Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: Eeuwz9/hsJq+uRjwPRea1g4lBHaIDBY4cD0z8JHAn9E=
Subject key identifier: 3F:B4:B9:D3:10:D2:5C:6A:9B:D7:78:0C:41:98:0E:90:18:D5:F3:82
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 01A0DF86285F1A21375E578E35B104FDEE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 173A
Signing time: Sat 26 Sep 2026 21:01:46 +0000
Manifest this update: Sat 26 Sep 2026 21:01:46 +0000
Manifest next update: Sun 27 Sep 2026 21:01:46 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 6kqi1eEHIy7hDXgnEEODR9lGS3zZqVQf2SXII3M9prU=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:28:5f:1a:21:37:5e:57:8e:35:b1:04:fd:ee:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Sep 26 21:01:46 2026 GMT
Not After : Sep 27 21:01:46 2026 GMT
Subject: CN=3fb4b9d310d25c6a9bd7780c41980e9018d5f382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:50:92:d1:2f:6c:00:8c:3a:70:91:1d:9b:
30:c6:6d:25:85:f2:b7:cd:a8:e3:08:d8:70:ad:6d:
c1:de:12:db:62:ed:32:86:c3:84:f2:9b:44:95:ff:
a6:be:80:ef:03:73:bb:68:58:04:d1:12:0e:f6:71:
e1:1f:ea:10:f5:97:5c:fb:1c:7d:6f:58:f4:e0:13:
7c:f3:35:7c:1a:f1:21:2b:eb:2d:42:f9:53:59:84:
ff:78:2f:ad:d5:01:a8:7f:79:77:15:a4:97:55:31:
8c:39:82:bd:73:eb:b0:e5:f9:51:1b:9c:18:77:41:
94:aa:67:c7:2b:7a:e7:db:4b:fa:c1:a6:c4:85:62:
e7:c3:3a:54:e3:22:93:44:80:33:0b:14:a1:6a:c6:
fa:80:d4:a0:2b:8e:55:7f:cb:28:9a:5e:35:96:0b:
9f:d7:ad:c9:50:33:17:34:fc:4e:a0:19:70:bc:a1:
52:49:3c:af:08:37:bf:b2:90:77:f1:b5:eb:b5:f4:
37:c3:3b:8c:be:66:3c:99:da:0c:44:62:48:cd:25:
a0:bb:6a:17:8b:be:12:e6:f3:51:d9:f7:93:af:8d:
0e:cf:ed:52:08:91:c0:18:e0:28:5a:e6:d8:f2:d3:
87:df:59:bc:eb:e5:62:d3:e6:68:23:2d:64:80:2e:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:B9:D3:10:D2:5C:6A:9B:D7:78:0C:41:98:0E:90:18:D5:F3:82
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e0:4c:a5:e7:c1:43:68:73:cd:41:4d:09:b8:43:5b:49:d7:
f6:89:f3:2d:7b:a0:f6:4a:e3:a4:65:9a:c1:59:c8:da:f3:dc:
53:40:54:6b:67:1f:b5:6f:3a:e2:eb:0a:d4:a1:79:c7:f0:16:
b7:68:12:7d:ec:72:8c:4c:bc:1f:fc:0b:ce:48:de:bb:51:c6:
e0:24:e6:6e:04:35:9b:4d:d3:11:84:ab:41:32:4f:fa:dc:d3:
b9:cb:c4:08:ee:36:90:3c:00:bc:cc:09:a9:85:a3:bc:bc:94:
f4:3f:57:84:27:b5:43:86:a5:d4:f4:1f:36:f6:d0:ff:99:c2:
49:6b:8a:37:12:4b:19:2a:ea:8d:b0:23:ea:30:d9:ef:2c:f5:
e5:c2:67:5a:44:7d:e9:63:69:85:cc:c5:9a:86:3c:2f:39:e9:
02:d0:c5:99:ed:03:27:93:2b:7f:47:80:5f:1e:2c:78:13:51:
2b:1c:35:e7:cc:00:34:fc:43:c9:34:5f:2a:a3:97:e9:e1:c2:
e0:61:25:66:8c:58:e3:e0:c2:69:8c:a0:66:f8:6a:5b:b3:b4:
c1:29:49:eb:4d:a4:26:b1:53:2d:66:45:4d:14:ff:85:1b:85:
89:f8:f1:8a:9b:17:6c:b4:3e:e6:03:6d:5c:06:e1:c9:2a:b5:
b3:59:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:31:42 2026 by rpki-client