Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: 8tQqSHR3mbG8FLRlJHGQaN5s5CUU8JCMCnS20zc/us8=
Subject key identifier: DD:91:9E:DC:FA:62:5A:6E:98:A5:63:41:EA:D2:11:E5:5B:9D:C5:B3
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019E1CB5A1E6F8B422737FDC8DEA19CE38EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 155D
Signing time: Tue 12 May 2026 15:02:05 +0000
Manifest this update: Tue 12 May 2026 15:02:05 +0000
Manifest next update: Wed 13 May 2026 15:02:05 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: 37JxocHhnLykCT36/mJutFENjZ4Kf5kKNpZAsoiUsVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:a1:e6:f8:b4:22:73:7f:dc:8d:ea:19:ce:38:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: May 12 15:02:05 2026 GMT
Not After : May 13 15:02:05 2026 GMT
Subject: CN=dd919edcfa625a6e98a56341ead211e55b9dc5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:bd:05:73:89:00:e0:a3:e9:04:f5:95:57:
03:8e:23:97:86:8e:0b:d6:13:90:6e:c7:03:15:ec:
e2:57:94:ec:41:c5:b1:23:e5:6a:be:24:af:ce:14:
7a:05:14:b6:0c:e1:d6:1a:fc:67:65:c7:b6:18:ce:
2f:c8:b5:cf:ef:2d:4b:e1:76:cb:7c:b3:d4:db:86:
c8:28:b3:d4:a5:c7:65:74:2b:ef:9b:0c:da:d9:59:
6a:d5:da:9d:42:40:7a:db:e1:ca:6b:73:13:21:77:
cb:7b:e6:db:c6:3a:96:d0:a0:95:f2:d9:a8:2e:05:
80:05:e5:8e:48:92:8e:6c:b3:95:1d:b9:52:a8:78:
39:0d:ff:d6:a1:dd:06:7f:72:86:ca:25:53:19:8a:
71:2a:ad:f6:ad:59:02:a0:f6:05:9d:59:37:18:66:
b1:03:25:88:1d:ba:de:cf:38:be:42:a8:55:c2:63:
24:d6:7f:05:97:ef:ce:1f:76:7d:f4:45:cd:80:7d:
9f:25:1b:f7:2e:09:8f:83:ec:04:25:48:62:b9:31:
4d:0d:bc:e1:f2:6a:0f:9e:86:6a:9f:6f:18:e4:91:
e2:55:d3:5a:57:73:21:d8:22:95:a5:3d:22:58:e2:
48:88:72:71:8d:20:4f:30:01:18:b3:cc:33:b3:af:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:9E:DC:FA:62:5A:6E:98:A5:63:41:EA:D2:11:E5:5B:9D:C5:B3
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:90:bf:1d:b1:14:70:6c:c3:1e:db:e3:07:f7:04:fe:2c:
38:a3:f9:2c:c9:15:72:d0:87:fc:82:0c:21:c7:2a:d2:d3:52:
64:16:94:c9:27:4e:04:e0:0a:7a:3b:bc:9c:b7:55:fe:ae:8d:
28:7d:4d:7a:26:38:5e:49:01:e3:07:12:e3:b9:10:11:4e:a1:
52:a1:e0:3e:16:3b:6e:45:96:e1:2c:ef:ac:92:b2:ce:83:f3:
ec:32:0e:7e:ea:64:61:e9:a5:c0:e6:58:25:92:4b:ba:9c:f2:
09:04:55:75:68:24:a0:9b:1d:34:fc:f5:86:80:b1:21:bd:ae:
c3:8f:bb:13:46:ca:31:64:cc:d3:ca:30:1e:0b:0b:0d:4b:3a:
ca:35:2f:8a:47:b2:8e:17:62:64:59:96:2d:41:bd:54:48:20:
39:ce:91:8d:84:7c:b1:2d:c7:4d:22:92:cb:f3:e5:95:38:a0:
42:27:f5:78:2c:08:b9:85:b2:c6:e4:7f:1b:54:5c:1e:ba:2c:
a1:f4:e3:1e:91:98:a3:23:54:3f:2e:b7:35:7c:dc:8a:d5:4d:
29:af:3a:e7:62:15:7e:39:a6:0d:eb:e0:48:8d:4c:63:75:9c:
e4:6e:79:ab:5f:bb:ea:c8:52:48:5f:23:74:7b:af:4b:33:03:
c2:51:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:20 2026 by rpki-client