Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: KSrNn62XX5kP95wATYa8rxZqGXHIPKwWkeK5VwxZmU8=
Subject key identifier: 85:BA:91:C5:38:9D:EB:40:28:A3:34:AB:99:72:7B:E0:66:F6:BF:D4
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019E1CEB8D43556A5648E64197945A775D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0EF7
Signing time: Tue 12 May 2026 16:00:59 +0000
Manifest this update: Tue 12 May 2026 16:00:59 +0000
Manifest next update: Wed 13 May 2026 16:00:59 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: IshYw2CbO2TXmhgZJ/qlCPd6ZEZnl26JMnjAG04ID9E=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:8d:43:55:6a:56:48:e6:41:97:94:5a:77:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: May 12 16:00:59 2026 GMT
Not After : May 13 16:00:59 2026 GMT
Subject: CN=85ba91c5389deb4028a334ab99727be066f6bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:9e:0f:4f:3a:6d:48:a6:5d:06:eb:d2:25:
92:c8:60:ef:55:1a:e0:22:6a:ac:61:a9:a1:f4:f6:
62:71:7f:b1:34:8e:4a:91:27:e5:c0:65:95:af:8c:
99:3c:81:5b:42:37:58:a7:a9:02:42:cd:7b:40:b5:
f1:6a:dd:4f:1d:ed:f7:b0:cf:62:30:38:31:a9:5d:
74:cd:1b:4f:b2:3e:0e:b3:94:90:08:2a:02:41:69:
6f:9d:21:a4:7e:4f:f0:5e:90:03:e7:ef:89:d5:f1:
d2:b5:ed:53:be:f2:6f:ed:b8:e8:4a:f9:5f:8c:a1:
59:d9:38:0d:52:a3:5f:d8:a7:a0:3e:89:60:a0:5d:
f5:17:cb:d9:1b:29:73:0c:dc:2a:ff:a5:7b:aa:40:
21:90:b1:3f:19:69:58:97:50:ab:8e:39:ac:b5:6c:
1f:0d:0a:f2:5e:31:a3:58:73:66:99:87:06:a4:ef:
d7:90:be:96:3a:a4:54:ef:0a:84:69:10:2b:9b:85:
97:1c:e1:e5:5d:8a:96:33:b6:be:38:af:65:49:e5:
91:6d:6b:40:da:8a:8e:2b:cd:52:65:91:d4:fc:27:
92:c0:ca:71:d6:73:9f:8f:e0:9e:3f:77:8a:d4:7d:
0b:33:d1:c6:1a:8b:19:6d:32:89:24:43:af:1c:1f:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:91:C5:38:9D:EB:40:28:A3:34:AB:99:72:7B:E0:66:F6:BF:D4
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:d1:d3:85:6a:61:64:eb:41:eb:a0:af:e5:2c:37:fb:d4:
8e:b8:a3:ea:8a:f4:0f:bd:5b:64:df:40:dd:ff:d2:cb:6d:0e:
ff:53:0d:4f:e0:7b:96:f6:02:03:c9:41:38:4b:5b:a5:d6:f6:
39:ad:b4:a9:07:24:e5:c9:cb:55:dd:96:92:37:5e:75:2e:c4:
a0:bc:74:d5:d5:e1:11:9d:64:f8:b9:7e:b5:d0:f0:fa:31:d6:
b3:63:2e:39:bb:03:ce:df:d4:fa:cc:b3:17:1a:50:68:c1:51:
74:03:bd:bd:8b:70:1f:06:1a:87:f2:e6:3c:ce:fd:4f:6f:23:
e6:4f:e0:5b:18:2a:5f:4d:1c:00:90:36:96:5f:de:13:38:0c:
52:40:19:f1:5e:1a:40:f0:5c:80:f1:18:b0:30:a7:3a:eb:ca:
d5:a4:a1:45:2b:7c:81:f5:d4:10:7e:77:f8:b8:f1:ea:6f:00:
fc:db:d3:98:8e:b0:69:6b:73:36:20:f1:87:d2:71:d6:32:52:
36:d6:c4:b0:37:f7:f5:d4:6f:e0:fb:7a:82:9d:c9:a8:17:fc:
d7:dd:ae:7e:8a:6c:1d:78:b0:e2:63:08:1d:aa:01:02:83:0d:
52:13:e6:f3:6f:47:43:a0:89:27:9c:b0:b7:1e:ff:22:48:c9:
51:bc:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:37 2026 by rpki-client