Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: OPbNkhUHAPdI3P37iXGtZ9zpJhys8IoPzxIxWQySwQE=
Subject key identifier: BE:59:5F:49:99:A3:B6:A1:50:B9:71:FA:1E:51:E2:59:DA:D7:A0:40
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019E1D9095173A6942A010D68EABBDA57C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 109B
Signing time: Tue 12 May 2026 19:01:14 +0000
Manifest this update: Tue 12 May 2026 19:01:14 +0000
Manifest next update: Wed 13 May 2026 19:01:14 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: UbFYauONG2vx+2ANQkBMdbc+u8qhIYqaurklcTGNI2g=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:95:17:3a:69:42:a0:10:d6:8e:ab:bd:a5:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: May 12 19:01:14 2026 GMT
Not After : May 13 19:01:14 2026 GMT
Subject: CN=be595f4999a3b6a150b971fa1e51e259dad7a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:ae:55:72:e4:c9:4c:fc:92:9d:29:58:17:
f6:48:47:1a:56:9b:f4:e8:6a:13:03:f2:18:72:a4:
7d:02:fd:6b:d2:3e:ed:be:97:ee:fc:01:a0:6d:33:
95:e7:6c:1d:67:b8:64:54:e1:bd:fe:a8:b5:31:22:
b1:12:f2:35:78:be:bc:bc:29:fb:3a:53:8d:b3:6b:
f3:a9:7f:ac:3b:ac:0f:dc:b3:63:c2:08:0e:3b:d6:
97:ca:7e:30:32:e1:92:0f:8f:46:a7:47:d5:47:9c:
4e:5a:fa:5b:8a:8c:c1:0e:78:10:c4:9e:60:27:aa:
e3:dc:64:a1:68:39:1a:e3:09:d8:63:43:14:7e:20:
ca:c3:fe:27:30:a6:d2:06:a1:6e:ff:9e:e1:18:b3:
9a:7b:53:c1:26:eb:6c:92:44:06:f8:db:a5:64:e4:
3f:da:e6:d8:5a:a3:c5:ae:e3:12:d4:80:0d:16:76:
cb:f1:1a:6a:d5:e8:42:d3:78:c7:c1:53:e6:6c:e1:
9d:cd:53:90:e7:c3:5e:e3:3e:2d:7b:9b:0e:94:72:
be:ec:44:e0:8e:b1:61:54:9b:2b:d2:84:b6:61:e4:
27:76:dc:89:0b:47:dc:87:94:ca:ac:85:98:f2:9b:
39:6a:e4:1f:4b:56:58:72:8c:2d:e9:b4:73:d4:ac:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:5F:49:99:A3:B6:A1:50:B9:71:FA:1E:51:E2:59:DA:D7:A0:40
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bc:70:5c:3e:9b:7a:62:c9:59:54:0e:2b:80:e9:bb:31:1d:
e5:f9:9b:a1:7d:4a:fc:ff:bd:66:02:fd:5b:06:a2:4a:52:32:
d8:cc:9b:5b:d7:9f:91:e3:b1:07:61:f4:e2:f1:b4:03:2c:5b:
69:6c:34:d4:4c:1e:2f:3d:fb:50:57:1e:6d:86:f8:17:18:f1:
06:a9:5b:82:d3:c5:c4:2b:ed:22:2e:3f:1d:6b:2a:6d:ab:c3:
0b:b9:45:2c:0f:1c:93:50:6a:18:53:b4:2b:16:0b:57:f8:0a:
aa:5b:00:94:79:4e:00:07:7b:55:30:ac:73:8b:51:e9:b7:d6:
ed:d9:62:25:e9:54:85:1c:96:0e:07:1e:b4:bd:ee:6c:b6:f5:
3c:f3:07:0f:9b:07:2e:34:1a:dc:28:b5:02:fb:1d:41:46:2b:
be:71:bd:71:b7:d6:73:da:a6:f1:63:63:a4:51:d7:1e:aa:db:
89:81:3b:41:11:21:a9:2d:ee:85:7a:7b:ab:b8:3f:ca:63:be:
54:64:82:0c:b5:b7:21:98:a0:21:85:c9:68:fb:86:c7:e4:71:
da:ff:5a:ea:2f:db:f9:d4:6c:40:d9:f8:66:64:ff:91:3b:9f:
d2:de:cd:cf:02:12:5c:99:32:a6:b1:7e:8f:42:32:86:0f:08:
e4:79:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:17 2026 by rpki-client