Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: 99pfO+a8Q4ZE4+8pavVZ6xCt1a/S5dSuZeKh8nuIkc0=
Subject key identifier: 42:B4:B9:52:AD:EA:F8:91:50:47:39:05:92:27:04:A4:B8:B6:C3:67
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019E3004AA2FF54FE31E91A079560110E0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 09:01:12 +0000
Manifest this update: Sat 16 May 2026 09:01:12 +0000
Manifest next update: Sun 17 May 2026 09:01:12 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: yGV9CDUqmQgogU5TQGlp4541/YEM8WQykptGj1g0bAE=)
2: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (hash: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:aa:2f:f5:4f:e3:1e:91:a0:79:56:01:10:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: May 16 09:01:12 2026 GMT
Not After : May 17 09:01:12 2026 GMT
Subject: CN=42b4b952adeaf89150473905922704a4b8b6c367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:86:67:97:2c:c2:c2:fe:5a:03:3d:57:36:
4b:a0:3c:29:13:1a:94:f3:e9:c8:af:27:fd:6b:11:
24:37:83:e7:5e:26:37:7d:da:32:ec:1b:a7:aa:60:
f6:b3:09:ab:a6:f2:6c:ac:34:1c:cf:ff:96:f5:95:
73:92:c5:e1:2d:a3:ec:36:0b:d1:9e:cb:91:37:01:
68:f0:23:28:17:56:38:ea:6a:39:2d:9f:cd:f9:a4:
48:be:06:95:d7:17:e4:73:ce:a0:df:69:71:02:ee:
b2:30:cf:f3:de:a9:eb:e7:5d:01:47:b9:3d:9f:9b:
4d:2d:eb:f5:ad:f6:71:01:bd:f7:d4:ef:00:c3:44:
73:ed:eb:f7:9f:49:1f:a9:6f:bf:0c:60:12:aa:d5:
c2:33:7d:24:31:e6:7e:4d:26:d6:65:b9:f9:a9:de:
76:3a:00:93:d8:36:9a:12:ee:3f:75:ec:51:cd:35:
88:34:79:2d:fa:2b:ba:25:d8:a0:5b:78:ef:2c:cd:
e7:b3:71:c1:d2:9c:72:fe:93:fe:b0:ac:af:b0:60:
b0:da:eb:37:fc:a9:df:29:e2:47:86:b2:05:f4:b7:
c7:32:2c:c1:c9:8d:e5:72:53:da:29:7a:b5:eb:9c:
2f:a8:11:ac:e4:b5:4f:1f:ef:00:26:d5:4f:93:00:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:B9:52:AD:EA:F8:91:50:47:39:05:92:27:04:A4:B8:B6:C3:67
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:b6:19:c5:2c:ac:29:32:cb:78:2e:09:08:c4:3e:91:0c:
e4:e5:65:13:5c:aa:d1:a4:93:6a:7c:e8:3a:d9:13:48:5b:42:
55:af:7c:f9:d1:2b:dd:ed:f9:bf:84:06:e1:ca:7d:f7:88:5f:
51:3e:fd:d2:2a:5f:83:32:b2:c5:90:9b:63:7a:28:d3:cd:f1:
ab:3f:c3:89:76:07:9a:42:91:bd:87:32:aa:ae:fd:3a:55:bd:
40:51:3b:38:18:fa:a4:e2:b3:ac:93:f2:8e:a1:ed:0a:cb:b2:
85:be:ce:69:45:03:e8:ce:d6:48:db:c6:13:48:5d:ca:5d:66:
71:d6:07:d3:cd:75:34:86:b3:cb:fd:10:9d:af:f0:2b:cf:ba:
58:ed:e3:dd:f1:8e:dd:a6:36:a0:de:13:8d:04:37:a8:83:58:
c8:f6:cf:02:ad:6d:e0:16:20:4b:c8:ab:17:c0:fb:6f:a0:be:
54:47:26:bf:b1:6f:8c:57:82:81:27:e5:f6:c8:7a:fa:3c:be:
c8:eb:09:c5:11:78:d8:c7:97:77:86:d9:4b:9d:27:6f:76:81:
aa:e0:25:fd:b1:76:dd:47:51:3f:17:a4:fe:bb:1c:a9:91:99:
f3:18:8d:4e:cb:85:00:f5:d4:76:91:5a:2f:aa:bc:81:ab:65:
40:ff:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:30 2026 by rpki-client