Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: v0fYUX0WzVrZSbhlRXYfLx9R0nFDZRPcvR6xIzD3J3Y=
Subject key identifier: 3C:4C:F0:82:2B:1C:76:D3:CA:D5:A6:FE:29:C8:E8:8B:2B:20:63:03
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 019E1C475AC2A637757EBC86A2724C8A5985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 1594
Signing time: Tue 12 May 2026 13:01:38 +0000
Manifest this update: Tue 12 May 2026 13:01:38 +0000
Manifest next update: Wed 13 May 2026 13:01:38 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: BfenoRzGHBdVoWvvI8TA0YX6z65haCoK85D9DS7uoz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:5a:c2:a6:37:75:7e:bc:86:a2:72:4c:8a:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: May 12 13:01:38 2026 GMT
Not After : May 13 13:01:38 2026 GMT
Subject: CN=3c4cf0822b1c76d3cad5a6fe29c8e88b2b206303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:49:2a:3a:87:28:27:24:c0:2c:a9:59:2a:
23:b2:02:50:7b:f9:eb:50:5f:4d:88:7b:21:9f:e0:
e5:47:f8:9e:63:6e:1c:09:03:35:a2:07:61:32:38:
d7:e2:59:8c:79:ba:c0:c6:1e:5f:fd:64:8d:37:62:
f8:cc:26:30:67:c8:80:c1:5f:a8:8d:51:35:04:8d:
c5:00:26:59:e0:27:55:30:cf:72:75:38:c9:22:0d:
ba:77:ef:fa:20:17:0a:75:a4:98:f1:05:59:da:b7:
df:2c:57:cb:f2:c1:b3:e0:ad:7e:4a:7e:aa:9b:5d:
09:fd:c0:ae:04:9c:9f:58:8c:c5:c8:a5:37:49:d4:
d4:f2:fa:95:6d:d8:7c:19:f6:04:9c:b8:2b:28:17:
d9:1b:ef:84:35:1b:8b:87:08:de:d7:40:e4:62:6c:
e7:22:b7:f6:52:3b:66:33:a7:c6:63:0a:32:41:6b:
6f:f2:e9:a4:ff:5c:9b:0a:85:5c:77:77:62:ca:f7:
d5:79:b8:d5:65:c1:34:e7:eb:a0:21:3c:cd:dc:e5:
3e:48:c3:1c:c9:2e:ac:e5:01:0b:01:c1:92:66:04:
37:15:07:04:48:83:b4:08:5f:0b:7d:3c:80:3f:6f:
0a:54:52:78:16:84:da:e3:6a:b0:06:25:2c:da:65:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:F0:82:2B:1C:76:D3:CA:D5:A6:FE:29:C8:E8:8B:2B:20:63:03
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8a:4d:0c:d4:b7:b9:b7:1a:20:53:95:d0:a2:39:82:e1:cc:
78:ac:8e:57:8a:d1:3c:62:7c:60:96:8d:bb:59:64:cc:53:56:
11:37:9e:89:22:6f:5f:b0:e7:20:9a:18:70:aa:20:69:46:9d:
2e:4e:39:b1:a1:d5:5f:d1:61:81:48:ac:53:6d:ae:8d:d6:b6:
a5:2a:b7:51:9f:c7:5d:3e:51:c6:cc:48:8a:92:26:b0:4e:e7:
32:b9:64:bb:1c:07:01:2b:b6:56:df:82:8b:4f:94:2f:42:39:
3a:33:85:1a:7b:cc:c6:2f:ed:fb:6e:0b:89:60:4c:84:7b:40:
b1:d5:df:83:0e:fb:74:cf:67:92:e4:3a:bd:7f:73:c8:c8:9b:
24:1c:c6:43:bc:82:97:0d:43:53:cb:48:0b:8e:49:22:f8:30:
34:94:e0:70:23:77:d7:1e:7e:cf:b7:2e:c8:13:91:ca:e1:0e:
a3:57:8c:2f:87:e1:b1:dd:78:98:77:cd:6c:a8:e9:8e:95:c4:
4e:df:81:e7:15:b8:0c:b9:df:a1:d4:04:61:63:83:5b:e7:24:
2e:e2:2b:d0:30:f0:2a:b1:15:ae:aa:dc:d5:b4:48:04:25:43:
f2:02:12:45:f7:84:cf:4f:b9:d1:43:61:c8:83:c2:9e:43:db:
fb:d7:f5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:47 2026 by rpki-client