Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: jupT3XFnGGTDdglFod57EcZ4TtItijg3ZbA0yH0wlks=
Subject key identifier: BA:A4:F1:40:F0:93:87:54:95:B6:31:EB:77:D4:BF:E6:46:2E:D6:AF
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019E1D5995469473556C8D05CA7B27850679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:01:10 +0000
Manifest this update: Tue 12 May 2026 18:01:10 +0000
Manifest next update: Wed 13 May 2026 18:01:10 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: 4N2vPN+qAh/uZERPlc9WuN/ndR0biOb6Ujkf9JM3aXY=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:95:46:94:73:55:6c:8d:05:ca:7b:27:85:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: May 12 18:01:10 2026 GMT
Not After : May 13 18:01:10 2026 GMT
Subject: CN=baa4f140f093875495b631eb77d4bfe6462ed6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:a6:0c:a3:36:2a:79:34:0e:68:0f:10:84:
8b:82:5e:35:0a:8f:cf:75:34:ab:af:5f:dc:10:0b:
1b:da:a5:fa:1b:9a:95:4f:62:a8:3f:77:8c:1d:7a:
ca:38:69:d2:bd:78:3c:5f:17:9e:71:78:c2:3f:17:
44:91:8d:e3:25:dd:ca:85:b9:8d:71:a1:12:df:b8:
5a:e0:00:84:6f:4c:ae:c0:af:7f:8d:a8:6c:66:3e:
7c:df:ea:79:30:e7:9c:41:a6:b6:b2:e3:d6:8c:f4:
b8:a4:00:5e:b4:18:54:30:af:20:da:fd:59:06:1b:
7f:9b:bd:a7:3d:0c:24:1e:5e:26:d6:c7:5a:a0:23:
5c:12:bb:14:3e:c7:8a:7e:63:ed:e7:8c:ab:01:51:
91:a3:7e:ca:83:3c:6a:12:ac:e7:ab:fd:fe:84:3a:
b5:08:05:0a:9f:a8:bd:a3:bd:bb:e0:ca:40:76:7e:
03:98:1b:84:50:dc:6d:48:f4:18:16:b8:76:72:18:
63:d4:3d:d3:d4:1e:40:96:eb:00:d0:f8:5d:3b:4b:
a8:0e:a6:81:77:86:77:df:61:1f:ff:0c:fe:6a:e4:
4d:34:b1:18:9a:da:d6:ef:ca:16:7c:e9:c6:3e:26:
c5:84:8a:7f:30:d2:07:76:d6:92:2f:91:17:15:e0:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:F1:40:F0:93:87:54:95:B6:31:EB:77:D4:BF:E6:46:2E:D6:AF
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:67:0f:fc:4d:f4:5c:e9:fd:ab:43:51:54:e9:c6:63:8a:c7:
97:58:91:11:1a:0f:f1:d6:3c:30:b3:8e:30:3b:68:31:a4:a5:
74:0e:c2:55:d5:7c:81:c6:80:44:e2:07:7d:a7:b1:49:31:53:
80:13:33:bf:38:bc:77:f7:4f:88:e7:6b:2e:2e:6f:93:f2:fe:
ed:65:b6:ef:c4:1d:9d:3a:64:cb:dd:5b:f6:41:0f:4e:6c:c2:
64:69:0f:c4:99:5c:90:62:22:a4:aa:88:89:3a:bd:47:58:4c:
cb:f4:ea:e7:28:cf:dd:b7:f0:50:a4:76:4b:1e:fd:6e:f6:90:
41:ff:e6:6a:59:70:fe:f2:20:13:19:bb:7e:cb:cf:cd:01:74:
8f:8c:53:78:a7:d1:f0:b5:c8:22:f7:4a:ce:88:63:9a:c4:2b:
d6:83:27:0d:88:4f:d0:36:2b:7d:ce:41:eb:a3:b4:9a:89:68:
90:44:f2:33:91:92:a2:31:b6:91:9a:03:b7:8c:e5:13:02:46:
86:39:13:3c:a7:ba:da:a3:a3:9e:1b:e8:14:9d:b9:5f:36:ef:
82:6a:c1:79:ea:8c:a4:9a:7f:c8:08:4e:c7:f9:0c:77:a1:53:
7f:ab:aa:dc:1c:de:bb:78:8f:a8:e9:ed:5a:e0:5a:84:86:42:
3d:f0:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:07 2026 by rpki-client