Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: rTTnjLOn2h2UpDiNrRMTdBCEUZz+0PJ3BW2KKnQ56ac=
Subject key identifier: 28:00:B2:75:DE:6C:E6:E2:7E:C0:B9:06:E6:52:27:77:D6:EA:25:A1
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019D9962CE65DDD83E0AF4E24517F7A1D22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1588
Signing time: Fri 17 Apr 2026 03:01:22 +0000
Manifest this update: Fri 17 Apr 2026 03:01:22 +0000
Manifest next update: Sat 18 Apr 2026 03:01:22 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: Z1oA+tyy0MfnpIGRHbXWzZGY/WoNaPE/T/d7FmjYwGY=)
2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=)
3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ce:65:dd:d8:3e:0a:f4:e2:45:17:f7:a1:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Apr 17 03:01:22 2026 GMT
Not After : Apr 18 03:01:22 2026 GMT
Subject: CN=2800b275de6ce6e27ec0b906e6522777d6ea25a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:45:6e:41:51:30:0f:3b:3f:0d:6b:75:d4:
c0:21:ea:44:24:fb:73:a5:76:f7:af:aa:6d:14:16:
a7:2b:bc:29:d6:9b:22:35:70:c8:9a:dd:66:b0:39:
73:2d:f3:b2:28:08:33:74:b8:52:13:1d:8b:88:c9:
b3:c3:67:eb:dc:23:94:2f:57:56:59:a1:b8:8a:a6:
3d:47:9e:82:45:6c:35:f9:f6:6b:83:21:45:92:3a:
f5:bb:59:89:9a:64:18:d6:94:a4:78:a5:71:26:87:
91:33:63:c4:1d:e9:70:23:cf:c4:9a:50:f4:01:ea:
db:80:89:2d:63:99:e4:58:41:16:66:e7:fd:2c:7e:
d4:1d:5b:90:ea:6f:06:fb:05:32:f8:c7:66:df:31:
b4:8e:e2:16:a0:96:a2:d2:90:57:0f:fb:31:94:5c:
9f:08:00:9a:74:49:b4:e4:db:19:ca:51:65:ef:f4:
15:e5:ee:92:f7:67:26:c6:97:68:41:74:c9:74:e0:
b1:d3:ec:dd:7f:0e:d3:73:39:71:03:57:0c:6b:4b:
26:ba:53:d5:ca:79:2c:47:2f:2e:91:b2:9f:0a:9a:
d4:31:a2:e4:07:bb:48:0e:86:95:c1:29:95:b9:24:
92:06:59:36:0b:1d:1f:45:c3:6e:ec:8f:67:ab:4a:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:B2:75:DE:6C:E6:E2:7E:C0:B9:06:E6:52:27:77:D6:EA:25:A1
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2c:a4:d1:18:8d:71:4d:ed:4c:15:10:a5:96:f6:ac:99:29:
78:27:96:33:70:b4:f9:b5:a3:67:c6:7e:eb:af:94:43:c7:63:
bd:b3:35:a8:71:7e:67:9a:5a:b4:b7:01:8c:5a:29:a1:65:7d:
c8:a1:8f:7d:53:af:da:a2:de:16:0b:2e:2a:a9:e1:7e:be:e8:
8d:de:de:2a:9b:eb:70:b7:33:df:ac:b9:b9:b2:44:72:c3:60:
97:59:4a:25:0d:77:58:0b:9e:d1:23:9c:37:38:75:d1:c2:10:
40:df:83:80:82:01:76:6d:8f:bc:8c:42:a8:be:b9:dc:10:05:
cb:71:5e:66:11:c3:5e:e8:29:93:40:1f:8c:38:27:be:a5:cf:
45:08:f9:f3:72:91:3d:eb:1a:72:54:3f:a2:c5:ae:9d:29:73:
2b:86:75:ad:b5:fc:cb:de:9d:b7:e0:ab:b1:aa:30:a6:df:f0:
80:e4:6b:fb:9e:02:4b:3e:dc:2f:7d:1f:16:1c:c5:32:70:67:
30:ef:c8:d3:d7:91:9b:b2:f1:7d:73:0c:31:48:d1:55:85:68:
27:ac:34:0c:2c:28:bd:38:cb:3f:63:6a:39:ff:5e:9b:11:ec:
6f:f4:a4:92:c3:39:a6:84:9b:66:aa:b2:bc:81:5f:6d:44:9b:
0d:94:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:28 2026 by rpki-client