Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: dSk/cfldkLB3CekqeK4KSTIQ3vrSWqT7yw6z1wCu7pc=
Subject key identifier: 67:FF:B1:BE:A0:84:27:3C:FF:D8:C7:82:2C:52:5B:C2:29:88:BB:42
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019DA4F8626CA599B0CAD905D58F9700C455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 158E
Signing time: Sun 19 Apr 2026 09:00:34 +0000
Manifest this update: Sun 19 Apr 2026 09:00:34 +0000
Manifest next update: Mon 20 Apr 2026 09:00:34 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: FnOO6MmxDqe+8sE/dY+hP3s7Ey+Z5HlOruatvA7Le0w=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:62:6c:a5:99:b0:ca:d9:05:d5:8f:97:00:c4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Apr 19 09:00:34 2026 GMT
Not After : Apr 20 09:00:34 2026 GMT
Subject: CN=67ffb1bea084273cffd8c7822c525bc22988bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:82:2b:25:31:c8:54:cb:ad:5c:00:ba:b5:
60:d7:93:22:cc:73:74:b1:16:f5:76:af:c0:c3:75:
82:bc:3c:d2:67:05:d9:17:08:f6:f3:cb:3d:ea:47:
93:14:04:71:d5:de:06:e8:26:f6:13:4b:bc:2e:71:
e3:21:94:33:f3:d7:8a:41:86:f2:42:bd:9e:3e:c2:
06:d6:4b:a0:d9:bd:02:2a:96:06:91:24:4d:76:90:
43:cb:cc:84:51:d5:dc:ea:9d:1c:a8:6f:85:33:39:
a6:01:00:4c:56:17:fa:49:f5:f0:2f:27:b2:ac:83:
63:2e:04:17:01:7b:ec:1c:f2:3d:56:75:6f:69:1c:
29:0a:84:ee:ce:a0:9e:e5:8f:fb:67:e7:d3:11:3e:
44:c5:79:6c:9d:28:27:39:8a:4f:a4:48:4c:6f:3a:
26:3a:37:c8:27:02:01:c4:e3:d9:b0:cf:d8:d7:df:
37:9f:c2:80:aa:7a:c9:da:ee:78:81:8a:f5:4a:c8:
95:9a:76:a1:e9:11:72:64:bd:70:b8:b5:ad:a9:8f:
5a:92:4e:17:1c:e6:e5:81:79:88:8e:16:5e:fb:5d:
28:09:19:ca:e6:1c:f2:c9:16:a0:45:32:af:78:58:
71:d5:39:c3:28:1b:0f:c7:ee:29:2c:ee:eb:90:3d:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:B1:BE:A0:84:27:3C:FF:D8:C7:82:2C:52:5B:C2:29:88:BB:42
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:f0:e6:1e:63:fe:ad:2a:46:39:2f:50:de:62:ed:c6:b4:
cd:04:99:b0:2c:96:45:a4:12:4a:5d:31:44:a7:b7:da:0f:2d:
1f:c1:da:87:f5:4e:06:9d:9a:54:05:a3:a3:b9:50:be:d9:f0:
f6:a5:48:b5:2b:d2:3f:d8:d7:a8:28:af:fd:59:f8:44:b5:12:
cd:ad:56:72:ac:20:26:33:2b:d5:25:76:04:80:a2:09:81:cf:
28:6c:3f:7b:52:20:98:2a:d2:ea:0c:d2:c3:d3:93:2c:ab:24:
23:08:ea:8e:20:19:d6:5a:20:24:84:bf:b9:e4:2e:63:80:0b:
92:0e:09:bc:65:25:e0:50:2b:1d:be:87:d1:97:69:9d:50:e9:
66:b8:14:11:fc:f3:ba:87:4d:59:f3:ec:64:c9:ee:b2:bd:ad:
ac:90:ea:28:2e:66:ed:d1:95:c6:d3:c5:d0:da:e1:53:82:aa:
35:7f:14:1f:b0:7b:da:05:87:ee:8a:b4:ed:48:e7:a5:33:0b:
e6:48:5e:01:10:bb:ee:91:97:0e:61:a0:7c:95:8e:c0:a7:02:
7b:05:fc:68:89:5b:40:a4:39:ef:22:6b:59:c2:43:f4:1c:8a:
38:04:26:17:e5:11:95:88:69:02:6d:f8:f9:54:f7:40:9c:2f:
96:5b:f5:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+GJspZmwytkF1Y+XAMRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjYwNDE5MDkwMDM0WhcNMjYwNDIwMDkwMDM0WjAzMTEwLwYDVQQD
Eyg2N2ZmYjFiZWEwODQyNzNjZmZkOGM3ODIyYzUyNWJjMjI5ODhiYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvWCKyUxyFTLrVwAurVg15MizHN0
sRb1dq/Aw3WCvDzSZwXZFwj288s96keTFARx1d4G6Cb2E0u8LnHjIZQz89eKQYby
Qr2ePsIG1kug2b0CKpYGkSRNdpBDy8yEUdXc6p0cqG+FMzmmAQBMVhf6SfXwLyey
rINjLgQXAXvsHPI9VnVvaRwpCoTuzqCe5Y/7Z+fTET5ExXlsnSgnOYpPpEhMbzom
OjfIJwIBxOPZsM/Y1983n8KAqnrJ2u54gYr1SsiVmnah6RFyZL1wuLWtqY9akk4X
HOblgXmIjhZe+10oCRnK5hzyyRagRTKveFhx1TnDKBsPx+4pLO7rkD2w5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf/sb6ghCc8/9jHgixSW8IpiLtCMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtXw5h5j
/q0qRjkvUN5i7ca0zQSZsCyWRaQSSl0xRKe32g8tH8Hah/VOBp2aVAWjo7lQvtnw
9qVItSvSP9jXqCiv/Vn4RLUSza1WcqwgJjMr1SV2BICiCYHPKGw/e1IgmCrS6gzS
w9OTLKskIwjqjiAZ1logJIS/ueQuY4ALkg4JvGUl4FArHb6H0ZdpnVDpZrgUEfzz
uodNWfPsZMnusr2trJDqKC5m7dGVxtPF0NrhU4KqNX8UH7B72gWH7oq07UjnpTML
5kheARC77pGXDmGgfJWOwKcCewX8aIlbQKQ57yJrWcJD9ByKOAQmF+URlYhpAm34
+VT3QJwvllv1vg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:40 2026 by rpki-client