Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: AuFT7O+jTSSsOmje0Obwi2dBobqzw40HVbnGPgfxUE8=
Subject key identifier: 6C:DD:E8:F0:93:D5:8B:89:FE:CE:4E:B1:8F:E8:22:93:53:15:B6:72
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 019E1D2268D01F7DDD9DF1234724F182DD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 092D
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: +FVSZXnsE4RcHBNydyOfu4LuummXey8+tqkM9zLEC18=)
2: i9YgAIBuXXbxHaaTv_p0J9D3QoM.asa (hash: hxO3W8qfD9gxf5WrJwp9I6YibE84muBruTbYMSu561o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:68:d0:1f:7d:dd:9d:f1:23:47:24:f1:82:dd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=6cdde8f093d58b89fece4eb18fe822935315b672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:89:7a:e5:bf:0a:c7:12:b3:69:52:02:b5:
7f:3e:3e:b7:e0:c4:2c:ff:4e:bd:36:18:40:5a:a8:
b8:e5:75:fb:3e:65:23:36:98:d7:ae:f4:ff:5c:37:
1f:63:ac:d0:03:af:9a:d6:31:b3:65:e9:c6:c2:1b:
11:1d:63:b3:24:3f:d8:cb:ee:ca:11:9a:6b:3c:f3:
5e:78:84:29:18:80:b6:d6:f1:42:aa:9c:00:8e:e0:
89:57:4f:50:1c:66:45:15:6d:39:91:25:1d:12:36:
eb:2e:4b:46:e0:01:d1:f5:9f:80:d1:03:e3:a1:c1:
43:07:36:85:17:a4:3b:f8:02:31:12:59:4c:94:0f:
18:49:65:8d:df:9e:a9:81:2e:0d:90:10:36:69:6b:
20:65:43:bf:34:72:4c:ce:92:73:24:2e:25:25:86:
52:37:53:61:77:c1:c6:7e:b8:a2:ad:4e:bc:49:d3:
9a:46:22:9e:73:b8:bf:bd:53:77:98:68:9c:db:7b:
22:38:d3:62:63:61:40:09:40:8a:1b:4a:b5:dc:68:
78:99:94:22:ab:80:99:b3:87:50:f1:16:cf:5d:59:
f1:1b:52:ea:60:8b:e5:8e:63:35:df:0f:5e:f0:85:
31:63:e4:b3:02:3b:d7:23:ae:99:17:0f:95:35:db:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DD:E8:F0:93:D5:8B:89:FE:CE:4E:B1:8F:E8:22:93:53:15:B6:72
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e2:5b:e2:cd:a3:d1:55:57:ed:8b:d4:bf:f5:cf:ad:63:db:
1c:1e:3b:74:a9:70:72:3a:e7:46:54:03:0b:be:65:96:54:2b:
cf:c1:88:69:c9:a7:3a:3f:71:fb:d3:58:a9:6d:2c:c3:15:4f:
c1:d3:15:f9:6a:f4:f9:e7:36:42:e2:13:ed:9b:0b:7a:f3:e8:
c8:1a:bb:6a:8b:fd:b2:d0:f0:f3:04:22:ae:46:07:2e:8d:5d:
5d:d5:f3:7c:bf:b6:48:2c:c6:69:f5:36:59:86:ff:83:7c:f6:
bc:43:a3:21:65:cc:ba:52:1d:b6:cb:bd:87:5b:07:89:46:ce:
98:16:4d:fb:5b:59:f6:1f:2a:fc:9d:2b:8e:c7:27:05:0c:4f:
f7:49:47:82:2c:20:59:41:c8:19:8e:ac:2c:a3:09:0f:97:57:
27:a5:1d:d6:1b:45:bc:f5:c7:51:df:b3:59:09:77:4c:c1:0b:
ac:5d:18:d0:79:8c:15:f9:72:7c:3b:fe:02:76:54:fa:15:c0:
43:39:04:dd:8b:e7:17:61:47:90:be:50:6e:73:69:d5:76:94:
2c:dd:4a:08:8f:98:48:d6:f4:4b:da:13:2e:e4:ef:3b:4a:3c:
6c:70:45:07:2c:db:3a:4e:44:bf:e2:50:cd:e7:c9:6d:e2:3d:
ec:6a:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:22 2026 by rpki-client