Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: I/X5BhaAUkGclTysLOKF+HbYG4/L/RTDEF8OW+wl3x8=
Subject key identifier: 56:41:D3:59:C5:8C:7A:90:99:F0:78:4E:5D:C3:DA:7E:17:55:52:27
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019E300595C01E1D5AEF955A89F4FED3AE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 158B
Signing time: Sat 16 May 2026 09:02:12 +0000
Manifest this update: Sat 16 May 2026 09:02:12 +0000
Manifest next update: Sun 17 May 2026 09:02:12 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: 9zojXxBO3wG+pF2Kk0Zg8TbsZbMFTqsCRIgifyP8bxI=)
2: B858kg8THjaSoEIim6530sspUXs.roa (hash: HCD5tBX+9y/cDnZBRIi513FjVWEfPLJ8ux8RH4V8Dpk=)
3: GRivXpYp4CuhiN76JDUjX3oocvQ.roa (hash: INwnsmHYjS772AhOCOKo1mO3+hjHZod9QoImR0vqNKc=)
4: PCyrz_7gQySJ-l_QlnLaYZdnukM.roa (hash: 8qLUqfkbCxjZKisO86t69Q/KwJjfGVGdDtnDpf4H3cE=)
5: dOKAlcT195hvrnl94GECXypnUw4.roa (hash: uCgRu9pSvcyUSoOdBM4Z/JT81zNcZoR+ge8afkxI5PA=)
6: kuAZ8COOrRF7D7fGL9v85feX7sY.roa (hash: MeqT2suPhasDZh73lRt2kV/r/fxAtR5VksxEngVFI8Q=)
7: x8_4aac4Nz-MFK0_jVyanCY1Njs.roa (hash: W//4mpSYdJPZzB2svcIDaGv0bAnhUuw6rNgGJNlJgIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:95:c0:1e:1d:5a:ef:95:5a:89:f4:fe:d3:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: May 16 09:02:12 2026 GMT
Not After : May 17 09:02:12 2026 GMT
Subject: CN=5641d359c58c7a9099f0784e5dc3da7e17555227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:48:cd:35:35:d6:70:ad:e5:ed:f8:df:f2:
e4:c1:05:16:a7:cb:96:7d:98:23:c6:1e:ac:45:5c:
35:40:57:b8:4e:0a:c4:84:e0:78:0b:77:48:7b:39:
38:1b:d5:4a:46:b1:07:75:4e:25:21:16:cc:07:b2:
8e:2f:b3:69:2b:81:e1:5d:58:bc:a1:87:0e:2a:18:
ac:e3:5f:02:17:e9:7b:4a:a7:c1:80:3f:fa:d2:3c:
8a:a4:67:9b:61:9a:2a:dd:1a:7f:47:f9:c6:8f:55:
b8:3a:f7:39:1d:f7:93:83:11:d7:13:3a:6d:9a:f5:
7e:09:e6:f5:c0:41:c9:d1:0f:30:5b:6b:16:d5:8f:
23:cc:0a:9b:03:cf:4b:c1:3d:75:d4:6f:19:e7:73:
96:46:b0:ce:37:d6:eb:2d:d8:0e:28:19:91:b0:ab:
29:96:5c:e9:fb:a8:39:f1:a3:b6:b6:18:eb:70:a7:
a7:dd:62:77:4a:a3:76:dd:83:48:63:74:d8:5d:04:
c7:32:5c:6c:19:18:4a:67:fb:72:b6:eb:a6:a8:64:
1d:19:32:4c:88:c5:e7:f2:f7:89:2f:04:fb:d0:f1:
92:aa:78:0e:2b:b4:66:ee:94:c0:24:d4:af:dc:b4:
07:d4:8a:07:ad:95:11:b5:89:fd:4a:3e:44:f0:6c:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:D3:59:C5:8C:7A:90:99:F0:78:4E:5D:C3:DA:7E:17:55:52:27
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:6c:50:f9:d6:50:20:db:2a:c0:d5:e0:a9:45:e9:e4:ea:
d8:d9:3a:8c:83:ec:83:ad:92:fb:1f:2b:77:37:db:99:c3:96:
a5:cb:37:56:cf:79:e9:4e:d9:a4:ad:19:7d:30:2d:5c:f2:c8:
14:2f:0b:3a:c6:e7:a9:ac:5b:8d:8a:31:25:7b:dd:b2:18:52:
29:84:64:11:b4:71:19:6c:e2:1f:96:cf:36:15:ee:6e:eb:e6:
8d:3f:3f:63:88:a9:b9:9c:1d:ff:1b:6f:13:b0:90:60:fd:69:
89:ce:6d:27:40:7d:17:59:7e:7b:6e:37:22:5a:3c:19:96:e7:
cb:22:5e:cd:0d:67:f3:c9:48:b0:d8:1f:83:9c:44:04:7b:a3:
b8:bc:e6:ae:24:a2:9e:31:78:e7:dc:57:14:9c:6f:6e:c8:9b:
a5:52:52:7a:85:d9:9b:f8:12:b4:d1:47:c9:b6:b9:c1:14:fe:
77:31:79:2f:ba:78:eb:fd:b8:da:96:b2:63:3f:92:0a:66:05:
61:a4:95:98:40:a9:62:3f:a3:fd:65:3d:61:cf:8a:5c:45:06:
93:74:8e:75:a8:ea:1a:7c:12:20:03:db:c1:3b:93:66:dc:c3:
e6:17:24:36:a9:ea:83:01:65:8c:12:98:0d:9a:a9:9a:53:8c:
06:01:bb:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBZXAHh1a75VaifT+065IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz
MmVhOWIwHhcNMjYwNTE2MDkwMjEyWhcNMjYwNTE3MDkwMjEyWjAzMTEwLwYDVQQD
Eyg1NjQxZDM1OWM1OGM3YTkwOTlmMDc4NGU1ZGMzZGE3ZTE3NTU1MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w9IzTU11nCt5e343/LkwQUWp8uW
fZgjxh6sRVw1QFe4TgrEhOB4C3dIezk4G9VKRrEHdU4lIRbMB7KOL7NpK4HhXVi8
oYcOKhis418CF+l7SqfBgD/60jyKpGebYZoq3Rp/R/nGj1W4Ovc5HfeTgxHXEzpt
mvV+Ceb1wEHJ0Q8wW2sW1Y8jzAqbA89LwT111G8Z53OWRrDON9brLdgOKBmRsKsp
llzp+6g58aO2thjrcKen3WJ3SqN23YNIY3TYXQTHMlxsGRhKZ/tytuumqGQdGTJM
iMXn8veJLwT70PGSqngOK7Rm7pTAJNSv3LQH1IoHrZURtYn9Sj5E8GyeyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZB01nFjHqQmfB4Tl3D2n4XVVInMB8GA1UdIwQY
MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAdsUPnW
UCDbKsDV4KlF6eTq2Nk6jIPsg62S+x8rdzfbmcOWpcs3Vs956U7ZpK0ZfTAtXPLI
FC8LOsbnqaxbjYoxJXvdshhSKYRkEbRxGWziH5bPNhXubuvmjT8/Y4ipuZwd/xtv
E7CQYP1pic5tJ0B9F1l+e243Ilo8GZbnyyJezQ1n88lIsNgfg5xEBHujuLzmriSi
njF459xXFJxvbsibpVJSeoXZm/gStNFHyba5wRT+dzF5L7p46/242payYz+SCmYF
YaSVmECpYj+j/WU9Yc+KXEUGk3SOdajqGnwSIAPbwTuTZtzD5hckNqnqgwFljBKY
DZqpmlOMBgG7uQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:40 2026 by rpki-client