Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: VlgRSORzYNnFZ9lBkXZVjGzsueNTNPPHxk/Cziht+M8=
Subject key identifier: B1:C6:34:CE:C3:E7:AF:C7:8B:5F:98:D7:10:04:79:1C:93:D6:20:3C
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 019E1ED9E7F3FB73D6D1448B5119249788EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 0745
Signing time: Wed 13 May 2026 01:00:57 +0000
Manifest this update: Wed 13 May 2026 01:00:57 +0000
Manifest next update: Thu 14 May 2026 01:00:57 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: 3kCX1nect3/sw25vpE71I7ZYjHw3YsZXTvI3QNXANjg=)
2: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (hash: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:e7:f3:fb:73:d6:d1:44:8b:51:19:24:97:88:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: May 13 01:00:57 2026 GMT
Not After : May 14 01:00:57 2026 GMT
Subject: CN=b1c634cec3e7afc78b5f98d71004791c93d6203c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:6c:a3:95:82:cb:68:a9:a2:1d:be:6c:06:
fb:a9:fc:41:04:11:3d:67:34:bd:b0:ef:7b:d1:39:
07:4b:25:81:1a:82:c1:6d:19:47:d4:4f:d7:72:ff:
e0:88:e5:06:f5:4d:3b:e9:3c:d4:44:18:e3:ec:12:
41:01:c4:d7:37:f3:91:48:19:b1:4d:89:f8:62:24:
82:55:8b:8f:d3:7f:13:f5:cb:af:72:5e:05:38:3d:
e5:96:a7:92:02:54:54:0b:4e:2c:8b:71:a8:c7:1c:
31:49:dc:44:e2:ec:df:29:0e:f2:22:9c:b5:29:42:
3b:80:0c:76:2e:1b:37:f7:61:67:a9:52:16:21:0d:
a2:b4:d9:12:36:9f:7a:7b:88:8d:5d:29:14:f7:0a:
42:6e:b4:04:b7:67:1b:d9:21:68:f6:a2:1b:a3:83:
8d:e8:d9:9b:38:c8:9e:1d:92:36:b6:2b:b0:ae:68:
55:25:1f:5b:a7:07:36:78:9a:d7:a8:b7:c8:1b:62:
8d:8a:62:25:c1:87:cd:ef:49:02:7b:f8:4c:13:75:
76:da:11:db:71:4c:b0:47:13:cf:fc:03:87:b8:89:
9b:7b:a9:c0:5b:42:74:c9:89:cd:60:af:92:1e:fc:
74:b6:9a:2a:60:db:ae:99:8e:ae:e6:b3:32:ab:1c:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:34:CE:C3:E7:AF:C7:8B:5F:98:D7:10:04:79:1C:93:D6:20:3C
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:36:74:ae:f4:88:7e:19:8e:60:c5:fe:cd:c3:3b:a1:18:
0c:0e:d5:66:6f:59:a0:dc:6e:1f:12:c0:ac:28:d7:1d:50:1b:
d8:be:8a:55:42:3e:5c:1f:09:e1:70:47:52:3a:41:f3:88:0e:
c7:62:f3:dd:3b:14:21:c3:93:3c:a5:1b:07:04:da:98:fd:15:
96:0a:b0:5d:d3:d3:c7:19:1d:5a:d9:c4:c3:48:d9:ac:b9:24:
fd:31:06:d3:23:55:56:81:b1:ba:28:82:14:92:6d:9f:82:04:
dd:97:7a:60:85:f6:47:45:5b:e1:3d:64:f7:72:f0:f0:e8:95:
9e:8d:cf:c0:f3:fc:44:fb:7f:0b:ae:bb:b4:b5:10:61:47:a1:
1e:07:cd:f4:2e:c1:90:04:ee:0e:45:41:14:a6:ce:bd:06:78:
c5:71:90:36:ff:35:1f:97:87:35:36:38:14:5e:83:99:d1:1d:
61:15:7a:52:64:21:e2:44:f3:ec:f1:12:e3:52:12:ff:de:3b:
5b:95:96:bb:f7:65:b5:83:4f:29:29:8f:ae:ac:95:a3:4e:02:
97:8d:5c:2c:b9:7f:05:18:7c:23:46:7e:53:85:67:12:6e:8e:
4b:64:11:6c:5d:68:79:58:73:35:dd:68:e0:1e:a8:72:0f:02:
b6:f5:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:52 2026 by rpki-client