Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: F6AHf/3jEP3jEJEVNPL7q24Rkj91XeaOQ88vEOyPJ0s=
Subject key identifier: 65:C6:58:D7:0E:88:4E:1C:AE:88:20:69:52:3E:6B:CD:0B:03:45:7D
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019FA8999D3AD4B56A9AA79F1EEB3ACCD407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1699
Signing time: Tue 28 Jul 2026 12:01:07 +0000
Manifest this update: Tue 28 Jul 2026 12:01:07 +0000
Manifest next update: Wed 29 Jul 2026 12:01:07 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: vlruVFMXSdVfc1b+7PQBcHvZId/faXQj7bTiG0TiyLo=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:9d:3a:d4:b5:6a:9a:a7:9f:1e:eb:3a:cc:d4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jul 28 12:01:07 2026 GMT
Not After : Jul 29 12:01:07 2026 GMT
Subject: CN=65c658d70e884e1cae882069523e6bcd0b03457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:8e:46:55:4b:d5:27:d8:16:16:a4:d3:38:
79:eb:b2:00:c3:96:96:d8:d1:ef:02:ec:43:c2:33:
53:81:7a:96:d0:54:4d:1d:29:c5:dd:63:ca:9d:b2:
08:1a:fe:fa:96:e5:f6:32:e2:42:c9:ae:b9:d1:53:
36:84:3c:4a:91:d0:2e:72:cf:54:6d:f9:ca:7a:c3:
8a:d8:f1:66:84:4f:7d:87:d0:a5:9e:a3:65:9d:de:
20:75:83:75:69:dc:8d:af:f8:f8:2f:6c:ee:9a:e7:
74:a7:a1:5e:4b:08:9e:49:8f:95:52:14:53:7c:7e:
d5:05:83:29:41:40:c2:67:a1:31:0c:e1:86:86:d1:
03:21:a5:18:15:da:6f:d3:8a:90:5f:ed:6f:a4:46:
b5:e0:64:08:47:01:71:ce:29:b7:a9:c2:17:ec:00:
96:66:f3:e1:cb:ad:5d:7c:a7:0b:64:36:0f:63:bb:
68:bc:33:86:3f:13:54:2b:f1:46:b0:93:3c:86:5d:
e6:20:d5:f5:05:18:17:b9:0c:fb:78:9f:e1:64:8d:
c4:10:8a:44:74:5f:73:1a:e1:1d:0a:32:c0:65:02:
6e:c3:aa:3d:86:3e:43:c9:f1:94:14:ca:dc:3c:b3:
42:23:d7:5b:ab:27:84:6f:9f:b9:cc:cf:1b:3b:3d:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:58:D7:0E:88:4E:1C:AE:88:20:69:52:3E:6B:CD:0B:03:45:7D
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:77:66:6a:be:51:18:4d:07:40:df:92:44:80:cf:37:1f:2b:
f8:8b:2a:15:52:ae:e1:02:00:da:8f:6f:cb:2d:de:32:df:ac:
64:23:ff:03:2c:64:3b:49:50:c4:3d:40:dd:88:7a:8b:c4:21:
04:fe:63:3f:7d:08:3e:0c:73:dd:0a:24:fb:fe:5d:3d:a0:61:
df:b8:ab:45:fd:97:b4:16:b4:ad:54:e4:22:73:b7:8d:82:1d:
a0:11:a7:8f:00:ef:30:14:f5:1b:e8:1f:81:37:4c:7a:51:8d:
9a:e6:56:31:65:a4:a6:8d:b0:6e:43:80:7c:57:3e:8a:1a:5e:
a5:2c:0b:fc:67:f0:0c:50:cc:78:de:18:23:43:17:32:98:db:
9a:17:c0:e0:7e:94:4d:e8:13:15:fe:56:55:e3:17:a3:bb:65:
d8:a6:25:a5:0f:af:54:31:22:39:62:c8:0a:0f:5b:ae:12:5b:
9a:80:74:af:e2:e2:9f:5d:78:cb:ca:a3:bb:09:9d:03:cb:c2:
1c:d4:bb:d5:b8:55:ab:e9:75:11:4a:8c:32:25:0a:b8:30:26:
12:8a:6b:ac:f9:33:1e:61:22:d4:3b:27:65:59:4c:e2:75:18:
72:f6:37:3b:ff:d3:38:c0:d1:5d:24:0b:1a:c9:5d:b0:fd:76:
5b:32:f5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omZ061LVqmqefHus6zNQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjYwNzI4MTIwMTA3WhcNMjYwNzI5MTIwMTA3WjAzMTEwLwYDVQQD
Eyg2NWM2NThkNzBlODg0ZTFjYWU4ODIwNjk1MjNlNmJjZDBiMDM0NTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrKORlVL1SfYFhak0zh567IAw5aW
2NHvAuxDwjNTgXqW0FRNHSnF3WPKnbIIGv76luX2MuJCya650VM2hDxKkdAucs9U
bfnKesOK2PFmhE99h9ClnqNlnd4gdYN1adyNr/j4L2zumud0p6FeSwieSY+VUhRT
fH7VBYMpQUDCZ6ExDOGGhtEDIaUYFdpv04qQX+1vpEa14GQIRwFxzim3qcIX7ACW
ZvPhy61dfKcLZDYPY7tovDOGPxNUK/FGsJM8hl3mINX1BRgXuQz7eJ/hZI3EEIpE
dF9zGuEdCjLAZQJuw6o9hj5DyfGUFMrcPLNCI9dbqyeEb5+5zM8bOz1wOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXGWNcOiE4croggaVI+a80LA0V9MB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHdmar5R
GE0HQN+SRIDPNx8r+IsqFVKu4QIA2o9vyy3eMt+sZCP/AyxkO0lQxD1A3Yh6i8Qh
BP5jP30IPgxz3Qok+/5dPaBh37irRf2XtBa0rVTkInO3jYIdoBGnjwDvMBT1G+gf
gTdMelGNmuZWMWWkpo2wbkOAfFc+ihpepSwL/GfwDFDMeN4YI0MXMpjbmhfA4H6U
TegTFf5WVeMXo7tl2KYlpQ+vVDEiOWLICg9brhJbmoB0r+Lin114y8qjuwmdA8vC
HNS71bhVq+l1EUqMMiUKuDAmEoprrPkzHmEi1DsnZVlM4nUYcvY3O//TOMDRXSQL
GsldsP12WzL1Xg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:33 2026 by rpki-client