Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: 73G2UHgkgh4rIt1ApD0LRcfAaTuO5hPcbFU+NfzQRqE=
Subject key identifier: 37:AB:DA:34:12:D2:51:87:09:74:2C:46:32:5F:96:FD:2E:C2:AD:48
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019E1D2281C490EBBA94971E45608783A2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: F5
Signing time: Tue 12 May 2026 17:01:01 +0000
Manifest this update: Tue 12 May 2026 17:01:01 +0000
Manifest next update: Wed 13 May 2026 17:01:01 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: URCGQB3nm4PcNZZgNTpNAylxzPvfMxmL8rmliDx+LXs=)
2: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:81:c4:90:eb:ba:94:97:1e:45:60:87:83:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: May 12 17:01:01 2026 GMT
Not After : May 13 17:01:01 2026 GMT
Subject: CN=37abda3412d2518709742c46325f96fd2ec2ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:29:4c:08:3d:a7:67:1e:2d:37:b0:fd:cd:
2a:d0:11:6e:f7:e6:3d:88:40:e2:85:84:b8:4d:65:
3f:dc:0e:55:1d:1b:e9:75:57:12:22:4c:41:0e:a0:
39:8b:17:63:1f:df:09:ec:cc:91:1e:3e:3e:22:74:
9d:1f:f3:2f:bd:06:82:e5:62:fe:bb:fc:56:5f:5c:
1d:3c:74:f2:15:75:52:5a:0d:6b:57:14:24:04:e1:
b5:8e:71:87:a9:4c:ef:90:7d:a9:83:a4:dd:4b:15:
56:6d:ea:a2:b2:cc:af:39:17:d3:13:0f:9c:2a:4d:
2d:cc:cf:32:94:55:c1:8b:d2:31:8f:fe:f9:62:32:
90:54:be:7d:84:bb:9f:fe:2f:3f:f3:b7:f7:aa:fb:
f8:4a:d8:ed:00:b8:ba:63:f3:e6:71:4c:5b:83:a5:
8d:f1:0f:7e:02:1a:94:c0:a8:ed:00:4c:a1:e5:64:
3d:75:0e:a7:56:ad:6a:ec:68:df:f8:4e:6b:a7:12:
bd:c7:88:ff:55:dd:2e:d6:45:b1:fb:7c:ac:05:a4:
7d:1e:93:45:83:fc:14:67:bb:ed:7f:42:02:45:5a:
1e:65:21:44:d3:b8:b5:09:f4:92:46:39:a9:57:c0:
70:c6:ac:94:71:72:f0:2c:aa:20:5f:6d:a3:03:07:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:DA:34:12:D2:51:87:09:74:2C:46:32:5F:96:FD:2E:C2:AD:48
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c9:6f:aa:63:ee:44:d2:20:ad:b7:a3:47:c2:90:1f:a2:d2:
00:7a:f3:40:f1:27:61:4f:f9:a9:55:06:8e:ea:73:75:62:c5:
67:fa:63:bc:38:17:aa:c2:12:20:be:ed:f6:a6:b2:18:c2:57:
71:86:78:e1:3c:57:67:ca:2e:93:a0:e9:77:b3:f7:a4:5f:fa:
00:a8:4a:b0:da:ca:17:b1:b1:3a:43:c6:c9:96:7f:39:04:66:
dd:0a:76:f8:5d:85:bc:09:88:9b:d1:7d:e4:11:20:d5:b4:ac:
2f:11:f9:27:bb:5b:2e:16:45:d4:39:42:9d:c6:08:f8:91:62:
cc:35:36:49:7b:73:2d:d6:c5:b8:98:18:ee:a4:70:3f:96:2f:
c5:c7:bd:3d:11:6f:7b:c0:08:e6:2d:01:4b:9e:fd:47:32:75:
80:be:0c:51:b9:f7:f6:3f:c6:b2:06:0e:d9:da:0b:ed:19:59:
fe:8b:05:5d:57:a0:a1:5d:96:07:6e:72:40:61:10:2b:09:c4:
aa:36:30:b2:88:68:44:31:66:74:3e:0a:89:75:5f:dc:0c:24:
ff:ae:0e:13:1c:99:6a:8c:ac:22:c4:85:04:1a:b6:0b:b0:6f:
44:89:fb:01:86:a6:fd:2d:06:2d:a8:76:35:e5:dc:db:82:39:
41:25:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:24 2026 by rpki-client