Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: PYD/X/fkaIeBrj4M5M1edsYU6phfD0mk+vY4Fwpk2Dc=
Subject key identifier: 51:85:D9:D5:A7:BA:84:B9:EC:9B:61:EA:1E:69:D9:B2:1F:42:EA:A6
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019E2FCD332F47826089FB63344E5948D1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1918
Signing time: Sat 16 May 2026 08:00:37 +0000
Manifest this update: Sat 16 May 2026 08:00:37 +0000
Manifest next update: Sun 17 May 2026 08:00:37 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: 4kuf3F3SJeBfMIY4p1CnDOrudfNccVaqDqNb0nigMeQ=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:33:2f:47:82:60:89:fb:63:34:4e:59:48:d1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: May 16 08:00:37 2026 GMT
Not After : May 17 08:00:37 2026 GMT
Subject: CN=5185d9d5a7ba84b9ec9b61ea1e69d9b21f42eaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:a1:56:07:ed:7a:4a:60:51:f7:c6:60:b3:
ef:90:0c:09:4d:fc:81:80:e1:05:f5:54:8b:5b:6c:
5c:9f:46:31:3d:5e:16:2b:6e:4a:0e:dc:9f:c5:b2:
6a:a1:20:5a:e9:d9:69:f5:e4:48:fc:34:42:a3:65:
11:8c:a3:72:e3:7e:aa:e4:ef:45:02:d1:96:85:bf:
56:37:c2:84:92:f1:bc:d3:92:6b:fb:d9:94:33:f3:
c8:a0:47:9e:a6:bd:34:73:84:b3:c0:4d:a0:6a:01:
36:db:97:f2:c7:e4:1b:de:43:76:9a:f8:15:ef:5a:
4d:da:cd:1f:e7:5b:7b:bd:54:16:69:8d:a7:8a:55:
03:b2:d4:30:70:0e:d6:a3:e7:24:60:0c:b2:06:0a:
8e:0f:66:a8:88:25:41:a6:8e:41:35:10:9d:b1:4f:
05:04:49:2b:da:63:a9:ac:59:41:5d:56:2c:08:65:
50:bd:3e:bc:32:08:69:13:04:35:3a:5a:e1:d0:77:
e4:4b:a7:3e:73:8b:91:04:46:cc:da:df:7c:ca:69:
15:4a:12:d8:e2:fd:27:e2:0a:dc:6a:63:af:55:33:
23:6f:6e:ea:87:7b:d2:ea:0e:b7:31:61:81:2c:1f:
47:c3:9e:37:dc:be:1b:ec:9e:66:01:33:58:73:a5:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:85:D9:D5:A7:BA:84:B9:EC:9B:61:EA:1E:69:D9:B2:1F:42:EA:A6
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0e:2f:28:56:55:18:f6:e5:88:0d:f4:26:43:74:3a:f4:b0:
7d:51:a8:d3:a8:20:35:75:32:6f:0d:81:c7:64:a3:67:69:8e:
02:b7:50:c2:1a:78:6c:fe:eb:90:61:ab:14:9b:a3:91:de:2f:
22:ad:51:0c:a3:50:c7:35:0d:2f:0f:94:bb:a1:3e:a2:b2:0e:
9a:69:29:2a:ed:81:a5:b0:1d:65:b4:82:8b:f5:32:25:93:3a:
3a:94:f0:45:4e:fd:8c:8a:f2:90:48:7b:c5:a8:24:54:f9:a0:
ff:1c:d4:7a:26:ce:6d:ed:c4:29:41:14:f5:d9:1c:25:d1:b9:
4c:80:fd:6f:34:a0:63:51:f2:c9:4c:f4:56:96:ee:b3:b5:31:
3e:8e:8f:76:2a:89:f6:2c:7a:c7:99:cf:02:43:43:88:b0:f9:
36:8d:88:73:69:ba:f6:8a:35:74:1a:33:62:bc:2f:02:6e:e1:
c7:09:80:23:69:aa:76:24:e9:20:40:92:8a:e5:15:04:51:2f:
37:50:0e:14:be:9b:aa:3f:91:2e:06:f1:9f:39:2d:de:16:3a:
6f:23:71:fa:d6:b1:50:af:70:53:94:ec:3d:72:31:ad:b7:e7:
02:32:16:2d:6c:d9:b5:1a:1c:18:9b:51:d5:3b:21:9d:7c:69:
2b:8d:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:54 2026 by rpki-client