Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: O3WTalp+3Wj4SXmZaqtBCr4j2q8LPswRCJ3DGEvermM=
Subject key identifier: 4A:48:FA:EE:74:4A:7A:FB:E9:E0:9E:0F:00:92:A6:52:92:9D:0E:C8
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019F916CD7585255E5DBBF05C4B5F1BABE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 168D
Signing time: Fri 24 Jul 2026 00:00:57 +0000
Manifest this update: Fri 24 Jul 2026 00:00:57 +0000
Manifest next update: Sat 25 Jul 2026 00:00:57 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: wx4ZnsphZgLIeDMRB4ygSZarZLks23m2Tjl/tub6EsM=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d7:58:52:55:e5:db:bf:05:c4:b5:f1:ba:be:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jul 24 00:00:57 2026 GMT
Not After : Jul 25 00:00:57 2026 GMT
Subject: CN=4a48faee744a7afbe9e09e0f0092a652929d0ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:ef:2e:0b:42:5c:86:b6:97:3d:09:dc:07:
b9:c7:c5:7a:ae:a9:0e:3a:1b:22:b2:fe:7f:ed:60:
f2:24:34:c9:29:c5:ce:54:7b:70:86:c7:be:89:68:
8b:16:20:91:9d:0a:fd:ab:51:19:5b:f8:0a:ff:1f:
c2:23:b3:1d:f4:56:2b:a2:2a:74:4d:56:7a:17:7c:
75:16:0b:28:17:5c:72:9a:c1:5a:ab:2a:b3:81:19:
4c:84:ec:b0:7f:92:89:ad:08:93:29:e2:bc:bf:8e:
90:d0:a7:f0:2e:e4:96:e4:6f:93:18:eb:a3:23:92:
eb:0a:9a:11:a5:94:ba:fd:96:3d:e6:78:9a:00:83:
72:71:30:25:e3:13:f2:89:8b:4d:48:38:2b:b3:19:
9a:f4:fc:6b:68:d5:e8:20:7a:2c:e5:f5:af:6d:75:
24:c9:07:f7:c6:1e:b1:cc:17:c3:d3:74:3f:34:79:
25:fc:e8:d3:a4:80:30:22:6b:b4:18:cc:51:c9:c7:
24:11:c5:ce:9b:a2:e6:6b:6c:e9:a8:53:9a:39:e9:
57:6e:e8:1c:2b:48:97:37:40:09:a0:73:ed:93:7a:
ce:b2:3f:15:45:3c:d1:d1:d5:c9:a5:2b:ce:fe:14:
ae:2f:f3:28:5f:d2:e5:67:32:ff:1c:5b:b7:75:e1:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:FA:EE:74:4A:7A:FB:E9:E0:9E:0F:00:92:A6:52:92:9D:0E:C8
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:05:58:0e:98:d8:36:25:9e:62:56:13:37:6b:78:39:2c:
e6:14:0d:e9:77:98:ea:c2:02:7a:30:da:89:f4:90:7b:2b:ea:
47:a7:a9:30:07:7e:72:19:6b:74:aa:53:00:1c:86:a8:7c:c3:
6a:11:2f:01:ba:c8:64:5c:9b:fe:c6:3a:9c:e3:4c:b9:df:57:
98:8b:8e:f9:67:1d:f2:05:52:3e:c0:74:ef:fd:a8:0e:07:cc:
b4:75:9c:e6:da:e7:a0:1c:f4:c7:b2:52:c0:aa:b8:95:45:c1:
9e:df:2d:83:ea:31:4d:d6:bc:3e:cf:de:a2:e7:86:e6:33:5f:
99:b2:fc:da:63:b6:9b:88:04:03:2b:e8:b3:87:d6:cb:d5:ff:
04:9e:a3:61:05:95:b6:52:45:85:32:86:65:55:21:09:3d:ae:
b8:96:0a:ac:2f:9e:14:69:f6:f7:5a:5a:e4:9e:32:36:5a:84:
29:97:82:e4:f2:e1:10:31:1d:76:24:7a:96:08:42:30:f6:63:
8e:9b:ce:1d:73:79:15:47:b9:22:e6:81:c4:b2:89:44:df:68:
3c:28:73:74:e4:74:a1:cd:cf:7f:ce:d6:04:fd:5a:98:a9:42:
80:36:62:0d:71:17:75:46:ae:c1:ec:45:ef:94:a1:ac:8a:8a:
cd:9c:f1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbNdYUlXl278FxLXxur4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjYwNzI0MDAwMDU3WhcNMjYwNzI1MDAwMDU3WjAzMTEwLwYDVQQD
Eyg0YTQ4ZmFlZTc0NGE3YWZiZTllMDllMGYwMDkyYTY1MjkyOWQwZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltTvLgtCXIa2lz0J3Ae5x8V6rqkO
Ohsisv5/7WDyJDTJKcXOVHtwhse+iWiLFiCRnQr9q1EZW/gK/x/CI7Md9FYroip0
TVZ6F3x1FgsoF1xymsFaqyqzgRlMhOywf5KJrQiTKeK8v46Q0KfwLuSW5G+TGOuj
I5LrCpoRpZS6/ZY95niaAINycTAl4xPyiYtNSDgrsxma9PxraNXoIHos5fWvbXUk
yQf3xh6xzBfD03Q/NHkl/OjTpIAwImu0GMxRycckEcXOm6Lma2zpqFOaOelXbugc
K0iXN0AJoHPtk3rOsj8VRTzR0dXJpSvO/hSuL/MoX9LlZzL/HFu3deHfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpI+u50Snr76eCeDwCSplKSnQ7IMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh60FWA6Y
2DYlnmJWEzdreDks5hQN6XeY6sICejDaifSQeyvqR6epMAd+chlrdKpTAByGqHzD
ahEvAbrIZFyb/sY6nONMud9XmIuO+Wcd8gVSPsB07/2oDgfMtHWc5trnoBz0x7JS
wKq4lUXBnt8tg+oxTda8Ps/eoueG5jNfmbL82mO2m4gEAyvos4fWy9X/BJ6jYQWV
tlJFhTKGZVUhCT2uuJYKrC+eFGn291pa5J4yNlqEKZeC5PLhEDEddiR6lghCMPZj
jpvOHXN5FUe5IuaBxLKJRN9oPChzdOR0oc3Pf87WBP1amKlCgDZiDXEXdUauwexF
75ShrIqKzZzxUQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:03 2026 by rpki-client