Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: fg202xf54Gz472kRlizzNZFdzpVZZ8ZwM8Ty8blPU/U=
Subject key identifier: 02:DA:81:B2:41:37:A4:43:6D:AE:6D:94:B7:58:63:50:89:78:BB:BF
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 019E1E358C2E74995F66383ACDC7DC584F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 22:01:26 +0000
Manifest this update: Tue 12 May 2026 22:01:26 +0000
Manifest next update: Wed 13 May 2026 22:01:26 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: 2X+KtLv9MqZiCqc3g+NkztDaiwEmicj4pzhy1IGf9Z0=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:8c:2e:74:99:5f:66:38:3a:cd:c7:dc:58:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: May 12 22:01:26 2026 GMT
Not After : May 13 22:01:26 2026 GMT
Subject: CN=02da81b24137a4436dae6d94b75863508978bbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:8d:35:e0:64:9c:1e:42:ca:1f:fd:6d:d9:
44:35:98:bf:d2:48:21:5c:7e:62:5f:26:68:72:a8:
27:84:d4:a8:d6:2a:0d:88:b1:2e:aa:de:b8:e3:55:
d5:06:f9:82:2e:86:a2:ea:36:34:e4:4f:15:ec:9f:
07:c4:86:0e:41:e2:fd:e4:3c:05:5b:93:42:bb:90:
12:19:3c:e7:3e:1b:02:06:69:a6:61:80:80:fc:dd:
d4:96:8b:38:81:bb:1a:75:65:97:3d:75:38:43:9e:
eb:67:89:1c:15:9a:ef:40:10:89:a0:a1:21:4e:3a:
44:a7:be:21:30:04:8e:52:60:66:92:d0:52:94:77:
c8:17:fd:18:02:28:1c:1b:e7:a8:1a:34:42:b5:e5:
2e:ea:21:40:e7:8e:40:73:3c:29:fb:d8:87:b9:62:
a2:f9:b7:e0:37:87:aa:9a:22:f7:25:04:c6:b8:7f:
63:ba:4a:f1:04:24:9d:ac:6e:5d:28:f9:47:ef:80:
f1:7b:ae:06:66:2f:fb:5e:e9:5f:72:48:15:64:ed:
61:23:4e:40:b6:9e:a4:12:32:ed:d3:f9:c5:90:bc:
4d:06:c5:5a:80:99:8c:3f:ff:c8:52:3f:a2:0a:9b:
52:d2:fa:74:3e:31:62:35:a1:5e:e9:da:6c:88:57:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:81:B2:41:37:A4:43:6D:AE:6D:94:B7:58:63:50:89:78:BB:BF
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bf:79:9b:d4:50:07:b9:00:db:1d:a4:26:4c:73:b2:52:48:
44:16:1a:ff:b1:f4:a9:49:3e:af:6e:05:16:41:11:08:94:ef:
33:cd:b7:1e:55:ea:c3:47:05:37:50:68:60:d1:78:1f:7e:da:
66:47:13:bc:e3:52:3a:54:23:9e:aa:70:bf:76:61:72:de:5d:
97:3b:a4:72:48:9b:bd:f1:b3:a8:20:f8:6f:68:a6:3c:c7:7b:
e6:b2:8d:c4:c7:75:11:74:23:76:ca:7e:2a:f5:fc:52:ed:64:
e9:a9:b4:cc:46:5a:3d:5b:4d:6b:c7:42:d5:8b:c8:8f:fb:66:
05:29:b2:4c:aa:43:ca:74:87:c2:bf:b2:56:cf:d0:cb:aa:8e:
a7:b0:ae:0b:b3:13:88:fb:05:de:1d:b3:42:cf:e9:6d:ab:c3:
a2:fa:af:21:9e:62:d2:21:0a:1e:34:e5:62:af:97:78:4e:3f:
83:d9:a2:31:01:85:5c:b1:6d:a5:6d:dc:c3:65:7d:7c:d7:e5:
d3:bb:eb:72:3b:51:d2:b3:39:5e:5d:64:d2:2b:11:bc:37:1d:
28:a9:39:9e:0e:81:76:7d:14:a9:c2:cf:7a:49:12:2e:6c:ed:
69:9c:e9:ea:3d:e1:43:fa:46:4c:52:45:34:24:58:b5:55:ba:
8e:4f:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:30 2026 by rpki-client