Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: mFC5LxK1iSH/4A2gXDYiJCdntPii9H7PXQjWO0HAm40=
Subject key identifier: 4F:48:05:72:0A:E1:CF:44:FE:A7:A1:2B:46:48:AA:B0:48:D6:0E:A2
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 019E1D9056594FF63DF35150FA0F705747B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 17F0
Signing time: Tue 12 May 2026 19:00:58 +0000
Manifest this update: Tue 12 May 2026 19:00:58 +0000
Manifest next update: Wed 13 May 2026 19:00:58 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: XkJMhZlCib0FC3s1LpR/r7aNPk+N/0q1fO11T8pIEEc=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:56:59:4f:f6:3d:f3:51:50:fa:0f:70:57:47:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: May 12 19:00:58 2026 GMT
Not After : May 13 19:00:58 2026 GMT
Subject: CN=4f4805720ae1cf44fea7a12b4648aab048d60ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:1e:f2:db:f3:f7:24:cb:e5:a1:ba:d2:04:
a2:d6:cf:55:74:42:7e:1a:ce:a5:db:a3:0c:2b:02:
0a:2f:c8:a9:48:3f:57:df:81:e3:f0:d6:67:52:0d:
f1:7b:2a:44:dd:be:4b:35:4f:03:39:80:47:a0:c2:
cc:9c:b1:35:8b:6e:24:0d:66:01:e8:c3:ae:f6:3b:
8d:90:48:a9:3e:d3:34:74:66:60:cb:50:48:97:a5:
0a:2f:67:2c:07:b9:2a:49:da:c2:02:a6:2c:56:a9:
fe:0e:fd:41:33:e4:93:f7:7c:9a:f4:9f:73:a3:16:
1f:b6:1e:28:2c:6b:10:47:8e:cc:c5:c9:51:d7:07:
e4:2e:45:a4:84:f8:be:63:d2:da:1f:4c:fc:14:40:
c6:23:ae:e0:2c:0f:27:e3:7a:8b:f0:0b:d2:cc:89:
bf:8d:fe:a4:db:ca:96:a8:43:56:7a:c6:73:49:5d:
0b:a1:71:34:b6:ec:69:2e:94:c5:84:86:fb:61:e3:
b9:07:91:68:e5:ae:cc:04:68:93:da:ca:cd:8d:df:
4e:99:3b:53:63:d5:e0:7d:7d:5c:1c:6c:69:df:e1:
55:da:8e:9c:e5:a8:85:6c:8a:b6:45:7c:d0:7e:a3:
91:b3:2a:2c:4b:f7:70:77:ea:2e:03:b6:37:cc:cc:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:05:72:0A:E1:CF:44:FE:A7:A1:2B:46:48:AA:B0:48:D6:0E:A2
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6e:da:23:cd:66:15:68:e3:65:77:8b:61:7a:8e:b5:60:01:
d2:c1:67:20:1a:5e:e2:ce:7d:7a:56:e7:4b:35:aa:86:d1:7a:
b5:20:7c:f4:e4:22:ea:b5:d2:83:dc:97:7c:9c:df:f2:fb:1d:
5e:34:54:e0:af:52:d0:13:62:f0:73:6b:f1:53:f5:af:10:68:
97:15:91:31:a5:36:65:aa:a3:56:e2:97:5d:a7:9a:60:99:ed:
a2:13:71:89:c2:63:84:59:9a:7f:c9:5e:00:26:b8:93:e0:48:
97:02:64:06:4c:f4:8c:51:50:e3:3c:0a:7a:a9:d2:19:5a:7a:
67:d4:2c:1d:3f:e0:5e:8b:f8:62:86:e1:98:49:8a:cd:72:57:
63:d6:c0:fe:59:be:74:bf:3e:c3:80:db:95:75:94:83:ea:92:
0d:49:15:61:80:68:77:85:28:ba:12:d0:bf:26:71:89:ec:83:
ae:b9:57:d1:e4:bf:b5:c1:f4:f8:59:57:35:03:85:d7:83:4f:
2f:31:f8:1a:07:26:8b:10:d4:46:86:d3:81:d2:a4:46:00:ef:
b9:5e:ac:fb:60:85:5b:a1:b6:d8:6a:e7:19:26:2c:2d:8f:c1:
f6:df:47:3f:d3:3a:15:0f:6d:f6:62:8d:bb:d1:76:68:04:8c:
4b:37:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:33 2026 by rpki-client