Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier: YfFknXJrbMvlX27Nlcz20M9n7G+MW4gjc97DqfVbKuE=
Subject key identifier: DE:F7:EB:CC:29:4D:39:4F:D3:74:CA:7B:2F:21:63:D5:CB:E0:AB:77
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 019E1BD907EAAE727558151141A987732B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number: 1604
Signing time: Tue 12 May 2026 11:01:08 +0000
Manifest this update: Tue 12 May 2026 11:01:08 +0000
Manifest next update: Wed 13 May 2026 11:01:08 +0000
Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: ck3Bgwd3qO2vLKqmJcueXBlLCAthq2Og1aVxQHwYQAA=)
2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:07:ea:ae:72:75:58:15:11:41:a9:87:73:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: May 12 11:01:08 2026 GMT
Not After : May 13 11:01:08 2026 GMT
Subject: CN=def7ebcc294d394fd374ca7b2f2163d5cbe0ab77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:39:95:d8:31:a5:66:7a:bf:fd:91:4a:fd:
6b:49:a1:6c:75:8d:b0:78:54:d0:3f:74:04:6b:34:
a9:f8:51:07:65:31:72:91:67:dc:dc:58:c5:a7:70:
0d:27:d7:1a:8a:57:04:0b:e5:f5:1a:7e:af:84:16:
65:2e:99:01:df:65:ff:f8:80:22:0f:97:94:9a:d2:
82:1e:0b:03:d3:dd:8a:18:ab:0e:c9:42:71:cb:ec:
e8:ba:c8:7a:f6:54:ff:a7:93:51:43:8a:8b:d6:64:
03:59:34:6a:85:ee:aa:cb:3e:55:34:4d:f7:14:aa:
65:c3:fb:30:b1:16:9c:b8:c9:91:46:28:20:09:46:
9c:db:a8:1c:ca:44:d5:09:2b:cc:64:df:06:d3:fb:
16:dc:f3:c6:0e:7b:32:50:d8:37:fa:a3:38:5a:d2:
e5:9d:ec:8c:ac:4a:c1:57:bd:97:cd:1a:8e:5d:44:
35:bb:44:d8:16:ce:24:c7:f9:1e:a3:67:0c:a4:11:
c7:ef:8c:27:f9:f2:c6:23:33:63:56:e8:b7:84:a1:
53:ad:96:51:87:28:07:3e:38:70:6c:89:1e:20:8b:
a8:1a:22:a1:82:b5:2b:e2:6c:d3:37:19:82:6e:2f:
c7:cd:ec:83:39:d9:91:0c:eb:cb:75:90:cd:68:48:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:EB:CC:29:4D:39:4F:D3:74:CA:7B:2F:21:63:D5:CB:E0:AB:77
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:35:a6:f5:f6:85:7a:59:9f:65:0c:19:95:2b:17:bc:bf:df:
69:a1:01:37:27:df:0b:76:b2:a9:f4:b6:d9:b5:ae:57:8d:f5:
b5:98:65:33:d3:ff:a2:ee:3a:eb:38:ac:b1:f9:74:1d:d0:f9:
03:40:11:64:53:e6:17:ba:19:d5:0e:70:8a:6c:c9:dd:ee:08:
47:ea:36:28:52:49:30:be:f3:c4:85:ed:c2:e6:c4:43:f2:0c:
33:55:b7:88:45:97:85:13:e5:30:94:d4:ae:ba:0c:32:38:f8:
7b:28:31:5e:95:dc:33:ce:3f:28:f5:14:b4:4d:af:81:9f:16:
0c:32:09:ae:7f:a4:27:e0:41:df:16:fb:61:de:b8:6b:7f:23:
9c:f5:84:89:18:76:37:e1:82:c9:20:ee:d5:b0:07:bd:7d:79:
43:0a:88:b1:95:d8:88:bc:3c:43:e4:42:cd:2c:7c:17:27:7f:
b7:bc:9e:e2:35:70:ee:9f:69:f5:b1:76:60:5d:8e:a8:b7:6c:
66:9e:70:c9:de:34:1b:e5:fb:12:87:24:51:b9:90:e7:2d:44:
51:42:01:79:a0:5c:c3:ba:ae:bc:69:5b:6f:f4:de:88:fe:34:
7b:25:f9:a4:e4:18:68:b6:c3:a4:e4:47:7b:6e:ff:7b:b8:93:
55:54:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:44 2026 by rpki-client