
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: PUNviLJohhsA8UiC/8vx46CqUi+f0Ibdn9FD3czIjHg=
Subject key identifier: 46:06:D5:C4:F9:1D:B7:04:02:EF:38:0A:AB:35:B4:C6:74:B0:9C:50
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019E1C7D586E7A5C064E52C29129B758DEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1620
Signing time: Tue 12 May 2026 14:00:37 +0000
Manifest this update: Tue 12 May 2026 14:00:37 +0000
Manifest next update: Wed 13 May 2026 14:00:37 +0000
Files and hashes: 1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: nHCUp3MZazu69rcoTceaIyA5mhO3RrvaMOvra5VssQA=)
2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
3: F6ItjWva3f1OheuFpaWQqZIl8-A.roa (hash: k0FVOFBY6Wpq6IM4bLDDBEm5uiTQoudoYWJB3bMH7aY=)
4: GcPrPHGVncEuFnODCW4ngX3ZQE8.roa (hash: 9U3tDv9Npae/FEnqBXW/Bi1yx4I34R4F2zK1MTG5y2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:58:6e:7a:5c:06:4e:52:c2:91:29:b7:58:de:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: May 12 14:00:37 2026 GMT
Not After : May 13 14:00:37 2026 GMT
Subject: CN=4606d5c4f91db70402ef380aab35b4c674b09c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:87:82:92:55:03:03:53:ce:01:3a:08:3a:
60:7d:c7:b2:18:07:1f:0c:4a:42:2c:ff:9a:f0:3f:
ce:ee:62:3a:52:79:c5:02:23:f3:d5:56:4f:1a:70:
8e:00:cb:de:62:30:5f:8d:58:ec:19:f1:af:30:6e:
9e:87:11:b4:12:6b:b6:c9:50:e8:9f:6d:1a:24:15:
3a:b9:35:27:82:2b:78:cb:13:5a:9d:58:86:18:e6:
c9:2b:e9:01:dc:90:c4:f4:2a:7e:3a:5e:1f:4e:6a:
7f:85:9d:1a:66:46:d7:08:ac:7f:ce:92:fc:3e:43:
e8:6b:fc:23:71:5d:08:2b:b3:48:c7:71:e1:38:e4:
ee:82:a3:47:a9:49:06:36:d1:2e:1e:80:e9:44:bb:
b6:32:b5:e6:03:08:65:8b:43:eb:c5:77:60:d0:e2:
d0:52:dd:da:13:f6:28:81:b4:bc:34:b2:80:fe:b7:
b0:1e:6e:2b:7b:56:94:0e:0a:4c:da:af:a3:ea:00:
f7:45:ef:bf:21:29:81:f8:6f:75:9c:fd:09:2b:57:
66:a3:e2:05:9d:5b:e0:dc:27:c2:ef:17:d7:71:e1:
a3:6c:80:74:84:51:20:27:98:ed:0e:07:e4:a0:39:
52:ce:9c:88:8d:06:29:9c:c8:f1:98:c1:23:7c:0c:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:D5:C4:F9:1D:B7:04:02:EF:38:0A:AB:35:B4:C6:74:B0:9C:50
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:bb:0d:75:56:74:48:07:72:d4:7b:53:5f:04:e8:db:e4:
2d:5e:db:25:39:5c:0a:c2:59:22:58:d5:96:80:c4:7a:a0:7e:
d6:f8:ea:1c:72:f6:02:3c:cf:7e:8d:09:24:a3:67:77:39:11:
6f:4e:35:cf:fd:51:cb:3a:02:de:42:f3:c1:28:25:e3:aa:4c:
a5:20:ec:6d:05:4b:39:0c:e0:24:73:c4:f9:88:2c:fd:00:f8:
f2:05:35:c4:03:c5:81:5a:c2:b5:73:9c:61:bb:d2:eb:66:77:
14:30:e0:25:fa:ab:d7:e5:16:94:81:a5:e7:94:8e:43:0e:4d:
24:6f:4a:e9:b1:74:66:c6:7b:43:cc:52:48:f0:af:f1:06:e9:
d3:56:a7:64:11:00:c5:6c:db:cd:a0:c7:f6:db:8a:1d:fb:76:
77:87:22:d6:a4:fd:66:fa:f2:72:e0:96:ad:f4:a1:c8:d0:7d:
35:93:f8:04:c7:46:1a:59:b0:c1:01:90:0f:42:c5:01:39:5b:
52:5f:4c:5f:14:c5:c0:f4:03:c5:c2:aa:89:50:ae:8d:87:90:
6f:c5:65:fd:c6:52:05:4b:5b:34:05:39:98:bb:12:75:29:db:
92:65:71:c6:7d:61:2c:67:99:95:06:b3:f6:46:bc:95:61:6c:
88:b9:94:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfVhuelwGTlLCkSm3WN7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz
Mzc5NDMwHhcNMjYwNTEyMTQwMDM3WhcNMjYwNTEzMTQwMDM3WjAzMTEwLwYDVQQD
Eyg0NjA2ZDVjNGY5MWRiNzA0MDJlZjM4MGFhYjM1YjRjNjc0YjA5YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nGHgpJVAwNTzgE6CDpgfceyGAcf
DEpCLP+a8D/O7mI6UnnFAiPz1VZPGnCOAMveYjBfjVjsGfGvMG6ehxG0Emu2yVDo
n20aJBU6uTUngit4yxNanViGGObJK+kB3JDE9Cp+Ol4fTmp/hZ0aZkbXCKx/zpL8
PkPoa/wjcV0IK7NIx3HhOOTugqNHqUkGNtEuHoDpRLu2MrXmAwhli0PrxXdg0OLQ
Ut3aE/YogbS8NLKA/rewHm4re1aUDgpM2q+j6gD3Re+/ISmB+G91nP0JK1dmo+IF
nVvg3CfC7xfXceGjbIB0hFEgJ5jtDgfkoDlSzpyIjQYpnMjxmMEjfAwWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYG1cT5HbcEAu84Cqs1tMZ0sJxQMB8GA1UdIwQY
MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt
NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5
LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpe7DXVW
dEgHctR7U18E6NvkLV7bJTlcCsJZIljVloDEeqB+1vjqHHL2AjzPfo0JJKNndzkR
b041z/1RyzoC3kLzwSgl46pMpSDsbQVLOQzgJHPE+Ygs/QD48gU1xAPFgVrCtXOc
YbvS62Z3FDDgJfqr1+UWlIGl55SOQw5NJG9K6bF0ZsZ7Q8xSSPCv8Qbp01anZBEA
xWzbzaDH9tuKHft2d4ci1qT9ZvrycuCWrfShyNB9NZP4BMdGGlmwwQGQD0LFATlb
Ul9MXxTFwPQDxcKqiVCujYeQb8Vl/cZSBUtbNAU5mLsSdSnbkmVxxn1hLGeZlQaz
9ka8lWFsiLmU+g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:21 2026 by rpki-client