Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: aPlkEiK+EY4kfU8zra0I6kgV4xnRR88e3LvyJoQ4FSU=
Subject key identifier: 92:CB:88:FB:8C:83:22:73:2D:FA:3F:42:7E:95:B3:B1:1A:7C:58:33
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019E1DFE7EDE3A73F421DEBF23EA1C287581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 02A1
Signing time: Tue 12 May 2026 21:01:18 +0000
Manifest this update: Tue 12 May 2026 21:01:18 +0000
Manifest next update: Wed 13 May 2026 21:01:18 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: 2492imtTPfx+ZEHq3gGCVvWc+6bnMOpQUh16lAnUoo8=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7e:de:3a:73:f4:21:de:bf:23:ea:1c:28:75:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: May 12 21:01:18 2026 GMT
Not After : May 13 21:01:18 2026 GMT
Subject: CN=92cb88fb8c8322732dfa3f427e95b3b11a7c5833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:c9:dc:09:d6:3e:7d:26:5b:24:e6:11:99:
34:e8:11:1e:ed:68:54:a0:14:67:19:9d:2a:90:08:
a8:c8:b7:9f:41:4f:3c:5f:dc:e3:96:5a:a0:7a:d2:
a5:05:36:37:a5:f9:f1:73:4d:3e:b0:5a:63:36:0c:
b0:34:94:dc:00:9c:a5:68:51:99:33:8c:a6:4e:33:
8d:9f:ef:f4:3c:c5:78:95:ea:79:ce:18:7f:7b:dd:
f0:2f:19:e0:46:c2:05:ea:a2:89:f2:f9:6e:e1:83:
e5:ae:34:66:d3:cd:64:43:39:ae:1c:47:49:16:c7:
a6:d3:ca:b4:f8:0d:11:f4:26:fa:e8:2e:07:03:0f:
b1:87:e3:5e:58:f3:18:14:01:b8:b9:4b:f1:c4:b6:
5b:70:9b:7b:14:b6:ea:d8:67:ea:4f:16:59:4a:bd:
53:0f:4d:71:96:84:73:08:e8:6c:fb:69:ca:13:32:
0c:0e:38:fd:9d:a8:4e:de:21:51:09:a0:f3:c3:b0:
a7:76:db:53:77:87:c6:3e:f0:1c:8b:58:ea:99:5f:
ff:c5:6c:f4:10:70:12:a5:9b:b2:1b:4d:38:3a:71:
45:45:f7:fc:55:e6:a9:95:0a:1e:1f:86:7d:94:bd:
d1:6b:af:a8:fb:a4:38:26:79:d2:b8:f5:50:b3:c4:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:88:FB:8C:83:22:73:2D:FA:3F:42:7E:95:B3:B1:1A:7C:58:33
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:21:bd:d3:e8:99:7b:3d:80:1b:b2:84:6a:ed:c5:24:98:
7f:dd:8d:34:c3:d1:e9:cf:8a:3c:48:5b:f3:53:b7:05:d1:53:
1e:db:83:b6:e8:3e:70:49:5b:9c:41:0b:48:e1:a3:c7:34:a4:
53:ce:40:36:8c:9f:a0:f3:b9:f2:59:11:b9:53:cc:2a:e0:8d:
f8:f1:26:38:95:4d:57:9e:4a:1f:03:ed:78:56:56:73:7a:64:
dd:62:0a:9e:ee:be:f3:a5:f8:ad:8a:92:f7:0b:da:77:ff:46:
2a:1f:20:96:d8:5e:55:45:1e:ca:9e:1f:48:d2:4e:d5:74:b8:
e7:c4:ad:54:db:8e:bb:f6:2a:c7:e1:5d:b8:0b:fd:4b:3f:97:
12:2c:84:b6:1c:52:f8:e2:82:4c:af:f0:d2:f3:2a:aa:be:dd:
1a:d2:f4:3d:e1:52:59:cc:20:35:a0:40:f9:4f:95:92:3d:0d:
a9:3e:f9:a4:78:95:85:6d:4b:c5:b9:2b:0d:42:b8:46:19:22:
72:80:9f:9d:b8:76:5b:fb:7b:be:41:76:39:ce:96:3e:51:08:
e9:2c:ca:09:7c:d3:9a:37:4b:97:8c:e4:57:9f:60:f6:ef:e8:
2b:d8:ec:6e:bd:2b:1f:1d:27:54:b6:87:97:7a:a7:31:39:a5:
65:fe:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:58 2026 by rpki-client