Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: k4DisLe6NflSsNudZU9UKAkjOnKxGeYoh6UUZ/BGfzY=
Subject key identifier: 68:9F:6B:AA:C9:F6:82:D2:50:83:89:B1:8F:C5:74:19:F8:91:87:D5
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 019E1D5961D4C36C9FEF1551AF447E5759A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 0381
Signing time: Tue 12 May 2026 18:00:57 +0000
Manifest this update: Tue 12 May 2026 18:00:57 +0000
Manifest next update: Wed 13 May 2026 18:00:57 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: 7zCVq7XaAcwD6lOkFG7GvBKqddLZzfSlxZW0av+XaYQ=)
2: KbWTyRJitPC32LXPQqBi691clT8.roa (hash: mIu7f2xGRcIDk+hlkwsSKHTB5jDl1uwNz6s4KpvqXDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:61:d4:c3:6c:9f:ef:15:51:af:44:7e:57:59:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: May 12 18:00:57 2026 GMT
Not After : May 13 18:00:57 2026 GMT
Subject: CN=689f6baac9f682d2508389b18fc57419f89187d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:0b:35:2c:1f:a3:ab:64:14:40:ee:c1:22:
5a:14:62:8c:60:80:6e:00:57:22:45:c0:06:c0:86:
5e:57:31:49:04:be:1c:3c:4b:8d:d8:ef:eb:15:62:
90:bf:9b:1b:6a:6f:7f:f0:38:55:f7:d2:f0:a4:16:
c6:29:54:f2:ca:6a:69:1a:d5:ec:ff:c4:95:e6:3c:
33:76:ad:a3:85:1b:cb:69:2c:eb:ab:b5:9e:94:d2:
fd:f9:6b:fb:cb:0c:23:c4:51:f5:66:85:ce:fd:f8:
36:58:a0:eb:81:bf:1a:b0:92:c2:34:d3:d7:b2:8f:
3b:53:43:ab:77:7a:30:e2:b3:8d:2a:70:31:3d:9c:
5e:dd:9a:66:ef:ff:cf:c0:73:c9:dd:85:c7:e4:ba:
d4:86:a4:8f:1f:58:6b:2d:94:de:a8:5d:24:17:22:
b8:26:95:c3:e1:79:f7:09:07:cc:8e:30:d7:0b:21:
8e:f3:41:b4:ca:91:4a:f0:d8:50:aa:0f:76:a2:3a:
92:5f:58:7f:b3:bb:08:f3:e7:17:11:89:90:3e:f0:
b2:65:71:5e:cb:cc:fc:68:54:69:d3:19:8a:55:b0:
90:56:e2:c3:03:94:8a:0b:18:03:27:66:04:9b:ee:
fa:46:fc:f9:69:2d:fd:a6:7b:96:40:c1:f3:17:50:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9F:6B:AA:C9:F6:82:D2:50:83:89:B1:8F:C5:74:19:F8:91:87:D5
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:ae:2a:57:0a:e3:ca:1a:ea:26:26:2e:54:d7:ba:14:8f:
32:d6:60:e1:fe:1e:14:93:35:3d:5a:d8:82:1a:d6:19:01:44:
24:49:cc:a5:3a:a3:2d:5b:40:f6:98:e6:2b:f7:75:56:aa:56:
db:32:d1:d8:50:c0:7b:46:05:73:71:6f:23:74:09:6f:6a:3d:
1d:3e:53:93:d4:6c:25:47:c7:76:32:15:ae:2c:9f:6b:82:33:
e4:18:d6:bd:7d:2c:c2:73:14:6a:61:04:10:1f:a4:6b:c4:09:
ab:c7:35:0d:20:e3:2f:5a:cd:95:59:5b:da:ed:48:40:ad:bf:
fd:c6:0b:76:6d:f5:f1:9b:f4:0a:e9:49:d5:65:fd:3f:f6:34:
4b:0c:b1:30:28:4c:71:0d:fd:ed:4e:b9:ba:c4:7e:b9:a1:eb:
53:41:7b:1a:81:6b:69:6d:57:81:75:61:1f:54:37:5f:7f:7e:
40:88:24:e0:18:52:90:25:64:a9:40:9a:3d:4c:eb:7e:10:4d:
ea:ff:ef:ca:4c:98:47:3b:54:8d:59:ba:00:82:34:57:50:26:
e1:ec:68:fd:4d:cf:29:ed:a6:03:60:05:d3:af:b4:7f:c4:74:
52:15:67:93:7b:12:53:60:05:b3:05:42:f4:67:74:9e:d7:cd:
44:f1:a6:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWWHUw2yf7xVRr0R+V1mpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzI4NDVjNjFkYWMyZWE1MGNhY2I4M2ZkMDkzMTFhMzBl
M2E5MGUwHhcNMjYwNTEyMTgwMDU3WhcNMjYwNTEzMTgwMDU3WjAzMTEwLwYDVQQD
Eyg2ODlmNmJhYWM5ZjY4MmQyNTA4Mzg5YjE4ZmM1NzQxOWY4OTE4N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyoLNSwfo6tkFEDuwSJaFGKMYIBu
AFciRcAGwIZeVzFJBL4cPEuN2O/rFWKQv5sbam9/8DhV99LwpBbGKVTyymppGtXs
/8SV5jwzdq2jhRvLaSzrq7WelNL9+Wv7ywwjxFH1ZoXO/fg2WKDrgb8asJLCNNPX
so87U0Ord3ow4rONKnAxPZxe3Zpm7//PwHPJ3YXH5LrUhqSPH1hrLZTeqF0kFyK4
JpXD4Xn3CQfMjjDXCyGO80G0ypFK8NhQqg92ojqSX1h/s7sI8+cXEYmQPvCyZXFe
y8z8aFRp0xmKVbCQVuLDA5SKCxgDJ2YEm+76Rvz5aS39pnuWQMHzF1CWrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGifa6rJ9oLSUIOJsY/FdBn4kYfVMB8GA1UdIwQY
MBaAFNrChFxh2sLqUMrLg/0JMRow46kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQt
ZWFlNjAwYTUyYzAxLzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQtZWFlNjAwYTUyYzAx
LzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmmuKlcK
48oa6iYmLlTXuhSPMtZg4f4eFJM1PVrYghrWGQFEJEnMpTqjLVtA9pjmK/d1VqpW
2zLR2FDAe0YFc3FvI3QJb2o9HT5Tk9RsJUfHdjIVriyfa4Iz5BjWvX0swnMUamEE
EB+ka8QJq8c1DSDjL1rNlVlb2u1IQK2//cYLdm318Zv0CulJ1WX9P/Y0SwyxMChM
cQ397U65usR+uaHrU0F7GoFraW1XgXVhH1Q3X39+QIgk4BhSkCVkqUCaPUzrfhBN
6v/vykyYRztUjVm6AII0V1Am4exo/U3PKe2mA2AF06+0f8R0UhVnk3sSU2AFswVC
9Gd0ntfNRPGmVA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:51 2026 by rpki-client