Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: Wjrp/SlpvRnp1WHCUDydCKguOmJKRoCI/GkVAames5g=
Subject key identifier: D8:BD:A4:1F:EF:EE:59:09:46:0E:5A:5B:D6:DC:9D:8C:52:7B:19:1D
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019E1EA32BCE319E3E33923F697B84814988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 15CD
Signing time: Wed 13 May 2026 00:01:10 +0000
Manifest this update: Wed 13 May 2026 00:01:10 +0000
Manifest next update: Thu 14 May 2026 00:01:10 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: LKjoxI17ouTjNM+qCgorJno4q8X9RvGZ+xP9go5PkOU=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2b:ce:31:9e:3e:33:92:3f:69:7b:84:81:49:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: May 13 00:01:10 2026 GMT
Not After : May 14 00:01:10 2026 GMT
Subject: CN=d8bda41fefee5909460e5a5bd6dc9d8c527b191d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:25:b7:f4:83:8f:20:a5:a7:a3:57:c0:a3:
a8:d4:a1:3f:cf:01:9f:a5:7f:72:24:b1:50:46:cf:
a0:16:3f:bb:8f:7a:10:d1:ca:36:81:ba:86:63:e0:
45:90:1d:e6:eb:a1:4e:0c:3a:df:a5:ac:5b:2f:94:
fb:95:39:be:ea:ac:70:55:56:43:7e:c4:71:a3:a8:
60:4e:86:5b:3e:df:0b:ca:3f:aa:a7:33:e0:06:18:
2c:17:3a:e0:12:33:39:78:61:0e:0c:bb:3b:3c:e5:
a1:43:d6:26:a8:6b:e9:89:1a:93:94:cc:8f:d3:fa:
d8:88:9d:ee:7d:b5:e1:80:4d:89:92:1a:bb:7d:61:
c3:73:3a:6f:56:6d:69:48:15:d2:e9:3a:f1:ed:1e:
65:0b:77:82:ff:cd:65:73:3c:02:74:c7:09:53:de:
c3:14:56:29:53:c7:e4:e9:06:91:39:6a:3a:f1:c6:
4d:3b:e8:10:f9:fe:99:b8:32:c1:a7:47:1a:cd:e4:
6c:bc:87:10:51:fc:ef:1b:c6:ef:b5:9d:be:a8:f2:
55:93:a3:a5:0c:a3:b9:c2:36:78:e9:8c:d1:a2:e8:
87:23:74:53:ec:a4:d7:39:e8:92:c4:90:09:48:7f:
2c:27:c3:7d:a5:96:18:5d:ed:68:d3:a5:02:72:9d:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:A4:1F:EF:EE:59:09:46:0E:5A:5B:D6:DC:9D:8C:52:7B:19:1D
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:16:5b:8b:24:ba:90:bb:ba:0f:63:05:15:08:bc:5e:de:
31:3f:86:8a:75:67:b5:14:7a:8c:4a:71:8c:d5:05:39:9c:ac:
8b:52:52:96:3c:6e:7a:7d:bd:cb:6c:59:a9:37:77:4b:78:81:
f3:07:1b:f9:9f:09:11:3a:42:ed:e5:60:4a:cb:80:b3:1f:0b:
ea:64:bd:3f:a7:73:0a:56:5d:ec:46:2a:c6:a2:4e:cf:6e:4e:
f0:e9:4b:4f:ae:d1:3f:45:0f:c6:42:0a:8d:ee:90:57:bb:58:
f0:6f:5e:df:20:ed:63:61:65:33:ac:e2:d1:ab:d3:96:c0:d1:
3d:d4:28:52:72:15:26:9f:a5:d8:c6:22:8c:76:00:b7:ea:18:
7d:a8:91:e5:66:c9:cd:28:9b:03:61:4e:5a:93:0b:e0:f1:9d:
da:01:0d:11:6f:f2:27:70:e3:fc:e1:51:7f:80:17:0e:ed:ee:
f3:9e:1f:59:1a:46:20:47:df:07:e8:c6:3b:5c:0b:5d:f3:31:
b6:e2:38:b9:58:b1:82:c3:c9:4a:e2:f7:2e:59:a7:fa:47:18:
04:1e:2f:1a:8c:f6:4a:50:51:42:ef:79:fd:a6:41:68:cc:7b:
96:07:7b:f2:d5:49:ad:b6:6f:7d:8f:81:70:e4:ec:bc:76:18:
8c:61:a7:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoyvOMZ4+M5I/aXuEgUmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjYwNTEzMDAwMTEwWhcNMjYwNTE0MDAwMTEwWjAzMTEwLwYDVQQD
EyhkOGJkYTQxZmVmZWU1OTA5NDYwZTVhNWJkNmRjOWQ4YzUyN2IxOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwMlt/SDjyClp6NXwKOo1KE/zwGf
pX9yJLFQRs+gFj+7j3oQ0co2gbqGY+BFkB3m66FODDrfpaxbL5T7lTm+6qxwVVZD
fsRxo6hgToZbPt8Lyj+qpzPgBhgsFzrgEjM5eGEODLs7POWhQ9YmqGvpiRqTlMyP
0/rYiJ3ufbXhgE2Jkhq7fWHDczpvVm1pSBXS6Trx7R5lC3eC/81lczwCdMcJU97D
FFYpU8fk6QaROWo68cZNO+gQ+f6ZuDLBp0cazeRsvIcQUfzvG8bvtZ2+qPJVk6Ol
DKO5wjZ46YzRouiHI3RT7KTXOeiSxJAJSH8sJ8N9pZYYXe1o06UCcp26YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi9pB/v7lkJRg5aW9bcnYxSexkdMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwwWW4sk
upC7ug9jBRUIvF7eMT+GinVntRR6jEpxjNUFOZysi1JSljxuen29y2xZqTd3S3iB
8wcb+Z8JETpC7eVgSsuAsx8L6mS9P6dzClZd7EYqxqJOz25O8OlLT67RP0UPxkIK
je6QV7tY8G9e3yDtY2FlM6zi0avTlsDRPdQoUnIVJp+l2MYijHYAt+oYfaiR5WbJ
zSibA2FOWpML4PGd2gENEW/yJ3Dj/OFRf4AXDu3u854fWRpGIEffB+jGO1wLXfMx
tuI4uVixgsPJSuL3Llmn+kcYBB4vGoz2SlBRQu95/aZBaMx7lgd78tVJrbZvfY+B
cOTsvHYYjGGneQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:32:43 2026 by rpki-client