Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: +YCrVRy7ev7GSsPh2wP+swV9i0Eor9+EnlR6Dub2MsQ=
Subject key identifier: D6:41:D8:34:26:B4:E0:A7:50:67:8C:5B:64:E5:67:6F:57:D7:98:EF
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019E1D904F9779448EA3B9FEB7BEDF1DB7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 13E4
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: GIbXPOoMjhJQu70CcqUf+EX9msgXnHgx+aR+RYoWBkQ=)
2: IDTYw6C5ecE0yTngM2giPFekYEo.roa (hash: Mp7nJH1EbJ5wIQlVw/NFiqEMS1fdnjIoS+XOTuUWT3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:4f:97:79:44:8e:a3:b9:fe:b7:be:df:1d:b7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=d641d83426b4e0a750678c5b64e5676f57d798ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:0c:dc:64:5c:09:f3:bb:b4:0d:e0:1a:f2:
11:a1:05:20:4a:0a:60:86:84:f2:c4:b6:c6:d8:80:
71:28:28:90:04:c3:fd:00:ee:07:ef:ea:0d:d6:7c:
c6:88:db:40:dd:f1:c1:2e:46:72:d1:67:57:d6:49:
a7:dd:d2:9e:ea:a2:7a:1e:bf:30:6e:97:b1:d9:a8:
f4:cd:60:97:a2:eb:7c:cc:43:e5:08:7f:47:bb:b2:
d9:2a:31:22:b6:1f:e9:39:40:74:7b:0f:44:7f:b5:
e4:80:9a:3e:53:14:58:62:c3:9b:86:aa:3f:ba:9d:
0c:a7:99:d6:5f:91:b8:b7:81:c7:c5:68:14:6e:39:
8c:68:21:4c:32:e7:89:b4:d1:42:38:e1:d2:91:78:
21:24:6b:e6:b3:10:98:56:dc:a0:bc:b8:10:54:b6:
53:be:b9:eb:e8:e8:f2:7b:0d:ca:4e:05:cc:56:29:
92:cc:1a:af:ee:69:56:f2:96:fb:e2:09:ee:03:77:
5d:19:49:f7:e2:cb:2b:c2:30:18:6d:bb:0f:4e:f0:
66:6c:7f:2f:b1:3f:b1:85:ee:c5:8f:e0:52:b4:9b:
ed:50:24:92:1e:a8:16:99:17:d6:15:d7:02:2a:aa:
1d:ce:50:e9:9e:f7:d0:b9:f7:45:66:cc:8c:bc:5a:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:41:D8:34:26:B4:E0:A7:50:67:8C:5B:64:E5:67:6F:57:D7:98:EF
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:38:c0:b2:66:84:48:91:98:2f:c6:7b:de:e5:89:ab:ed:
25:53:d7:7c:31:5c:05:a7:5d:42:4c:80:a1:13:92:cc:7a:1c:
9b:3c:07:a8:bf:40:30:f5:21:2b:89:2f:ab:3a:cc:88:7a:6b:
b3:13:a1:04:43:b3:74:32:4f:0b:bb:b0:8a:d6:fa:22:30:6a:
b5:b7:9a:16:4f:7d:db:b9:2c:ce:27:e2:3e:0e:39:f5:42:10:
f7:42:78:76:46:d1:4f:e9:4a:c2:36:51:2f:04:d0:4a:a6:1f:
74:b3:b0:12:fd:f0:91:98:6d:1e:f8:f8:76:38:cf:a2:46:80:
9e:4a:23:c3:4f:37:06:36:69:2c:51:f6:72:3f:51:22:f5:9b:
29:db:f0:e3:b0:6a:f3:d6:35:e4:d8:91:42:ed:be:a6:44:e0:
18:0f:09:3c:3d:21:a7:03:62:a8:bf:06:cf:76:c6:08:bd:ad:
cd:07:d3:8a:85:1f:e5:2e:7d:2d:c9:80:75:e0:5e:78:79:3a:
6e:03:d2:09:28:cd:20:6d:36:a5:59:96:0f:4f:6a:c1:0e:8b:
2d:c1:de:e4:69:a3:b9:52:3e:a5:58:30:a1:1e:27:50:d2:50:
f2:b4:79:55:6d:ef:28:c1:69:b1:07:ef:09:96:a2:1e:e5:cd:
80:52:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:34 2026 by rpki-client