Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: Tp+MEmWJz7+SjbTmyVIq+aSFuNg0+ebOYk2ivD5N4WQ=
Subject key identifier: 58:EE:52:2E:CA:BE:C7:94:96:BE:6D:55:D1:3B:FD:F8:08:43:D1:7F
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 019E1F10C90A9FF0E86733981A2C45D08E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 16CA
Signing time: Wed 13 May 2026 02:00:54 +0000
Manifest this update: Wed 13 May 2026 02:00:54 +0000
Manifest next update: Thu 14 May 2026 02:00:54 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: yaskFzbzUgtd8ruUQqbFW1eLwV8uP8lAwkMGjoF+WyI=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c9:0a:9f:f0:e8:67:33:98:1a:2c:45:d0:8e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: May 13 02:00:54 2026 GMT
Not After : May 14 02:00:54 2026 GMT
Subject: CN=58ee522ecabec79496be6d55d13bfdf80843d17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:23:77:9d:69:45:09:5b:f0:1b:d8:f8:3d:
7a:29:b2:dc:b9:c7:c1:70:08:86:8b:18:23:52:fc:
eb:7c:61:a7:dd:c5:ab:03:38:0a:61:64:20:3f:c8:
31:d7:9c:5e:cd:cb:34:ee:2f:b0:54:06:e3:5d:ad:
69:91:56:69:c4:da:2d:00:83:da:c1:fb:cc:7c:e9:
3d:dd:76:c9:74:4e:cf:2a:c9:be:02:7f:f2:bf:ab:
c7:40:65:06:48:5a:6f:1d:e3:d1:07:a2:63:07:0a:
56:e9:ff:8d:dc:3e:f5:6d:62:49:c0:03:43:6d:6c:
1c:0a:02:51:b3:15:92:86:1d:0b:96:3c:71:fc:c8:
23:b4:9c:d3:75:bc:ad:27:6f:9f:9b:d3:ab:8f:68:
3e:79:b4:c0:ba:9d:40:27:b6:28:f3:60:47:d6:46:
b9:1c:06:5d:1a:1d:b2:fe:50:f2:1d:38:0c:c7:ac:
67:0f:f3:fd:01:e2:9a:ff:b0:94:b5:b9:b6:5e:20:
e7:09:1b:7b:f1:8f:e8:79:c4:2b:a8:5b:f7:93:a8:
2d:23:8c:e1:c6:0b:96:ab:e0:14:94:02:eb:6b:b7:
ad:89:13:d4:98:d0:8a:c5:17:6e:3d:37:e0:00:ba:
b3:e1:59:2a:2c:93:d5:ae:c5:df:04:70:3f:1b:11:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:52:2E:CA:BE:C7:94:96:BE:6D:55:D1:3B:FD:F8:08:43:D1:7F
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:ff:50:5a:a0:48:4a:88:3e:08:e5:9f:bb:a8:37:1b:96:
37:ba:10:43:f5:af:85:41:24:b3:e2:fa:c3:32:6e:4d:ae:3f:
2f:52:c7:6c:67:4b:ae:ed:b5:eb:aa:92:44:b5:2a:96:89:95:
7c:40:53:55:7a:ea:90:cc:99:f5:1b:9d:14:5b:20:58:81:f4:
f5:e3:d5:ee:e6:6a:fd:8e:75:e8:ad:f7:e1:f6:9e:0f:f9:5c:
b3:6f:29:63:d4:83:3b:ba:25:12:ec:8b:ef:21:eb:d9:4f:a3:
2c:23:13:4d:a5:a9:0a:0c:ba:b7:c6:cc:cd:f7:7a:bb:1f:fd:
14:d3:91:4a:32:b0:21:78:fd:ee:77:c2:dc:2a:6f:bf:d4:b7:
f3:ef:13:5e:2a:6b:cf:40:5a:43:a0:79:d4:e3:b0:26:77:a0:
97:65:d2:54:5e:04:d8:d6:45:5c:b7:d2:74:6a:62:11:be:02:
79:6a:11:ae:86:ad:b0:fb:14:3a:fe:d4:f8:6e:a6:77:48:5d:
7b:12:eb:59:f3:ab:66:62:6f:01:1d:d6:01:9d:e1:4c:64:fa:
bb:9d:b4:16:5a:03:35:48:0b:69:9f:50:33:d7:9a:9b:30:a6:
e6:35:1c:a8:9d:2e:4f:5b:bd:9c:5f:3d:5c:cf:ca:75:01:45:
3b:f9:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:38 2026 by rpki-client