Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: kcq16FLesTwRMlt4/+8V06QQ2q6LPp/9kPkOrpQOxL8=
Subject key identifier: 76:F7:68:6C:22:0F:55:C3:F7:D5:41:8F:FA:A7:8B:98:08:9D:90:15
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019E1EA2D37F781CD9107AE8A31A969B9BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 1582
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: 8dARhtMqxi0pWe5gJJaV6bzgQ7cazyo/XCekVCR709c=)
2: B858kg8THjaSoEIim6530sspUXs.roa (hash: HCD5tBX+9y/cDnZBRIi513FjVWEfPLJ8ux8RH4V8Dpk=)
3: GRivXpYp4CuhiN76JDUjX3oocvQ.roa (hash: INwnsmHYjS772AhOCOKo1mO3+hjHZod9QoImR0vqNKc=)
4: PCyrz_7gQySJ-l_QlnLaYZdnukM.roa (hash: 8qLUqfkbCxjZKisO86t69Q/KwJjfGVGdDtnDpf4H3cE=)
5: dOKAlcT195hvrnl94GECXypnUw4.roa (hash: uCgRu9pSvcyUSoOdBM4Z/JT81zNcZoR+ge8afkxI5PA=)
6: kuAZ8COOrRF7D7fGL9v85feX7sY.roa (hash: MeqT2suPhasDZh73lRt2kV/r/fxAtR5VksxEngVFI8Q=)
7: x8_4aac4Nz-MFK0_jVyanCY1Njs.roa (hash: W//4mpSYdJPZzB2svcIDaGv0bAnhUuw6rNgGJNlJgIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d3:7f:78:1c:d9:10:7a:e8:a3:1a:96:9b:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=76f7686c220f55c3f7d5418ffaa78b98089d9015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:ae:95:2f:64:b3:25:4d:77:03:30:9b:34:
95:31:89:82:74:28:e1:30:e1:4c:dd:13:5e:26:4c:
4b:54:3e:3c:05:4f:22:47:ed:47:fd:5a:df:d5:f6:
8e:4c:59:b1:5b:f4:95:50:a1:64:dc:69:30:5b:ae:
0c:96:e1:19:9a:cc:e8:e4:d8:77:f5:14:c4:e1:9f:
09:e2:07:69:9c:45:a8:7f:a2:b4:a1:00:da:a6:a8:
48:3f:f4:fb:41:05:79:d1:af:1e:c9:49:31:db:0c:
5c:a6:09:0e:24:fe:f5:ad:44:11:b5:e2:fe:e9:db:
4f:f9:85:c3:2e:d9:03:da:51:a7:04:d6:c3:d4:4c:
7d:9f:8b:b5:e3:97:7c:92:7c:45:f5:51:b9:23:f1:
99:45:d3:10:c1:9f:aa:3a:5a:cf:85:32:11:f2:3f:
59:51:b5:15:06:ca:b8:3e:8b:1c:4b:a7:b8:26:6e:
eb:c3:fa:3c:3c:e4:63:49:04:04:ef:02:0b:94:10:
a9:9f:ab:14:c5:9a:a7:8b:ad:87:f3:eb:fe:5d:28:
fc:58:00:2c:25:eb:5f:71:b1:1f:cb:e2:a9:1d:e4:
b1:71:74:70:c8:fc:f8:c4:65:67:4c:81:6b:df:b4:
24:c7:63:6d:16:4a:14:de:a7:b7:c5:0b:f7:a7:73:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F7:68:6C:22:0F:55:C3:F7:D5:41:8F:FA:A7:8B:98:08:9D:90:15
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:45:41:e0:07:0f:7b:27:bd:5f:6f:fc:aa:0b:f1:d6:13:
e4:2f:a7:30:43:c6:cc:d5:69:0f:da:05:e5:54:de:bb:93:74:
2c:a4:6d:9b:17:70:37:25:77:87:90:ca:51:ef:bf:72:21:76:
fb:44:b9:57:47:c7:2a:51:49:6f:d3:46:1f:64:f5:e6:fc:6d:
5c:c9:68:11:00:1f:f7:56:c2:00:bd:31:c4:3e:eb:92:95:7a:
97:1e:34:51:ad:95:10:56:ba:a0:ca:c2:aa:1c:09:6c:94:59:
d2:c8:1a:d9:0a:44:1b:73:8a:df:f1:a8:ef:82:b6:d5:00:97:
31:0e:91:5a:12:e9:94:5c:1f:11:99:bf:6a:4f:c6:29:fa:8c:
aa:a0:4b:f5:c3:72:2a:50:b7:c6:b2:80:96:2e:00:26:aa:52:
8f:00:12:49:ed:37:00:5b:4c:20:5a:a9:82:ec:a9:7f:2a:70:
ec:13:15:23:03:9e:57:95:cf:b6:36:e1:4f:25:d3:31:cd:84:
9d:4c:4f:7e:a4:7d:73:90:b4:bf:cd:14:97:19:ff:73:16:40:
51:e4:fa:82:f8:cd:10:86:f2:59:08:dd:fe:c1:21:71:e1:fb:
da:ac:df:c6:49:b0:db:80:a6:73:b7:16:e7:e3:d0:67:79:a4:
b3:c0:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:20 2026 by rpki-client