Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: f1nl0z0AD0E1blkvCJn+FecW1yvsKE1nEgwDtAwiJ+A=
Subject key identifier: 9A:F8:EC:D5:ED:C8:77:E7:7C:58:13:7F:26:5B:E6:16:D8:57:1F:35
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 019E1D2316AFB385C216ADD8FF806793123B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0AAE
Signing time: Tue 12 May 2026 17:01:39 +0000
Manifest this update: Tue 12 May 2026 17:01:39 +0000
Manifest next update: Wed 13 May 2026 17:01:39 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: Z1SkkwDwH7AJe/F5NZuENK/26uop42jBLm+v71r480I=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:16:af:b3:85:c2:16:ad:d8:ff:80:67:93:12:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: May 12 17:01:39 2026 GMT
Not After : May 13 17:01:39 2026 GMT
Subject: CN=9af8ecd5edc877e77c58137f265be616d8571f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:f8:3b:0c:a0:13:fe:64:c3:5e:4d:91:69:
d2:6e:f0:74:ac:85:5d:3f:a4:45:40:96:5d:9a:47:
51:26:b4:e4:75:d2:ab:73:ae:f3:a3:63:56:93:2a:
f9:14:37:a5:49:ad:5d:d3:33:1c:02:6b:c5:66:a5:
4b:7c:e5:28:30:89:cd:8a:8f:f5:d3:9f:c7:f9:94:
65:d5:69:e4:9f:49:3b:b5:f3:8c:70:01:ea:04:6a:
42:20:af:5a:93:5b:10:bb:f3:4d:f8:d7:c7:9c:22:
6c:dd:cc:5e:14:43:81:af:c0:f2:23:c4:80:06:fb:
8d:1d:bd:4f:75:b2:96:a0:18:cf:ef:70:f8:c4:79:
71:84:b5:f3:e7:65:56:5e:93:8e:c8:51:40:a3:40:
7d:16:51:ea:8c:5b:b7:f1:20:45:c0:61:b9:ec:dd:
eb:f3:42:b8:ae:47:3f:bb:72:52:ab:55:b4:99:4a:
88:94:3b:f9:67:fc:87:43:2c:f0:c0:b5:50:c9:8d:
63:db:55:20:52:c5:c5:7a:9a:69:7e:32:50:53:ff:
7b:c0:a1:e3:5e:cf:33:94:82:17:72:fa:ca:30:54:
ce:d6:86:ed:ee:5e:31:18:f1:03:7a:40:63:20:75:
65:92:75:f6:60:97:ab:a1:71:96:e8:9b:c4:2b:22:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F8:EC:D5:ED:C8:77:E7:7C:58:13:7F:26:5B:E6:16:D8:57:1F:35
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:42:6b:1f:10:88:be:50:4e:52:c9:69:be:26:2e:b4:f9:
ea:e3:6d:b1:bf:3e:71:b3:a4:3b:10:25:6b:0d:21:11:57:31:
33:d5:b5:67:b2:35:79:1b:4d:c7:1b:6b:c3:1f:79:7a:9d:a9:
3c:ba:5f:9d:eb:a1:26:7d:16:e9:9b:c5:28:38:02:ff:03:54:
8c:fb:ca:1d:bd:aa:cf:8e:a9:4a:1b:35:dd:f8:72:93:2b:16:
93:b8:74:6e:aa:77:38:12:da:7f:16:56:82:9a:99:ce:9b:c7:
6b:15:26:08:01:0c:8e:ee:aa:f3:c8:dc:05:8d:f0:8b:74:62:
52:30:42:8f:81:1f:a3:64:fd:09:be:2a:cd:80:02:dc:8a:75:
fc:f4:12:87:57:08:45:8e:55:60:7c:a5:5b:01:00:8c:d5:b4:
d0:35:1c:c5:09:81:fd:17:ec:46:87:29:53:c5:ad:1f:ad:55:
75:2b:69:70:48:d4:71:b7:10:c7:e0:02:f1:f2:db:0b:0f:4c:
6c:06:82:c8:d0:e5:76:3f:61:72:00:53:66:e7:b2:e3:91:c9:
cf:2c:fb:62:62:b7:3f:22:fe:df:0b:9b:d2:41:f6:94:4c:d4:
e0:41:8f:b9:45:fb:7d:86:88:31:89:0e:f0:1a:c6:5d:cc:38:
74:2e:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:22 2026 by rpki-client