Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: bXH/2dsiih7FC5ZbuSU85NajB0F4w1IMxYvlEP28Vxs=
Subject key identifier: 74:6C:00:4E:A0:50:E3:74:9D:73:6B:16:7E:B8:43:9B:10:0B:24:0A
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019EBEEC648C0A33E8B48AEC7639DD967939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1620
Signing time: Sat 13 Jun 2026 03:00:23 +0000
Manifest this update: Sat 13 Jun 2026 03:00:23 +0000
Manifest next update: Sun 14 Jun 2026 03:00:23 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 21HZEL+wGZcVyoC9AITDr+W2AFUAQZuTG9pDcBYvDEA=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:64:8c:0a:33:e8:b4:8a:ec:76:39:dd:96:79:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jun 13 03:00:23 2026 GMT
Not After : Jun 14 03:00:23 2026 GMT
Subject: CN=746c004ea050e3749d736b167eb8439b100b240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:3d:1e:55:6b:22:cc:e1:73:f4:f5:70:bc:
d8:1d:39:dc:ea:17:41:fc:03:0f:57:0b:1f:0b:ec:
f5:15:16:f3:9d:4f:d6:51:e5:ac:6b:8c:a9:71:90:
38:44:cb:5c:82:8f:02:06:49:20:55:ac:94:91:03:
ba:33:7c:1c:e6:fe:01:7d:3e:25:ca:2e:c0:4d:ac:
54:97:70:94:e8:9a:56:59:ee:9e:2a:12:ac:b7:e4:
f9:c0:47:5c:2b:2e:fa:a5:7f:1d:fd:9f:33:b3:ad:
ee:2f:9d:f3:74:79:7b:ce:a7:f1:76:98:3d:f9:58:
a5:00:bf:6c:9b:ad:0a:c5:7d:e0:b5:74:9e:e0:ba:
bd:ad:0a:af:4e:18:9d:24:a9:9a:08:72:ab:24:29:
1e:43:30:04:a9:c8:b1:77:d0:bf:e0:3f:66:d7:de:
66:aa:06:0b:06:cd:9c:26:e5:23:ff:86:c5:fb:45:
25:4f:42:00:93:db:87:2f:35:83:97:80:ae:58:a9:
bb:37:f4:a0:7a:ab:df:23:ab:36:92:76:19:6b:e3:
36:5a:fe:19:4e:46:bd:ca:5b:42:23:51:12:37:88:
1a:7e:1b:1e:53:a1:1a:87:91:42:78:d0:0b:d9:a0:
f8:1d:80:87:b3:c5:73:cc:e8:5a:e4:39:ae:2d:bf:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:00:4E:A0:50:E3:74:9D:73:6B:16:7E:B8:43:9B:10:0B:24:0A
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:6d:c8:c4:98:68:40:57:04:1e:9b:60:85:13:f0:46:6e:
00:61:71:67:0c:58:b7:b1:0a:7c:6b:27:b9:7b:cd:72:d8:16:
07:5d:16:b8:e0:22:5d:3d:5c:4a:5e:6f:10:36:5c:10:99:10:
18:1b:26:cd:28:39:b1:cf:da:b9:df:13:ff:84:31:3f:64:7d:
c1:21:c5:a2:94:c0:a5:02:cf:bf:2a:bf:ea:fb:f1:3c:ca:2e:
b0:4e:14:81:dc:84:9a:8b:de:fe:8e:3b:ae:d8:0e:e3:36:66:
cd:3f:67:86:87:58:40:27:83:9b:b6:40:2d:04:83:94:51:b2:
95:10:04:8b:89:8b:b6:ea:20:53:20:2b:56:bc:a1:d7:13:a3:
cc:fb:db:d4:54:96:a0:a2:54:5f:db:06:01:3b:6e:ea:6f:13:
c4:0f:77:ca:e4:6f:4a:7d:e6:cd:99:55:e4:88:dc:59:58:32:
85:3e:11:98:f6:9f:5d:e6:8f:00:37:c0:12:2d:51:04:0a:8a:
61:f5:89:b4:ad:b7:83:1c:47:08:b6:a1:50:05:78:5c:2c:ef:
aa:85:38:ae:da:1d:61:bf:58:7f:a1:dc:da:56:c0:27:f6:0b:
71:84:cc:f2:0f:58:25:9e:a4:b9:ac:83:8e:61:0e:5a:f2:29:
0b:da:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:15 2026 by rpki-client