +0000
Manifest this update: Fri 15 May 2026 00:00:58 +0000
Manifest next update: Sat 16 May 2026 00:00:58 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: Ds+aULdFqlZdmMk1CB09/yUjeGWy9DtWGA2Lq3i22/o=)
2: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:b3:fe:f1:e0:11:4d:66:f6:2d:e4:3f:5f:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: May 15 00:00:58 2026 GMT
Not After : May 16 00:00:58 2026 GMT
Subject: CN=e4d8589e25ff242a5668e4ef04d17616ecd4e344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:b4:c5:67:31:ba:fa:40:8e:8c:c4:1d:e1:
45:c8:43:e5:7f:51:8d:81:1d:ab:c8:ce:50:b3:59:
a9:52:11:15:3b:50:8a:1d:f0:7a:1a:7e:ab:c6:d0:
64:27:85:ef:11:f2:ef:95:9b:f6:5c:7b:a4:ce:66:
ba:52:b8:79:76:64:85:3e:7d:a3:90:6c:12:28:a9:
7c:ca:3c:b8:32:fc:f5:c6:8b:7a:89:78:9d:15:40:
7f:28:6d:cb:e8:21:dd:32:18:76:b7:70:89:5b:e7:
da:3a:47:4f:41:59:8c:5a:ff:17:be:92:22:03:07:
00:32:bd:07:85:c3:4e:f9:a7:ad:6b:55:91:98:0d:
48:ec:c7:71:3f:a3:4b:ac:f7:da:02:15:79:8c:6d:
1a:f6:4e:39:ca:10:17:a7:1c:ed:aa:07:4b:e9:df:
61:6e:08:eb:e8:a0:88:51:92:3a:df:7b:ce:1a:43:
19:71:c1:12:11:ff:fa:dc:44:83:de:73:e3:1b:c0:
5a:1a:d2:d7:52:68:fc:db:1a:9e:d6:f4:8e:7c:a3:
66:d3:fe:a4:96:de:fa:68:1b:32:d4:72:2f:bb:e5:
b4:9b:0f:4b:f1:0a:d1:ef:6a:91:ca:36:02:eb:b6:
7b:3f:05:87:84:be:f6:71:12:8a:65:11:07:9d:17:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:58:9E:25:FF:24:2A:56:68:E4:EF:04:D1:76:16:EC:D4:E3:44
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:13:ed:0a:f0:b6:60:f0:25:5c:b9:3e:7e:ae:6f:7b:43:ef:
26:15:09:0b:a1:0e:a1:f2:cf:1e:8b:61:67:17:8a:47:7d:9d:
1d:26:2c:2f:cf:94:b6:07:99:58:12:78:eb:a4:03:98:10:77:
4e:c4:c8:05:68:c2:28:53:86:9e:22:50:28:57:06:13:6e:b1:
c5:8a:c0:2d:b4:e6:a4:69:87:f8:bc:43:15:e1:f3:3b:0f:6f:
8a:e8:c0:3d:5c:e0:48:5c:83:f5:53:88:76:81:80:a7:58:9d:
38:ff:49:da:67:8a:e7:29:a6:10:e7:6c:f1:89:46:ee:8d:7c:
b4:37:3c:d3:ff:59:4c:97:e5:56:ac:ba:0e:7d:56:ec:85:4d:
77:d1:18:e0:01:49:45:7b:17:32:f6:ee:21:63:ea:a8:ee:92:
31:a2:b4:6e:25:53:03:32:9f:37:39:20:50:2f:19:ea:81:71:
6d:f2:17:10:0e:c9:9b:a8:c3:41:66:90:d9:3b:8a:55:2b:a0:
71:08:3c:86:72:e9:aa:c3:1b:af:6b:03:ea:9e:06:1a:23:9c:
ba:3e:29:4c:d6:2f:68:54:05:fe:84:6f:0d:7c:c3:15:c1:81:
2f:18:2f:7c:e2:e0:4c:b2:3f:2c:fd:58:12:f9:ba:00:b7:ff:
52:72:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:16 2026 by rpki-client