Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: TyZQ8qnKbu/Lv6QvUYMRQtxV5lRE7haE7olWeYGJyXs=
Subject key identifier: E8:D0:53:C1:36:42:80:A7:6F:9E:A1:36:6B:4B:25:71:A4:B3:9C:3F
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 019E1CEC03930C746FCD7ABBDF056B7E6CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 1895
Signing time: Tue 12 May 2026 16:01:29 +0000
Manifest this update: Tue 12 May 2026 16:01:29 +0000
Manifest next update: Wed 13 May 2026 16:01:29 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: lENII/2OxkNtzMPzglWPbIz49nuMm/dOiAW1y1q1moc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:03:93:0c:74:6f:cd:7a:bb:df:05:6b:7e:6c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: May 12 16:01:29 2026 GMT
Not After : May 13 16:01:29 2026 GMT
Subject: CN=e8d053c1364280a76f9ea1366b4b2571a4b39c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:75:fb:1e:e8:ff:15:77:b7:80:c3:1e:ad:
dc:12:3f:07:48:7c:0a:4b:5d:22:9b:23:33:25:b7:
5d:7b:98:e4:0f:b8:28:6b:1f:bd:dd:ce:98:e5:f4:
cb:5c:e0:cc:ec:f3:39:5f:c8:4e:9e:a0:f7:be:cd:
2d:0b:92:6f:1c:a8:91:c5:ba:18:ef:f0:48:5d:0a:
79:d4:cf:28:ea:c1:01:2d:8f:c7:97:13:83:e6:f7:
30:26:4e:50:ea:a5:a0:48:56:71:81:f0:6e:35:38:
ba:58:d0:80:07:0d:87:e2:93:22:f9:93:f8:b9:44:
4f:9c:d2:cf:dc:09:3a:fc:6c:d6:4e:e6:99:7e:bc:
a0:e0:be:71:e6:e3:d9:a3:d8:24:cd:d0:8a:1d:15:
95:d0:f6:c3:90:c8:9c:4d:a2:ee:df:65:b5:25:9e:
df:72:e7:66:ba:ad:d6:61:b1:b7:c0:87:1d:82:ec:
a2:15:c3:37:64:c5:d6:64:b1:ca:51:8b:2f:58:1f:
2a:9f:cf:2c:ba:bb:36:2b:70:73:f3:b9:7f:92:1a:
18:d7:f5:ac:82:cd:74:3d:56:d6:35:1d:17:a5:95:
3f:a2:65:5c:0c:26:92:9b:4f:2d:5e:14:a9:ed:36:
32:52:76:f6:dc:cf:cb:83:2d:fc:84:ec:00:68:99:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:53:C1:36:42:80:A7:6F:9E:A1:36:6B:4B:25:71:A4:B3:9C:3F
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:97:1f:f8:d4:4d:ee:9f:14:b9:9c:fd:17:13:2d:a9:7e:
67:c2:78:d5:61:b9:e6:dd:f7:16:f5:4f:92:47:d5:7a:95:65:
c8:00:33:cd:0d:75:fa:e3:53:47:be:6b:ec:c3:d4:1b:5b:61:
de:49:b3:e0:f6:75:b6:f6:28:30:99:cb:e3:de:e5:df:ca:58:
5d:6e:0c:5e:00:1e:50:e8:ae:e1:33:82:16:e5:b1:00:e5:34:
50:08:30:73:cd:72:7c:ee:ba:a5:6e:4c:e4:c8:17:49:b4:c8:
18:8c:0a:8c:e4:ac:b8:3c:f2:63:dc:94:fd:f2:70:6f:30:83:
62:8d:08:da:46:20:44:e7:0f:a3:f0:18:14:9d:67:1f:0c:bc:
ec:eb:c4:a5:aa:02:ba:e8:4d:45:6a:8b:d7:77:81:86:af:72:
98:52:f4:73:cd:67:1b:2f:44:50:20:34:9c:27:b5:4c:4b:3c:
ca:55:b2:cb:6c:34:39:64:9d:dd:1a:e3:43:4f:e3:b9:06:87:
53:35:78:6f:1f:b5:3c:0a:28:51:1e:e5:8e:dc:18:7e:ec:e9:
0e:b4:6f:64:cd:92:44:02:33:f4:49:ab:3b:a5:6b:a8:b9:c8:
8b:ff:ab:13:ac:3c:39:fe:47:48:5f:dc:7c:bc:2e:09:8f:c1:
ed:e1:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:46:27 2026 by rpki-client