Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: hzAh4MlPdZJkvCo3sn6hDlfJuMlJ+d68Lc87yESyeUM=
Subject key identifier: A3:AD:63:65:71:FD:E3:A7:38:A6:E2:E2:0C:6F:C4:60:C5:C5:31:5C
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019E1C7D8B6EB9873456C4C53E680E978C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 13E2
Signing time: Tue 12 May 2026 14:00:50 +0000
Manifest this update: Tue 12 May 2026 14:00:50 +0000
Manifest next update: Wed 13 May 2026 14:00:50 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: Nf8sCXA9uSMwNHTQP2M/C2DQQ+h0DjoABhVHmF8SfVA=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:8b:6e:b9:87:34:56:c4:c5:3e:68:0e:97:8c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: May 12 14:00:50 2026 GMT
Not After : May 13 14:00:50 2026 GMT
Subject: CN=a3ad636571fde3a738a6e2e20c6fc460c5c5315c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:b7:68:c3:a2:04:02:8b:47:90:66:a9:2d:
40:78:63:81:64:5a:bd:2e:d5:66:f9:5c:b1:46:e9:
ba:e5:1b:30:1c:8c:58:b1:53:ad:e5:de:61:72:05:
ce:da:4c:4a:09:d7:07:4a:aa:cf:85:65:ec:9f:24:
f2:1b:56:eb:83:31:2e:8e:41:77:69:ec:cb:38:51:
ba:ed:c4:9d:fa:95:ea:8a:35:c4:21:97:f5:e6:82:
fd:3f:43:ba:11:9c:18:fb:f4:3f:93:42:20:41:fa:
e9:5a:fb:f5:94:c9:4f:ec:a4:11:80:e6:f5:95:57:
4c:06:f3:77:6e:a4:76:ae:d7:5c:1a:3f:86:c0:10:
1f:06:82:bf:4a:e6:1d:07:36:c4:8a:0d:a0:1c:41:
03:22:75:cb:e1:8e:42:1e:16:69:c8:1d:31:dd:5b:
47:37:99:3a:e7:1c:b2:ef:bc:9a:c0:54:54:95:0d:
fb:13:7d:f9:7b:6a:a9:c0:28:2f:9e:3c:a2:46:2a:
d7:9a:5f:df:37:9a:5a:03:91:3f:2f:ca:f5:f5:2b:
1e:f6:9e:2a:8a:f4:5c:a4:28:72:b6:3a:8b:59:54:
3d:6e:17:2d:5d:0c:aa:4c:aa:13:cb:77:a0:e2:40:
ce:26:1e:97:a0:09:b3:c7:9c:f2:45:06:9e:11:8e:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:63:65:71:FD:E3:A7:38:A6:E2:E2:0C:6F:C4:60:C5:C5:31:5C
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b2:77:0f:e2:e6:bf:cb:da:48:c7:68:cf:e0:7d:37:41:73:
5c:ca:aa:30:ba:2b:fc:df:e9:b2:a1:3a:be:a1:c8:4b:79:51:
47:d2:df:95:98:97:2c:63:97:ae:09:6a:3f:73:10:ea:6a:2c:
ed:2f:36:6e:ea:0f:a5:6f:f8:6e:70:5f:6d:e8:a6:5f:34:1b:
a4:d6:af:4a:bb:3a:5b:08:ca:f5:b7:ab:d2:17:c8:3e:61:ef:
61:63:b8:d5:a1:bb:ec:0f:4c:10:94:54:66:48:d9:de:99:e7:
7c:e2:53:cf:4e:8e:29:88:5c:f2:a5:ec:62:d5:1b:5d:ec:52:
0d:02:2f:8d:b1:68:34:2b:ab:80:d3:51:b8:f9:eb:67:4e:e2:
79:69:7d:4f:7d:fa:df:88:e4:6f:d8:fc:a9:e1:21:e1:5a:8c:
5d:08:d6:ed:e1:c5:67:19:0f:51:5a:eb:b4:c2:f9:f1:1f:35:
3e:4b:0b:bb:d7:a9:cb:a2:39:66:28:d5:9d:05:66:ca:2f:c3:
2b:b0:24:b6:09:68:4f:45:b6:27:9c:f2:31:a5:fe:2e:30:67:
0c:12:da:6e:6f:62:de:25:07:b9:b5:cd:02:f3:98:a2:31:8c:
23:15:84:cf:ae:df:a9:15:6e:4a:0e:76:e9:ba:7c:ba:68:d2:
a2:a1:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:10 2026 by rpki-client