Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: kc+I8+uX+PD8QT+X0FYQnEYatqczRKaHkamFDe1e7hU=
Subject key identifier: 8D:1A:8B:9A:E4:48:2C:31:98:0D:3C:3C:F0:30:B8:8E:8B:B6:6D:52
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 019E1EA2DF942B932C6561BC7C1A5146CDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 12A6
Signing time: Wed 13 May 2026 00:00:51 +0000
Manifest this update: Wed 13 May 2026 00:00:51 +0000
Manifest next update: Thu 14 May 2026 00:00:51 +0000
Files and hashes: 1: 1-pGUh5eoM3ZeUskzeaaKM7PLY6M.roa (hash: yFYmsEHjskSi49uzOqgkpPy9RGM1shgkNOzvgFJ7/8o=)
2: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: CA/IsbqlLfXVK0FyoTUHWCzWG4bYb+f40WsRbD3NnUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:df:94:2b:93:2c:65:61:bc:7c:1a:51:46:cd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: May 13 00:00:51 2026 GMT
Not After : May 14 00:00:51 2026 GMT
Subject: CN=8d1a8b9ae4482c31980d3c3cf030b88e8bb66d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:1e:76:fb:dd:04:49:8e:92:d0:a7:10:97:
57:46:93:72:af:24:ee:64:5a:23:f7:0e:17:55:71:
e6:78:39:48:9d:f3:9e:63:bf:10:39:51:f5:30:c2:
cd:0b:4e:61:27:58:42:a2:39:b1:a4:f2:19:4b:ff:
fd:44:24:26:37:a6:55:a7:0f:e0:4f:06:a2:f3:5b:
5b:7e:46:08:1c:ef:08:2e:7e:a1:38:0a:e6:a3:85:
e1:a6:e5:4b:80:3e:e9:f7:32:32:e2:0e:62:cd:c7:
d2:4b:86:5f:3e:cc:c7:da:c0:cb:38:64:54:0f:e7:
29:f6:9d:5e:6f:2d:0d:b6:28:6d:02:1f:bb:f4:25:
c9:a0:f9:9b:a8:01:15:10:68:81:1e:6f:dd:14:b4:
00:06:e9:31:62:5a:bb:04:67:32:52:4f:60:fd:8e:
73:b7:c7:b1:a2:1c:5f:cc:af:8d:aa:dd:a2:dc:f7:
63:9d:f4:58:8a:9d:de:97:c8:d2:0b:4f:16:b7:08:
43:6f:35:a5:66:19:a0:27:74:20:ac:6e:3e:aa:36:
f0:78:6e:27:c1:f4:c5:91:7a:a6:29:00:ef:ce:e8:
48:41:de:ba:65:dc:58:98:b7:ed:a9:5d:f4:ff:14:
02:12:94:6b:ff:fa:57:cc:b0:13:85:9d:a3:c0:4d:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:8B:9A:E4:48:2C:31:98:0D:3C:3C:F0:30:B8:8E:8B:B6:6D:52
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:ac:e7:69:96:12:f7:83:79:e8:a6:18:43:8f:bb:3e:45:
1d:8e:31:06:44:eb:cb:1a:c0:56:81:7b:f1:b9:cd:55:4e:23:
64:21:13:0d:49:d8:42:76:36:8f:3d:19:9c:b2:e2:cc:bb:11:
11:af:9d:0e:c7:fd:9f:0c:2a:b2:3f:7b:4d:7f:87:ce:35:3e:
f5:0b:d4:e7:4e:52:27:6a:4a:d9:8a:44:04:32:2e:db:40:bc:
4a:dc:e3:1b:af:54:93:7b:98:9b:66:2d:5e:94:b1:16:60:71:
2f:0e:cb:ff:2c:29:67:fc:ed:c9:24:62:b8:8a:78:b4:7c:a2:
a8:10:69:0b:4b:44:94:ae:dc:91:5f:57:ca:e2:af:46:5f:8d:
f4:48:78:9d:cd:60:96:3f:9c:c5:77:42:8a:0d:0a:cf:ab:9d:
81:30:b1:f5:6a:de:5c:95:27:49:c6:25:b7:d4:9e:7c:05:85:
68:1b:62:99:6e:2b:b5:52:9f:ff:a8:b8:59:4d:ce:ee:90:a0:
97:b7:f4:66:67:e5:4b:9c:3b:ac:e8:d5:64:5d:0c:51:7e:00:
c7:b2:58:76:bf:c2:ae:5f:cc:31:5d:8f:33:0b:4a:4e:f3:0d:
9e:32:f3:8b:ef:46:20:9a:31:eb:38:7c:98:42:02:eb:54:50:
bc:35:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:55 2026 by rpki-client