Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
File: 2IS_vbMjVA5ckMAJ495sA9a_zNM.mft (raw, json)
Hash identifier: MHvuLQQbuT9xEYNGcN/EASgnNbB+XnU3S+fBCH9UIJA=
Subject key identifier: EC:B6:F9:5B:83:5C:ED:60:71:9E:05:36:00:A6:38:C3:34:FF:34:FF
Authority key identifier: D8:84:BF:BD:B3:23:54:0E:5C:90:C0:09:E3:DE:6C:03:D6:BF:CC:D3
Certificate issuer: /CN=d884bfbdb323540e5c90c009e3de6c03d6bfccd3
Certificate serial: 019E1D225995C19737F5123211E301061D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
Manifest number: 24
Signing time: Tue 12 May 2026 17:00:50 +0000
Manifest this update: Tue 12 May 2026 17:00:50 +0000
Manifest next update: Wed 13 May 2026 17:00:50 +0000
Files and hashes: 1: 2IS_vbMjVA5ckMAJ495sA9a_zNM.crl (hash: qhaUU6ry3O6DhmOluV5FpGIWTwOWFRcdm8XFJXIsqjc=)
2: 4Qc-yn1UzAkfErKkrOplIM1TXXc.roa (hash: c+WtB+oW1ahwXZOb81bw0sgcuUJbYdw60b7M9e0cWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:59:95:c1:97:37:f5:12:32:11:e3:01:06:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d884bfbdb323540e5c90c009e3de6c03d6bfccd3
Validity
Not Before: May 12 17:00:50 2026 GMT
Not After : May 13 17:00:50 2026 GMT
Subject: CN=ecb6f95b835ced60719e053600a638c334ff34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:30:2f:c4:99:ad:0d:f8:c9:42:fc:49:42:
a1:67:cf:92:a7:91:ad:bf:bb:d6:5c:18:83:3f:41:
b7:45:41:2c:fc:a3:ff:e6:b4:db:aa:b5:2f:6f:eb:
82:12:55:39:db:45:2e:a7:77:53:cc:c4:1a:e6:f0:
96:cf:44:02:83:6b:56:02:0d:53:e9:0a:78:59:84:
03:35:1a:d4:12:62:2f:c1:fa:7a:49:d6:c6:3c:c4:
85:61:0e:7d:1c:b4:10:aa:9a:70:6e:61:16:b3:12:
44:fa:67:a3:1f:e8:48:53:38:ee:12:43:e9:36:e2:
b1:e6:d9:68:6f:9a:2b:c5:05:d5:a0:c4:66:0b:2f:
be:23:eb:c9:c8:c4:6a:69:18:34:cb:ac:fd:68:1d:
83:d3:74:1f:8d:c8:c8:b4:f2:16:fe:a5:b6:da:ed:
d4:6c:99:93:73:00:e7:d0:b4:4b:51:3a:4c:83:4b:
3e:77:94:dd:d9:f9:26:9c:c5:27:b9:ba:09:55:83:
ab:6a:a7:38:88:c5:9c:83:90:4d:e5:c8:f0:2f:e9:
41:82:ed:2e:81:dd:49:7a:43:56:72:bc:20:81:a3:
48:17:5d:de:80:11:5f:b6:ce:94:dd:7f:44:9e:5c:
57:3a:ac:42:6d:89:e0:34:41:02:46:5a:72:5e:aa:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:F9:5B:83:5C:ED:60:71:9E:05:36:00:A6:38:C3:34:FF:34:FF
X509v3 Authority Key Identifier:
keyid:D8:84:BF:BD:B3:23:54:0E:5C:90:C0:09:E3:DE:6C:03:D6:BF:CC:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IS_vbMjVA5ckMAJ495sA9a_zNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6ef698-fb54-4611-be82-d49a2ad6f222/1/2IS_vbMjVA5ckMAJ495sA9a_zNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:44:4d:a6:2c:24:0c:59:ab:9b:b4:0f:ca:04:79:3f:eb:
33:6d:39:bc:c3:10:ed:b7:4d:da:da:e7:17:f1:ae:6f:c1:3d:
1e:d4:9f:00:68:a7:16:26:28:59:c6:19:77:65:e7:08:31:45:
76:d9:7c:b3:00:82:68:e2:00:df:58:50:3b:7e:63:14:cd:5e:
00:46:0c:e5:63:f4:89:41:e8:72:48:12:61:29:1a:3d:54:d8:
4d:a3:d2:8f:5f:b7:96:5f:53:e7:8f:85:ad:8f:2a:42:79:56:
9b:7d:e0:1b:21:3a:a6:5b:b7:6c:4b:d2:f7:a3:c6:5f:c8:6b:
9e:cc:28:0e:ad:e2:ef:d5:8d:ea:7a:a0:5f:be:ab:69:75:ce:
90:7a:59:4b:af:c2:ef:d2:ec:52:25:cd:eb:ae:6d:fe:7c:7f:
e8:dc:ae:28:cd:b7:57:28:fb:da:9a:30:0c:3f:5a:f5:a6:c0:
36:72:16:a0:d2:f3:e9:0b:58:df:cf:04:88:58:19:38:80:74:
e1:a9:48:25:ee:7b:18:48:4b:f3:58:9d:fa:70:c1:cf:8f:d7:
f1:09:78:4b:99:9c:4b:f6:24:df:1d:14:18:bb:0d:e6:52:98:
1e:0f:bd:6c:91:68:fa:a0:29:c6:3c:79:f9:42:32:06:c5:e9:
c3:f0:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:13 2026 by rpki-client