Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: 68RK/AGeRRuWIlWAmsSNIEMj5EQwgCiO7ekPN9/7NUE=
Subject key identifier: B7:2B:35:6A:6D:68:37:13:D9:12:7C:43:F6:34:00:01:BB:6E:90:AA
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019E1CB477725697CD46E835D3AFD2B8B473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:00:49 +0000
Manifest this update: Tue 12 May 2026 15:00:49 +0000
Manifest next update: Wed 13 May 2026 15:00:49 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: gUX/9ljlvMfVCkTrwQIFf5SXjhHA/crGw0Nc7/X3e/4=)
2: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (hash: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:77:72:56:97:cd:46:e8:35:d3:af:d2:b8:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: May 12 15:00:49 2026 GMT
Not After : May 13 15:00:49 2026 GMT
Subject: CN=b72b356a6d683713d9127c43f6340001bb6e90aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:19:34:fd:ba:da:57:d1:c8:c9:aa:db:c4:
50:e8:ad:a1:e0:36:2b:bd:95:47:a8:4b:a1:3c:46:
c6:43:30:46:c1:96:b3:1d:37:d1:af:e7:be:90:76:
7c:00:7d:01:a9:66:30:13:48:19:76:85:43:72:59:
e4:8b:79:1d:c7:8c:d7:68:1d:1c:cc:b7:b4:45:0c:
dc:9c:a0:aa:fd:ec:e4:5f:08:91:8a:fb:5e:1d:92:
91:e1:fc:25:3a:d9:75:61:41:1c:ec:93:63:31:ed:
b8:21:f2:c5:55:cf:6d:26:fe:88:40:b8:7f:a8:66:
2e:7a:50:e6:09:30:2f:c9:53:2f:f3:39:67:b8:d7:
d9:4a:00:ce:95:0a:14:57:b2:aa:30:be:2d:5e:5a:
2f:b3:5e:7a:52:7f:91:b1:98:38:58:e0:69:37:71:
06:1c:7d:84:32:70:07:4c:ad:fe:f1:bc:7c:3c:19:
5e:e8:da:1e:af:a0:68:e2:39:53:10:61:e5:b3:e3:
52:49:07:98:55:8d:10:ed:69:ca:f9:29:0f:37:d5:
f1:47:5f:14:90:41:29:f5:f5:9a:ac:af:dd:a6:90:
e6:a6:14:5d:e1:ae:c4:c1:37:1b:b5:50:99:d4:02:
84:f9:c1:16:25:62:9e:7b:71:8f:20:b8:4c:c1:af:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:35:6A:6D:68:37:13:D9:12:7C:43:F6:34:00:01:BB:6E:90:AA
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b9:42:e9:82:cf:e0:8d:1b:8c:fd:60:92:9b:51:17:90:6b:
7b:41:ca:50:f1:03:61:fd:17:71:ee:99:54:bb:cb:1f:d6:a6:
ad:a6:5f:8d:dc:24:3d:34:e4:d3:13:2d:6c:69:2d:d3:6f:af:
81:c2:71:20:95:9e:c2:35:dc:0d:9b:72:3d:a1:b4:14:0f:69:
5c:de:92:1f:52:af:26:36:a7:84:53:ed:a3:56:f6:d8:22:e1:
e1:9e:12:60:75:29:76:03:da:fc:88:92:0f:4b:51:bc:eb:ed:
55:78:47:aa:9c:e2:d1:91:6b:40:2d:66:41:bd:b3:f4:97:ba:
46:fc:be:71:52:e0:27:e9:77:9d:62:54:b6:1b:c0:44:43:a6:
80:88:20:e5:8b:ac:0c:c6:31:52:05:2d:8b:af:61:16:44:8a:
2c:ee:f1:34:11:e8:95:d8:9c:8f:b2:74:d3:a5:44:bc:df:53:
8f:7c:8f:ca:e0:62:2a:9d:91:d6:bd:35:a0:e3:6a:cc:b6:fb:
17:7c:bc:fa:2b:dd:fa:0f:39:4f:a2:55:5e:a6:c2:09:9e:1c:
67:73:26:fc:c8:8a:da:93:70:7a:42:dc:e0:1c:50:1f:82:43:
99:75:4c:5c:28:b7:f3:ca:79:26:74:33:04:b7:11:3e:46:d7:
ab:b7:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:12 2026 by rpki-client