Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: 1ucjnwEnDnU2nOcZYa6bdpDjV2DmULv+q/rw7zDSoMg=
Subject key identifier: 82:57:09:B5:AF:65:BD:55:6C:EA:1E:D0:58:56:CA:F0:03:3D:90:A9
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019E1E351C3FED6311B67767AFA66045967C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: D3
Signing time: Tue 12 May 2026 22:00:57 +0000
Manifest this update: Tue 12 May 2026 22:00:57 +0000
Manifest next update: Wed 13 May 2026 22:00:57 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: ZlVoEMASmcgZhlhA2TbVlM8HxcOzkeU21x+1KR0qRJU=)
2: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:1c:3f:ed:63:11:b6:77:67:af:a6:60:45:96:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: May 12 22:00:57 2026 GMT
Not After : May 13 22:00:57 2026 GMT
Subject: CN=825709b5af65bd556cea1ed05856caf0033d90a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:18:c3:67:03:9e:bf:1f:2e:a1:ca:53:f5:
f0:ae:cf:88:78:5c:e9:3a:3d:2f:d7:e6:65:fc:92:
be:f6:22:2c:07:07:37:e3:46:20:9c:c9:f8:16:a4:
d9:c6:94:d1:9d:f6:b0:ac:66:43:ae:f1:97:62:b4:
45:88:33:be:b0:5d:26:28:2b:3a:0b:5d:16:52:8b:
f8:35:4a:ef:f0:30:8c:c0:60:5a:58:ec:6b:f9:52:
6e:8c:f5:6b:63:12:52:b4:a4:4b:6a:bb:14:7d:31:
4a:f2:4d:3b:61:7b:24:f6:e4:c5:e8:1c:69:d2:c3:
5b:58:97:68:3b:9c:d5:2f:e5:d5:63:4d:27:fd:8b:
63:a4:86:4d:99:2f:88:86:27:da:3e:98:8f:53:e0:
bc:f2:e4:41:df:12:33:fa:38:68:2b:77:54:de:b7:
b4:db:7f:24:56:2a:67:fc:62:2c:5b:7f:88:2f:d6:
b9:92:dd:70:7c:36:e0:fa:d3:39:cc:0b:75:6e:6e:
f7:c8:93:1a:49:8a:1e:cb:cc:83:9b:bd:02:bb:c9:
c4:8e:9a:9a:e2:31:2f:e9:5a:ea:82:74:19:74:96:
34:53:29:01:68:5f:c6:ab:79:1b:5b:1d:35:98:fc:
f0:0e:9f:7a:f5:d6:5c:e3:94:cd:b9:c0:e6:4b:8d:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:09:B5:AF:65:BD:55:6C:EA:1E:D0:58:56:CA:F0:03:3D:90:A9
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5d:29:40:fc:2a:6c:d2:51:cd:99:f4:8e:77:9b:8f:d0:29:
26:0f:32:be:ce:cc:3b:01:c7:20:e1:2d:97:f8:ae:b0:26:7b:
10:fb:a3:99:ac:9f:19:92:ac:4d:a8:45:56:22:65:86:c1:76:
4d:4c:74:2d:66:17:fe:0e:2a:05:17:1b:17:f3:f6:4c:74:0d:
90:e0:91:a9:5e:5b:f3:d6:4d:17:e4:0f:92:10:e9:52:da:ed:
56:71:a2:71:2f:69:93:5a:60:60:ac:b2:8d:69:73:98:8f:05:
79:c5:f5:08:9f:ef:bf:39:88:7b:2d:33:90:f5:e3:cc:d0:21:
99:74:12:1c:de:3f:8a:1a:57:11:eb:ac:42:41:65:69:74:f3:
a4:4c:8b:2b:e4:d1:0f:56:1c:11:65:09:c4:89:b0:ea:93:02:
bc:11:82:17:01:cb:72:d2:8f:71:ae:5b:a4:bd:33:17:8f:94:
27:9e:7e:54:8e:4a:05:cd:8a:cb:ed:cc:dc:1d:1f:46:50:24:
58:ba:1a:13:ba:2c:eb:01:88:71:28:26:21:89:04:26:3e:56:
ea:2f:c7:b8:a7:d3:fb:59:10:03:f0:aa:ca:ba:e2:a7:01:32:
37:a8:e5:a9:f1:b2:71:1a:2f:34:c0:84:de:9d:7b:d7:ab:dc:
e5:fe:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:11 2026 by rpki-client