
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: nlRK2OVRsXpRvL7z0euuhobato8pgiXsbX54LjufvLA=
Subject key identifier: 6F:39:87:BC:90:6A:58:B2:91:5C:D9:E2:CA:3D:5F:18:AC:97:EC:10
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019E1CB4606D9417A1163819006E07B08347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:00:43 +0000
Manifest this update: Tue 12 May 2026 15:00:43 +0000
Manifest next update: Wed 13 May 2026 15:00:43 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: Sb+VPg5c7tdX33rCU+FWdP7NZEDnE0H+ChXQlyCJWIA=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:60:6d:94:17:a1:16:38:19:00:6e:07:b0:83:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: May 12 15:00:43 2026 GMT
Not After : May 13 15:00:43 2026 GMT
Subject: CN=6f3987bc906a58b2915cd9e2ca3d5f18ac97ec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:81:97:a3:2b:8c:d1:cc:8f:a0:00:fb:d9:
1f:d0:e2:a2:d6:de:b6:1b:1e:56:99:4b:7f:69:fa:
09:a2:d8:2b:6a:88:7c:31:66:e0:cb:1b:e8:dc:32:
6c:78:19:6a:f5:81:1d:7c:69:4a:ba:b2:eb:df:6d:
1a:29:a7:dd:3f:56:f3:c9:1d:ca:7c:d3:14:65:06:
7f:f1:01:2d:c4:fa:9d:43:62:d7:49:8c:03:43:b0:
71:25:54:a2:2a:93:a9:e7:a7:62:dc:e7:ff:cf:dd:
62:3d:fc:ee:7b:74:ad:26:6b:15:30:c9:81:a9:32:
d0:06:0c:aa:16:f4:9f:25:4b:79:5c:1d:b5:f4:d4:
6d:67:d2:56:3e:03:f9:5f:1d:1c:e1:f6:d0:39:af:
11:36:9f:3b:5b:0b:d9:d8:d1:63:48:bb:61:1d:87:
fa:ed:04:4a:d8:38:ac:39:b4:4d:ba:c6:67:9f:ca:
d9:3a:1e:aa:cc:a3:ca:ae:cb:c0:f4:94:5a:2a:6a:
d5:3e:88:6a:10:a1:88:d4:cc:25:2e:64:26:60:7c:
20:ae:b9:95:85:ba:3f:1f:ef:0d:0d:59:cf:3b:d1:
7e:4a:f0:e4:e5:d7:47:f6:c8:81:70:b9:c1:f3:ad:
ad:93:df:e3:57:aa:c3:8a:f3:0a:43:50:85:18:10:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:87:BC:90:6A:58:B2:91:5C:D9:E2:CA:3D:5F:18:AC:97:EC:10
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:85:ad:cb:b7:8d:0d:cc:a4:7d:4c:42:42:59:3f:73:9a:77:
92:97:4b:53:e5:a6:e9:5f:09:86:22:85:49:23:fa:9a:59:96:
7b:54:9f:d3:b0:50:6c:2a:2e:f2:6f:a3:a3:37:97:02:11:1c:
7f:70:4f:3d:ca:05:8e:b9:bc:96:cc:f4:dc:90:8c:f9:2a:7f:
3d:d5:5d:b0:83:dd:fa:db:80:f3:1b:63:99:84:65:8a:39:e8:
0e:17:20:9b:77:fc:98:56:84:a1:e1:dc:c4:dd:b4:a9:e5:5d:
8c:e9:27:b2:d1:cc:39:4b:5b:0f:56:e0:52:ea:f9:f4:d4:26:
96:ab:f9:e7:e8:18:1b:ba:d4:66:b2:f7:2d:9e:40:94:97:58:
95:7c:b0:7a:2a:fc:03:af:98:fe:78:6e:91:48:d7:42:e1:0e:
c2:33:5e:ad:e1:e9:59:9b:e0:c5:2a:96:d3:bf:dc:c1:c1:d1:
6f:3e:b9:04:f3:bd:bb:de:e3:28:65:79:5f:2a:36:ae:30:15:
ee:a0:4e:7f:d6:57:48:e5:79:c1:0c:52:e9:59:dd:e4:7f:bc:
38:88:6f:66:26:b9:8c:85:72:fa:98:84:88:f1:d5:ff:c4:b7:
4e:18:69:27:70:d0:3e:e9:a2:34:c1:f6:ad:f7:09:53:76:b2:
07:06:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:47 2026 by rpki-client