Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: jJduIhd4IwZitObNVWaHpFcFkIzUG57Vshpcvlwbbag=
Subject key identifier: AE:FF:9C:26:00:E8:61:40:6C:B5:98:7A:A7:2F:D8:F0:BC:42:83:C4
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019E1C7D84A0E9404ABF7F9B4D04D9491E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 14:00:48 +0000
Manifest this update: Tue 12 May 2026 14:00:48 +0000
Manifest next update: Wed 13 May 2026 14:00:48 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: YqylSXtoCnljQ/MYPGxhhbZVR1twTBq2clsQ09vxmqM=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:84:a0:e9:40:4a:bf:7f:9b:4d:04:d9:49:1e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: May 12 14:00:48 2026 GMT
Not After : May 13 14:00:48 2026 GMT
Subject: CN=aeff9c2600e861406cb5987aa72fd8f0bc4283c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:84:27:ca:8b:49:8a:77:72:06:e2:d0:76:
00:13:36:0c:66:a1:00:6b:06:71:d9:52:01:21:44:
3f:b5:66:77:15:d5:66:b0:9a:d0:c1:1b:62:7f:74:
07:2e:b0:ad:f7:8c:3e:64:27:3b:32:09:1e:f6:39:
f3:6e:e8:55:b7:6b:e3:08:6c:09:e6:0c:26:32:d9:
89:61:08:b6:b1:24:4e:e9:b0:b5:b0:ec:a6:ae:5e:
bf:1e:0b:7e:65:d7:56:07:61:19:7f:b8:6b:82:e9:
d7:35:d4:a7:ae:22:03:31:07:c7:c5:70:74:d0:a9:
cf:c9:a9:83:8b:81:ab:75:e9:ee:46:9a:a2:ba:3e:
ed:b9:0d:02:55:7d:53:bc:04:2e:ab:50:1f:35:3b:
65:5f:45:25:26:09:f4:3e:6a:01:05:ec:fd:2e:a4:
b3:b1:05:fc:48:21:db:b7:e8:5b:dd:cd:4f:3c:c0:
47:85:eb:2f:91:8a:ab:d0:20:6d:95:b0:7b:a5:47:
40:36:ba:8e:03:49:05:ac:36:5b:4f:ca:a2:a2:d1:
20:3d:44:58:80:e9:da:d5:d8:b9:9e:a1:36:1a:cc:
2b:45:80:ec:d4:e7:64:c5:e8:4d:04:e2:91:31:b2:
75:f5:b8:f2:53:d3:b9:b3:e6:a2:af:01:a5:4e:d2:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:9C:26:00:E8:61:40:6C:B5:98:7A:A7:2F:D8:F0:BC:42:83:C4
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:36:e1:81:2a:db:03:e3:52:47:44:d0:32:ac:9d:7e:7e:57:
c8:14:04:46:c3:d1:88:18:f9:fc:e8:b2:69:d1:d2:c9:cf:ba:
b9:00:a8:e8:93:0c:23:fc:07:7c:29:5b:44:e5:0a:39:fc:16:
50:c4:65:4f:4a:c9:99:e0:5f:b0:bb:c4:09:5e:3e:38:ae:e4:
ee:be:79:d0:a7:57:d8:e7:5d:36:dc:ce:7b:44:cb:4a:8b:ef:
c8:ff:76:d2:53:9a:a6:39:93:d5:6e:2f:a7:79:02:aa:19:ea:
f2:93:d4:e1:fc:17:b1:e2:c6:9c:d2:b5:65:58:25:b9:f5:2f:
2a:52:b4:fb:d2:fa:4d:c1:47:f4:48:f9:b1:a6:7c:86:4c:38:
61:6a:df:49:22:fe:cd:eb:59:60:85:73:89:57:c3:f5:d2:0a:
c6:2c:29:b3:e8:4b:da:ab:79:5f:2e:1f:a6:cc:ae:92:72:ff:
98:8b:3c:85:d4:ed:4b:53:f7:34:cc:77:cc:75:59:af:fd:58:
39:a1:20:86:3c:6a:2d:31:09:df:f3:e9:26:f9:f3:15:de:ca:
7d:2a:0f:d7:ca:ab:a1:34:00:7e:de:99:4f:98:93:ef:91:88:
47:bf:19:84:51:ab:f0:08:7b:33:94:8c:8b:58:c8:62:1b:14:
c3:cc:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:18 2026 by rpki-client