Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: hj5sM8BMfHWl2gQQAqWtvnBvyYnkkm4MzPiR8mwZRlk=
Subject key identifier: 94:00:FF:D7:6D:D8:17:2F:E5:B5:8E:10:F3:8B:8F:10:1F:D2:4F:7D
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019E1EA3B5959BEDD1923D23ACFB0D58FBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0EE5
Signing time: Wed 13 May 2026 00:01:45 +0000
Manifest this update: Wed 13 May 2026 00:01:45 +0000
Manifest next update: Thu 14 May 2026 00:01:45 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 14OQpZ+Q2aSTBel7MOHfADAG+dljdzLssIREUIET1ps=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b5:95:9b:ed:d1:92:3d:23:ac:fb:0d:58:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: May 13 00:01:45 2026 GMT
Not After : May 14 00:01:45 2026 GMT
Subject: CN=9400ffd76dd8172fe5b58e10f38b8f101fd24f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2c:01:19:83:fe:d8:bb:18:4c:f4:6c:bf:ac:
4b:aa:6a:9c:7a:f4:bf:b6:8c:dd:29:d2:2c:90:31:
2d:9a:b0:0f:88:70:e7:ac:ce:e1:7e:27:d8:d3:be:
7d:9d:a4:64:45:c4:f5:f2:c0:8f:76:9c:31:c3:6b:
a1:42:c7:ba:b6:b3:d3:fd:6f:9f:b3:c1:cf:3f:18:
5a:38:64:18:b3:52:67:c0:df:76:49:58:8c:e1:0a:
a3:e1:3b:fb:f9:ab:0e:16:f0:ed:a8:4b:97:d8:34:
96:5c:4f:09:c7:cf:05:fd:23:76:3a:7e:c3:bd:73:
ff:22:97:50:53:ef:b6:e4:af:04:a1:4d:b6:e9:e0:
c8:8f:de:25:99:fc:d5:dd:ef:76:16:fc:1f:6d:82:
0a:f3:f2:f2:2c:6b:e3:d1:ea:ef:81:d6:b3:d7:63:
03:84:22:d0:7e:ff:b4:db:58:08:50:95:68:76:41:
ac:9d:d5:fc:ee:d2:17:dd:7e:cc:f8:a9:6c:2d:ff:
71:77:3c:4a:6f:4c:d3:75:37:da:25:af:e6:58:69:
15:9e:78:cc:45:fb:f2:56:04:a1:61:36:34:3a:55:
aa:a3:06:48:4d:49:60:fc:70:24:c7:75:54:31:00:
93:f9:32:bb:46:fd:92:7e:07:4c:cd:ad:3e:a9:c7:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:FF:D7:6D:D8:17:2F:E5:B5:8E:10:F3:8B:8F:10:1F:D2:4F:7D
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4f:8f:00:b4:dc:f5:b6:96:e2:67:21:c4:06:13:2d:14:03:
bd:c7:fb:37:5b:30:d0:82:b1:c5:0f:a9:76:51:7f:c4:82:67:
82:72:64:87:f1:56:67:3e:c1:0b:7e:13:db:b8:09:0f:6b:6c:
fe:61:81:8a:5f:f2:25:95:4a:fa:e5:72:82:9f:82:bf:f3:fe:
46:3b:56:56:82:c0:19:c6:68:28:c3:ce:fb:c2:ea:05:44:c5:
85:45:ec:ed:b5:7e:0e:60:b9:aa:4d:e5:3f:c4:a3:7a:16:44:
3a:24:63:a3:9d:13:6f:6f:5a:f8:5c:89:c1:c7:9f:08:e4:93:
53:cf:36:e2:37:8a:c9:36:df:69:19:3b:9b:c0:f8:76:ba:89:
b7:d7:15:29:f7:34:0f:38:bb:cd:e9:4e:11:7f:6c:13:5d:5a:
9f:cc:8e:f2:21:2a:d7:fa:8d:b8:1d:28:01:e4:31:e2:3a:e6:
f2:fb:c2:b5:32:81:82:6c:49:cd:56:0b:80:44:c3:3e:78:70:
9b:84:c4:8a:1e:48:7b:0d:3f:8e:80:57:44:a3:8b:5a:b9:d7:
7e:9e:1e:d9:fd:4c:0c:44:96:9f:07:06:13:05:a2:51:19:88:
70:85:01:15:af:d8:e4:e8:73:ef:c1:aa:62:d0:6f:8f:d7:91:
92:84:56:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo7WVm+3Rkj0jrPsNWPvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5
ZjAxNDAwHhcNMjYwNTEzMDAwMTQ1WhcNMjYwNTE0MDAwMTQ1WjAzMTEwLwYDVQQD
Eyg5NDAwZmZkNzZkZDgxNzJmZTViNThlMTBmMzhiOGYxMDFmZDI0ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CwBGYP+2LsYTPRsv6xLqmqcevS/
tozdKdIskDEtmrAPiHDnrM7hfifY0759naRkRcT18sCPdpwxw2uhQse6trPT/W+f
s8HPPxhaOGQYs1JnwN92SViM4Qqj4Tv7+asOFvDtqEuX2DSWXE8Jx88F/SN2On7D
vXP/IpdQU++25K8EoU226eDIj94lmfzV3e92FvwfbYIK8/LyLGvj0ervgdaz12MD
hCLQfv+021gIUJVodkGsndX87tIX3X7M+KlsLf9xdzxKb0zTdTfaJa/mWGkVnnjM
RfvyVgShYTY0OlWqowZITUlg/HAkx3VUMQCT+TK7Rv2SfgdMza0+qcdN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQA/9dt2Bcv5bWOEPOLjxAf0k99MB8GA1UdIwQY
MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt
YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2
LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeE+PALTc
9baW4mchxAYTLRQDvcf7N1sw0IKxxQ+pdlF/xIJngnJkh/FWZz7BC34T27gJD2ts
/mGBil/yJZVK+uVygp+Cv/P+RjtWVoLAGcZoKMPO+8LqBUTFhUXs7bV+DmC5qk3l
P8SjehZEOiRjo50Tb29a+FyJwcefCOSTU8824jeKyTbfaRk7m8D4drqJt9cVKfc0
Dzi7zelOEX9sE11an8yO8iEq1/qNuB0oAeQx4jrm8vvCtTKBgmxJzVYLgETDPnhw
m4TEih5Iew0/joBXRKOLWrnXfp4e2f1MDESWnwcGEwWiURmIcIUBFa/Y5Ohz78Gq
YtBvj9eRkoRWaQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:19:09 2026 by rpki-client