Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: TypRfmfWsLCG58Ixq9833hrzdhALFNjC9uTV7vFlExI=
Subject key identifier: 24:DB:B7:D5:B7:47:4F:B0:1E:40:F9:F3:47:3D:D8:18:79:22:97:D5
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019E333C482174372818223345987725AEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1911
Signing time: Sun 17 May 2026 00:00:49 +0000
Manifest this update: Sun 17 May 2026 00:00:49 +0000
Manifest next update: Mon 18 May 2026 00:00:49 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: op7QPkYNYHyGreFRlGvFHGOMaLuJY0+RKyWdlI0lat8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:3c:48:21:74:37:28:18:22:33:45:98:77:25:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: May 17 00:00:49 2026 GMT
Not After : May 18 00:00:49 2026 GMT
Subject: CN=24dbb7d5b7474fb01e40f9f3473dd818792297d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:4c:aa:ef:bb:23:07:03:86:9f:02:d2:61:
f8:b4:ec:55:e2:c8:3e:60:72:a9:d6:89:17:20:6b:
4f:c9:12:b6:95:c1:03:e4:bb:a4:57:96:08:c1:22:
1d:07:ef:14:3a:2e:ca:dd:cd:57:81:39:2b:69:53:
67:e3:b5:81:a4:9e:1f:c3:8b:e5:68:1d:72:10:15:
ad:93:a7:ed:77:8b:97:c6:e1:de:cf:c9:0c:a5:0d:
54:83:fc:00:3d:81:d6:c3:8f:7e:9f:fe:8d:e8:a1:
07:92:7f:b2:cb:7c:56:71:5e:2b:da:21:0f:74:69:
12:5a:90:e2:44:98:2f:14:d7:71:ee:87:6a:56:c7:
88:ce:8b:b0:51:ba:ef:7d:3f:3a:fe:a7:58:03:4f:
ec:8b:3f:7f:7a:ee:ca:0a:b3:8b:1b:67:65:a5:05:
9a:ee:e4:d6:1d:32:90:ab:e3:2a:65:6a:10:fb:d2:
39:1a:04:7d:8d:b4:b5:ee:3c:c8:f6:df:ed:64:80:
a4:10:cd:ac:31:d2:1a:29:87:5f:a5:ba:1f:d0:8b:
e0:48:e7:de:7f:00:75:35:4c:0e:cb:5f:a1:9c:0c:
25:fd:0c:a4:23:04:95:e5:34:a5:6e:9e:05:45:1c:
a2:32:f0:29:c1:a7:ca:b6:da:5b:64:50:4c:c4:81:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:B7:D5:B7:47:4F:B0:1E:40:F9:F3:47:3D:D8:18:79:22:97:D5
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:43:22:39:fc:15:a7:90:b8:de:7d:db:ee:44:1e:d0:b4:
e3:29:45:cb:30:0f:92:1c:ef:c3:73:e3:9d:88:84:c7:c1:83:
55:5c:c8:28:5a:cb:35:40:1a:c6:15:a9:48:42:a8:f3:94:fe:
8f:d7:fe:a3:2d:40:7f:6f:fb:22:fd:44:04:e0:c5:75:4d:bc:
9f:6b:f1:fa:03:a1:5e:33:89:5a:6d:53:4e:bc:81:4c:48:de:
15:6b:20:5a:c4:45:87:6a:04:86:1e:b0:5f:ab:04:bc:07:f7:
28:34:e6:7a:74:17:b5:62:11:87:23:af:8b:0a:02:e8:d6:02:
f9:bd:aa:7b:bd:98:7c:94:45:c8:00:54:ca:eb:a0:5c:ec:98:
58:bd:c4:d0:5e:d4:44:d1:89:a2:91:3e:9d:66:5a:ea:df:54:
d2:90:a3:d5:a3:a2:50:fd:75:23:61:6c:79:8d:92:a8:72:56:
56:78:1b:f2:23:03:c2:14:bf:c5:35:18:09:1d:c5:27:97:73:
c2:30:73:c9:31:a8:73:cc:d9:ce:c3:39:7c:a1:fc:b0:b5:28:
71:d6:f7:85:a4:2e:4f:93:7f:58:59:86:02:23:3d:3f:f6:96:
bf:14:86:b3:85:f6:96:62:5b:48:fc:dc:e5:cb:5c:ca:24:76:
20:2d:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 08:23:26 2026 by rpki-client