Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: bvc0c/hcxV+WIDtBIrFyUp4PabV4qLd61JSY3Yn9Nl0=
Subject key identifier: 3A:81:DD:DE:62:52:83:FA:D5:23:8C:CA:59:D5:07:AE:E1:7B:3F:B4
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 019E1E6C453FCD5A193D26581A46B1E03A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 23:01:12 +0000
Manifest this update: Tue 12 May 2026 23:01:12 +0000
Manifest next update: Wed 13 May 2026 23:01:12 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: WzI1DMY4/fawR3WzC5y/pcudN4obpu08m8cCcRuDSuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:45:3f:cd:5a:19:3d:26:58:1a:46:b1:e0:3a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: May 12 23:01:12 2026 GMT
Not After : May 13 23:01:12 2026 GMT
Subject: CN=3a81ddde625283fad5238cca59d507aee17b3fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:2f:01:b8:b5:55:f6:54:9d:60:c3:b5:6c:
76:12:86:b5:bf:ba:62:14:1b:c6:28:42:c7:04:e7:
8b:ab:8b:a6:e2:b0:ca:2b:43:55:04:03:84:d0:ff:
d2:a4:d5:d7:7e:f3:13:77:fc:05:f7:92:1a:25:d4:
07:3f:32:ea:10:80:a8:24:56:2b:a4:56:73:14:b8:
f8:62:a5:23:41:83:e7:0e:47:ed:e9:87:a9:68:85:
64:3e:33:a8:bf:de:72:0e:78:f3:2a:8f:23:1e:d0:
71:3e:86:73:7c:9f:5b:ed:f4:08:7a:8a:b3:f8:71:
48:96:0c:66:4d:c5:91:6d:6d:22:a2:35:16:09:f5:
84:f1:3d:4d:43:8d:89:b5:66:9a:e8:5f:cf:fd:06:
8a:74:3b:47:c2:94:9c:52:69:0b:ed:2c:d7:9f:b0:
6e:6c:6a:4a:86:8c:65:d2:9d:29:c5:ae:4a:f2:3c:
6d:9b:1d:2d:1f:e7:98:28:b6:31:2a:5e:14:df:8f:
ca:db:f0:a1:13:a8:dc:1c:23:fc:6c:fe:f2:5b:5d:
9e:81:aa:b3:65:68:5b:39:35:cf:7f:dc:e2:f7:0a:
b0:11:9a:fd:9b:37:99:7a:c4:28:b3:8b:ef:37:ce:
09:44:9c:08:59:0a:90:1a:2f:6f:34:02:d5:9d:23:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:DD:DE:62:52:83:FA:D5:23:8C:CA:59:D5:07:AE:E1:7B:3F:B4
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cd:69:21:20:70:af:d0:9c:16:35:30:2c:9f:aa:69:bb:6d:
e1:95:b5:6a:d0:be:e0:c2:ff:54:90:93:36:0b:9d:81:db:c5:
3a:8e:e6:fb:a3:b1:23:ed:e9:4b:ee:26:12:9b:2a:be:6e:8c:
55:da:37:8a:60:5f:f7:2e:0c:94:36:40:9f:13:83:ec:32:41:
1e:d5:8d:56:46:88:58:96:ee:43:4f:eb:94:f5:00:c0:41:e9:
fb:e1:b2:7a:5f:a3:d0:e7:84:cd:7e:8d:3a:bc:55:e8:bf:70:
c1:20:3e:86:b0:e3:55:99:dc:3f:5c:7e:da:64:d3:0f:f6:31:
a5:80:e9:4b:ad:5e:f6:4c:43:64:24:a9:4f:6c:58:b1:ec:b9:
e7:22:cf:48:53:7e:52:1b:91:9e:0a:80:94:1b:33:59:d4:e1:
91:35:a9:b4:4b:8c:ae:5a:ce:16:8a:20:e5:96:da:1b:58:7f:
31:47:9c:53:24:8b:39:27:75:6e:16:27:b6:f2:20:e8:0f:06:
8d:9d:16:a1:0e:07:ba:95:87:e9:94:f3:c4:b5:eb:d6:d0:a4:
af:b9:90:92:8a:14:6e:10:a7:0a:28:96:f4:e1:0d:29:db:6c:
5d:9f:b4:b7:7f:08:02:e3:51:da:b6:da:1c:b0:cf:15:01:fa:
79:b8:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:36 2026 by rpki-client