Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: aV6UNJ7FhD0ghR0rrO1DisQU7yFt0S1Cd3nOcetZsi0=
Subject key identifier: CD:0E:08:5D:05:C6:24:33:F3:5F:0F:4D:59:1D:34:DF:29:C6:C3:8D
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019D9C9AB65E29680327E190EC225903FE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 025E
Signing time: Fri 17 Apr 2026 18:01:18 +0000
Manifest this update: Fri 17 Apr 2026 18:01:18 +0000
Manifest next update: Sat 18 Apr 2026 18:01:18 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: 02Sh7ApJPzqf9A+F19kXUVDFkxJ8mqp4Um9xRJY/3OM=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:b6:5e:29:68:03:27:e1:90:ec:22:59:03:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Apr 17 18:01:18 2026 GMT
Not After : Apr 18 18:01:18 2026 GMT
Subject: CN=cd0e085d05c62433f35f0f4d591d34df29c6c38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:3f:9e:14:c2:19:da:1b:76:7f:a8:41:f7:
54:bf:85:ad:0e:7c:6f:37:c7:4b:cf:14:08:da:01:
66:17:bd:57:a1:31:5d:12:54:3f:b2:30:e5:36:67:
c6:5d:0e:58:b3:36:de:0c:3f:ec:75:13:4d:fc:15:
6d:de:b8:5a:64:2b:9d:bc:55:5f:03:44:c9:c9:f3:
a6:0c:32:d6:eb:00:74:d8:54:e2:22:67:e6:51:25:
92:6f:b9:35:04:bf:1e:25:b2:47:5f:93:6f:19:b7:
a9:60:5d:bd:eb:8d:a8:f7:68:0d:7e:bd:82:f2:4d:
ba:59:41:0b:0a:96:1f:75:eb:0d:76:31:18:9c:d3:
b2:df:9f:96:0f:ed:f9:04:e8:31:07:4b:87:cf:38:
6f:aa:51:d9:23:33:d5:73:63:9b:96:57:e4:6a:e9:
87:4f:c3:45:f0:49:a7:94:15:db:8f:1b:4f:88:95:
02:61:f4:fa:f4:bb:61:ab:37:6f:3e:40:da:2b:c1:
23:a6:bd:b6:cb:24:f6:17:b0:33:43:dd:18:ad:9f:
82:05:92:cf:bb:e8:17:b5:cb:3e:69:f2:d7:69:7a:
20:2d:d9:d7:1d:17:7d:5e:1c:ec:0f:b7:cd:0c:d4:
9b:c4:3d:67:3e:70:3c:f9:2a:10:f8:c3:63:6c:a6:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:08:5D:05:C6:24:33:F3:5F:0F:4D:59:1D:34:DF:29:C6:C3:8D
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:07:45:7b:a3:02:10:0c:18:1c:f0:bc:1a:70:ad:98:f6:
38:12:0a:a4:9a:9a:ea:a2:56:69:85:c0:70:82:25:ed:11:4b:
8c:ba:68:c8:51:69:17:98:78:14:5f:d5:36:ed:01:75:3b:51:
5c:20:2c:61:c0:3f:79:7a:bb:3c:8a:c7:c6:30:15:c1:02:db:
d7:82:1c:fb:15:6c:a4:27:f4:53:12:3a:a3:c2:e3:c2:67:61:
a5:d7:c6:04:a8:26:1a:8d:0b:07:58:19:83:59:4f:4e:63:2d:
44:81:ba:de:91:76:07:08:ee:d8:1f:92:49:1e:59:de:6a:85:
ee:d4:c8:1d:fb:eb:e7:d6:c5:b5:19:d8:72:41:f1:ba:5c:aa:
10:ac:fa:41:1b:73:fe:08:ae:8c:53:81:14:b5:9f:8f:62:c1:
72:a9:21:bb:05:29:6a:ff:b4:8d:9c:77:e3:f5:2a:01:a1:b3:
c8:44:8f:28:1a:37:02:2d:2b:73:10:97:75:7f:63:53:65:d4:
b9:02:f1:02:f9:b1:05:8b:84:74:2d:a4:3d:d6:db:fc:6f:78:
42:cb:3d:8e:1d:fd:43:ed:c9:9f:01:3c:92:23:68:4d:6d:e8:
2d:89:db:e2:f5:21:28:00:4f:b4:42:dc:57:a9:65:d9:0f:9a:
56:f1:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:37:38 2026 by rpki-client