Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: 8xl8uX1CJjgoDTxwnt+Wo5+nU9MnR8l1mrORS8hvTy0=
Subject key identifier: C6:33:B7:E3:B5:6E:A1:B7:29:36:EA:AD:CF:91:CA:C6:5C:33:19:3D
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019E1D222D33E65D2366403F0FF8441505A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0EDF
Signing time: Tue 12 May 2026 17:00:39 +0000
Manifest this update: Tue 12 May 2026 17:00:39 +0000
Manifest next update: Wed 13 May 2026 17:00:39 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: tF01O6LU984/InthXbjJ/BcDpzcWNDGsYUGdrycwVm4=)
2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:2d:33:e6:5d:23:66:40:3f:0f:f8:44:15:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: May 12 17:00:39 2026 GMT
Not After : May 13 17:00:39 2026 GMT
Subject: CN=c633b7e3b56ea1b72936eaadcf91cac65c33193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:af:15:01:56:a0:bc:3d:be:f4:8a:bf:5a:
21:6f:f9:dc:59:dc:cc:75:4f:e2:6c:91:a3:5c:b6:
93:89:34:eb:74:3c:91:ed:7e:ff:ff:7b:28:33:1e:
4b:a9:b5:6a:62:75:00:97:11:0c:f1:72:69:12:6c:
44:db:39:55:93:f0:96:6b:21:eb:ed:5f:68:0c:e6:
c3:40:11:55:30:91:27:7b:7b:f8:d0:8c:10:67:0e:
a3:ba:40:03:1e:a5:5b:b6:bc:9b:c5:c7:a7:59:d5:
fd:cc:0b:2b:cc:53:9c:de:14:5b:9d:12:be:4f:74:
5d:06:6c:6e:e2:0b:4f:0b:d6:5e:1c:42:15:d4:df:
9f:fc:04:b0:f8:b1:fa:65:d7:8f:91:e6:41:b2:c1:
a7:2e:0e:97:ae:c1:18:37:f0:70:6b:25:2d:e3:1e:
d9:6f:ad:76:b2:94:ee:40:b3:ea:e4:6e:ef:d5:7b:
4d:e7:0b:d1:f5:2e:c8:70:d2:42:cc:9b:19:ca:8a:
ca:80:f3:22:0a:07:13:66:b4:6d:12:87:3f:b2:e3:
dd:17:7a:b3:27:26:74:6f:a5:61:b4:1f:bb:83:7c:
8e:c3:53:d4:09:a2:31:2a:31:39:03:7a:d0:83:2d:
7c:79:95:92:4d:52:7a:a9:a2:71:ee:a9:42:3b:b2:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:B7:E3:B5:6E:A1:B7:29:36:EA:AD:CF:91:CA:C6:5C:33:19:3D
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:17:eb:1e:6b:54:f9:ae:ce:34:59:b6:f6:b6:a5:2e:02:
fd:c7:4d:eb:2c:6c:a6:34:80:7d:a5:ec:b9:90:07:c9:e1:c2:
a6:d1:19:d9:5d:15:5a:de:50:7c:6e:3f:a6:3b:74:cc:a6:9e:
f6:80:05:39:cb:a8:1e:32:d6:8e:84:76:f4:aa:32:4a:de:37:
f4:f2:2d:1a:67:aa:55:7e:ee:4a:dc:46:40:ed:90:76:87:32:
98:7c:54:29:e2:df:e9:24:5a:3e:69:6b:a7:1c:fe:f5:17:67:
8f:d3:48:35:a7:14:10:2d:3f:bc:7f:e3:e8:9e:e4:b3:a3:8b:
a3:70:38:83:36:04:cc:71:26:b2:57:36:e4:e1:d2:c3:3d:15:
b2:de:f6:1b:88:7d:e7:6c:fd:77:93:07:ec:3d:f0:d3:d2:81:
35:43:8d:3b:df:55:32:d5:39:61:66:94:a5:38:f4:c4:4b:01:
fb:b7:8a:f6:06:7b:6f:69:0b:c8:ac:1c:bc:d4:21:97:fd:2e:
06:53:60:d7:d3:27:be:81:35:57:7d:4b:3a:85:c0:0b:06:3f:
e9:97:91:bf:40:ac:42:d2:b3:49:f5:49:61:6f:de:72:82:d9:
20:89:5a:d2:db:f6:7e:60:05:b1:d1:a0:9a:a8:bb:39:46:66:
83:6d:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:34 2026 by rpki-client