Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: HDF8yLOaPr4IpBx3/mhPNM8kUEwLtupmwVa2Ho6C7pM=
Subject key identifier: 60:4E:B7:0E:56:F0:56:C7:9A:43:49:B9:D1:4F:38:FB:01:18:44:7D
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019E1E3567250D828DED0146AECE85073EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 22:01:16 +0000
Manifest this update: Tue 12 May 2026 22:01:16 +0000
Manifest next update: Wed 13 May 2026 22:01:16 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: 4nEvyifYWldCBmBgNIroNtq4V/xI4bMKL6LU0dPwwLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:67:25:0d:82:8d:ed:01:46:ae:ce:85:07:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: May 12 22:01:16 2026 GMT
Not After : May 13 22:01:16 2026 GMT
Subject: CN=604eb70e56f056c79a4349b9d14f38fb0118447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:ae:80:1c:27:17:38:d0:f8:03:4b:cf:86:
79:28:34:b6:36:4d:96:ea:24:cc:c7:6b:a5:fb:44:
11:30:90:63:6d:57:30:34:72:21:04:14:99:9c:91:
39:8b:a7:cc:7d:36:d7:b1:8c:2d:bd:8e:71:08:fa:
c2:ef:d3:f5:5c:1a:75:d1:2c:94:54:ca:25:29:f3:
98:7e:a1:a2:6e:f0:8c:a8:fc:46:27:30:3a:b7:4f:
bf:46:1e:84:08:83:73:89:b1:92:d4:29:d4:27:74:
bd:b5:ff:3a:f9:a0:16:47:ea:63:01:ef:84:8c:e3:
3a:60:cf:e6:43:e0:4a:fd:ff:12:9b:71:85:5c:2c:
96:cd:ff:55:40:d2:68:5c:fd:b7:3c:6d:74:6c:8f:
9a:3f:c1:00:f8:57:8d:15:95:fe:e6:6a:98:84:48:
34:5f:f3:ba:1c:6e:3d:89:9e:84:d1:85:a5:a2:8f:
09:d5:57:be:b1:9f:6c:6f:b9:e4:cb:f5:62:46:51:
21:22:20:d3:a7:c0:0f:fd:e9:78:c1:89:de:c7:c3:
61:82:f5:0b:4c:1b:69:8e:1b:88:77:58:66:76:fe:
53:41:30:e5:9b:c3:f8:7e:b2:9c:f4:be:15:fc:d5:
c9:23:dd:a9:0a:f3:c9:8d:fe:9a:a5:fa:3d:4c:b6:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:B7:0E:56:F0:56:C7:9A:43:49:B9:D1:4F:38:FB:01:18:44:7D
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:57:d6:4d:bf:5f:f6:70:d0:71:8b:01:0a:da:fe:9d:55:
76:bc:46:23:fe:26:c7:7d:d8:e0:2c:57:e5:12:37:e9:66:de:
38:d5:22:a3:45:b8:ed:83:b8:60:49:31:7d:6a:58:6b:8c:3b:
1d:96:e9:fc:66:b8:b2:8c:58:bb:34:39:4d:e5:d8:f6:1b:7c:
16:04:be:1d:12:d2:6c:82:fb:02:49:9d:d8:ab:52:9c:49:20:
f6:35:75:9a:3b:30:d3:b7:95:23:4a:d9:67:44:e9:1e:8b:fb:
78:0e:6d:07:99:35:20:66:bc:eb:53:63:1d:48:59:64:bf:ed:
d4:05:de:3d:55:af:8b:ab:f7:36:c0:10:9a:47:00:98:5a:9d:
13:24:26:18:59:3b:50:3a:1c:a9:e5:3a:02:73:5c:20:55:e8:
d2:15:a6:c3:6c:26:e7:22:72:26:64:a6:cc:9a:ec:14:0d:d7:
2c:c2:5b:73:42:5c:40:0c:3f:cf:69:84:a1:24:01:ac:e0:54:
65:3d:5b:ba:27:b6:36:ca:36:e8:3d:d7:cf:d4:fc:10:0b:b7:
79:d5:57:32:72:1e:bf:80:0b:3f:31:dd:2d:64:ad:a8:09:cb:
af:a6:be:dc:ca:7d:27:53:14:4e:d3:65:36:8c:fe:2f:e3:cd:
0d:8c:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:36 2026 by rpki-client