Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: ZMZPavtaGUeOpbLMJRkrTEO2GCANBnMMRji7DCdU65o=
Subject key identifier: 44:B7:D0:A6:4C:9E:3A:91:0A:49:63:1E:E3:62:A0:9F:83:20:34:1D
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 019E1D22C3292E334158A56A82DFA44BEF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 17:01:17 +0000
Manifest this update: Tue 12 May 2026 17:01:17 +0000
Manifest next update: Wed 13 May 2026 17:01:17 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: 7zW+OaVsgtNCCrMvq1PaYjwr07AzhbLbGuWbkFOJXd4=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c3:29:2e:33:41:58:a5:6a:82:df:a4:4b:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: May 12 17:01:17 2026 GMT
Not After : May 13 17:01:17 2026 GMT
Subject: CN=44b7d0a64c9e3a910a49631ee362a09f8320341d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:5a:05:37:29:85:2b:38:a4:47:ba:84:23:
86:47:8d:67:80:b4:85:65:71:d1:8e:14:7a:e2:29:
62:ee:f8:1a:92:56:2d:94:fe:ca:4d:cc:f5:1e:dd:
97:8e:4c:1c:44:c9:3b:b1:2b:02:d7:ec:8d:cc:2a:
59:06:37:3f:34:01:0a:97:f4:76:4a:5c:43:81:ed:
33:bf:5c:4a:36:e9:be:99:d7:10:d3:74:9e:2f:3e:
cd:a9:f6:ce:a2:42:54:9a:ce:5f:1d:9a:d7:7b:21:
44:49:39:b2:93:df:1b:87:c6:4c:d0:4a:c4:41:6a:
c3:8c:0f:3c:3e:bb:e1:08:23:32:bc:34:51:22:77:
fc:98:ea:4a:cd:f1:a7:ab:cf:68:bf:06:1c:06:8b:
db:d3:2c:fb:0e:2f:f8:18:95:e0:7f:88:13:f9:9f:
0f:70:b5:20:61:c5:b5:4b:9a:64:32:fd:aa:9e:7a:
51:1b:76:2e:89:9f:60:ec:0b:4d:fa:ad:01:5c:a7:
12:50:12:9d:db:df:a8:49:4c:48:5e:8d:75:5a:67:
4c:c1:4b:92:b1:6f:31:26:a2:59:d3:14:ea:fe:27:
88:53:be:51:30:92:b8:d1:9a:0b:c8:6b:58:06:b5:
1b:49:12:1b:fa:41:90:8b:2f:da:1e:8d:a2:1f:b6:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B7:D0:A6:4C:9E:3A:91:0A:49:63:1E:E3:62:A0:9F:83:20:34:1D
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:9c:c0:e9:be:0d:dd:e6:37:c5:ae:e3:61:ff:61:ba:55:
5b:7d:2f:58:23:24:d2:02:cc:4d:d4:ac:72:0d:a8:73:11:f8:
5e:0f:a4:fb:52:2e:98:7c:83:75:a2:37:c3:30:52:3f:c4:01:
d2:3e:f3:41:9b:9f:57:e7:f0:5b:c0:9c:c4:d6:d5:c2:65:f7:
a0:d3:36:b5:de:98:8a:c6:81:4f:f3:9e:f3:c4:0d:e2:eb:12:
18:91:f4:13:b2:8f:2f:10:4a:06:cd:4b:f4:f2:8e:64:30:cf:
d4:89:5f:23:00:29:13:66:c4:7c:4f:1f:83:92:52:51:09:a0:
59:00:ff:9b:0f:29:62:e2:84:b6:13:ec:ac:b5:77:ee:f0:89:
31:16:e2:ab:07:0a:e2:dc:c1:f9:c6:b2:32:73:84:fa:25:81:
bc:4f:b0:43:e2:a9:ce:9c:fb:98:cd:6b:97:23:3b:79:51:36:
46:aa:e1:dc:b7:32:1c:f7:7e:91:c1:d2:62:ed:f4:f8:7c:26:
75:a4:d7:81:37:c7:9c:5d:5c:99:4b:b4:a0:d9:a6:0e:12:5e:
6d:51:9d:42:0b:5a:83:14:ca:6c:dc:d6:ec:f0:e3:bc:28:44:
09:fa:56:ff:d5:1d:8a:dc:b2:ef:fd:81:e5:1b:db:35:15:b5:
a0:e4:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:03 2026 by rpki-client