Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: xIMj22ExqPZaZHZgYFRURgLmrENqoyKCMxXPDXW2IeU=
Subject key identifier: C6:1F:63:15:56:9F:67:B9:58:09:C5:F4:CD:7A:A3:A4:61:D4:EE:95
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 019D9AE3C9E77A992560CBDFDB1A27C5D32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 1140
Signing time: Fri 17 Apr 2026 10:01:52 +0000
Manifest this update: Fri 17 Apr 2026 10:01:52 +0000
Manifest next update: Sat 18 Apr 2026 10:01:52 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: Z3xvaGiszeUkVh7wc38eOVrG3/valf0z9Ts/P3E1t4A=)
2: pIcqH37mWZXnad3o1d2yHDKbwH8.roa (hash: z3PK62MjV1YaS1wR+F4I8PDopJNEQIGDsxc/zrbNfnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:c9:e7:7a:99:25:60:cb:df:db:1a:27:c5:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Apr 17 10:01:52 2026 GMT
Not After : Apr 18 10:01:52 2026 GMT
Subject: CN=c61f6315569f67b95809c5f4cd7aa3a461d4ee95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:52:49:51:4b:c7:7f:bd:82:77:99:fd:35:
17:68:56:2f:ef:47:15:e3:13:57:4f:a0:88:9a:48:
71:d5:62:e5:cf:62:3e:ea:48:92:30:cc:1b:7e:ef:
4e:77:eb:e5:18:4f:00:4f:0a:84:41:12:da:fb:ed:
88:85:25:e1:2b:03:f8:34:19:ab:5a:33:5e:1e:c1:
a4:ba:92:b7:8c:1a:0d:74:92:7c:18:4a:b9:1a:4f:
c3:8c:56:01:e4:2a:04:f6:69:eb:f8:8d:07:96:a1:
99:87:7a:23:f9:e5:cf:cc:cd:71:c7:51:71:cc:82:
ee:47:7b:44:d9:87:89:bc:ca:52:06:f1:d4:ba:70:
2d:33:40:53:73:dd:a5:6c:1e:9b:84:be:ee:fc:ee:
c3:a5:2a:64:b3:99:e0:4b:a9:98:b0:f6:fe:49:40:
0a:cc:96:19:24:c8:53:be:32:a7:a6:e2:d0:42:5d:
ad:29:b2:af:56:34:96:d7:f9:d1:aa:6d:91:05:94:
1c:96:e9:4f:41:23:7d:1c:ba:80:a5:5b:73:63:83:
3f:e8:7e:9c:33:e9:ed:e4:c0:62:51:1a:44:2c:d7:
48:12:b6:57:0e:ee:b0:f9:cd:c9:35:f3:6f:66:d8:
41:67:45:cd:f6:b9:55:26:e1:cf:fe:ff:a0:be:73:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:63:15:56:9F:67:B9:58:09:C5:F4:CD:7A:A3:A4:61:D4:EE:95
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:64:ef:d4:5b:7d:7b:49:bb:3b:47:ca:75:09:3d:b0:68:05:
89:2c:f2:2f:c7:97:d7:92:c8:e7:1d:8d:e9:ea:42:7e:c6:2c:
b7:b1:6d:42:1f:9e:03:51:c5:8a:50:a7:59:a7:7d:9d:29:6b:
e6:09:bd:7d:ae:c4:93:7b:cb:8e:1f:67:27:96:37:0a:83:b0:
df:c9:3c:ec:8f:3f:7a:14:a4:b7:72:c8:3a:ad:5e:1f:cb:bd:
2f:a5:3d:55:14:3a:01:34:53:46:5f:ff:da:75:14:42:ad:8b:
38:fd:af:48:20:6a:9e:4c:f9:36:ee:ba:f1:70:a8:cd:2e:9c:
30:69:fd:47:f2:a6:a1:9a:f0:0b:06:5f:b2:9b:25:ad:0d:07:
2e:db:f1:c9:fe:e4:e9:90:8f:54:bc:96:81:f1:79:5b:7f:65:
90:12:b3:53:cd:3c:0c:60:0a:d5:9e:04:71:23:62:4e:ca:5a:
14:6c:38:d9:f2:a0:17:30:84:03:5b:12:aa:69:6c:c5:d5:2c:
75:3d:ec:22:91:d9:c9:10:8a:8a:4d:f3:bd:95:a8:04:31:9d:
f1:83:c4:f7:2a:ba:60:fa:b3:88:da:63:3c:1f:bd:e9:07:51:
cc:63:76:4b:7f:c2:60:e8:03:4b:ad:91:95:ae:bf:5b:09:76:
9f:48:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:49 2026 by rpki-client