Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: ocbJV5mldYPFQV7DUw1dmVU/VWvGx34SJE3xpXyIZ8w=
Subject key identifier: D5:88:ED:54:D0:90:0A:97:F0:52:D2:90:78:0E:CC:F4:35:DC:84:51
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019E1D5948A2548B6E660D823200198BEB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 191A
Signing time: Tue 12 May 2026 18:00:50 +0000
Manifest this update: Tue 12 May 2026 18:00:50 +0000
Manifest next update: Wed 13 May 2026 18:00:50 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: D1msLHlnA6AtxsqYiUwsQ1WKhzfC3q3A5FXIb4EW518=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:48:a2:54:8b:6e:66:0d:82:32:00:19:8b:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: May 12 18:00:50 2026 GMT
Not After : May 13 18:00:50 2026 GMT
Subject: CN=d588ed54d0900a97f052d290780eccf435dc8451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:8a:54:6d:b0:ed:9e:b1:16:ca:5c:6d:18:
d3:ff:bd:79:b0:e3:8e:21:0a:02:48:cf:e8:f2:96:
fe:66:74:19:bb:0d:72:0f:11:82:b1:01:06:d3:11:
9f:2d:33:1d:e4:57:52:e4:8e:0b:24:72:22:c5:22:
af:f1:57:74:fa:45:f1:a6:8b:2e:b3:6a:c8:2e:8a:
3f:8c:c3:ef:1f:64:d2:62:67:04:ec:fe:62:71:07:
5a:b8:e9:0b:b5:69:b2:8f:62:bb:19:df:f5:c0:1d:
57:a7:37:da:3c:25:54:3d:a1:c2:c4:e3:85:20:7e:
08:42:45:82:7a:10:d7:d1:ea:bb:3b:22:e0:98:6f:
2c:25:2f:20:44:e3:e5:35:62:64:93:16:46:4c:e0:
e8:e2:b6:f4:15:e0:a8:33:df:af:98:b0:f3:49:c2:
f1:fe:9a:f0:1f:b9:aa:4f:f3:bc:45:ff:f4:bb:c7:
63:79:54:a6:11:d5:c1:39:69:e3:09:0f:88:63:33:
3d:42:3c:22:29:69:cc:30:0e:df:7f:2a:2e:ad:55:
bc:6e:d4:b6:8a:23:53:88:83:ae:bd:ed:98:83:3f:
fa:5d:3e:0d:0c:e2:bf:7e:da:a2:a8:ae:65:ba:35:
17:86:cc:0a:fd:18:88:63:d0:ba:7f:92:c4:5a:66:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:ED:54:D0:90:0A:97:F0:52:D2:90:78:0E:CC:F4:35:DC:84:51
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:7a:b3:78:99:7e:d4:bc:eb:d0:a3:b2:c4:2a:1d:ec:43:
3e:f9:61:a0:17:02:1d:6b:56:60:5c:29:8d:b1:a0:a7:66:a6:
7a:2c:b0:45:41:75:bc:d4:3d:81:79:a0:b6:b9:94:e3:ee:c5:
37:e1:8f:24:c7:4f:bd:c3:6a:c7:54:e9:76:13:f6:fa:82:8d:
e7:7d:f8:b7:a3:26:97:44:8a:53:1c:95:f4:70:97:5f:e6:29:
15:1d:a5:aa:ca:63:32:a6:4b:96:4c:aa:08:47:02:03:20:37:
6b:45:4b:60:f4:0c:16:ad:3e:1a:9a:1a:f4:82:31:80:6d:5f:
61:4c:74:43:a2:38:68:c2:ec:10:e5:1b:70:fe:ca:6d:3a:eb:
fe:6a:f6:31:65:4d:08:ba:b4:f8:a9:9d:e2:9d:44:2a:9b:d3:
5a:e1:aa:eb:f9:af:a0:1c:a7:77:f7:11:78:f4:f3:43:fb:e0:
2a:43:99:5b:49:cf:f2:be:7a:63:e3:ae:b6:90:e3:05:66:b1:
c7:0d:60:05:29:d9:e1:6c:5b:55:51:9d:fd:65:a8:1a:f2:30:
c4:1a:9b:24:60:77:bc:3b:21:ba:e5:f6:cc:ff:b3:b7:16:da:
91:78:0a:71:92:36:e2:a8:e9:ff:46:b3:2b:eb:42:18:ea:6f:
3d:6c:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:25 2026 by rpki-client