Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: lgpmuZZsiJg6o4csg+P8uvjIZhFsNtY4ojJoCiLxHQ4=
Subject key identifier: 45:5E:E9:C7:A4:11:7E:FE:6F:DC:21:6D:E3:70:FA:4A:05:4E:DE:7E
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019D99D01DB54BE7D20E9A201BB5D154CAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 1005
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: HuczVU6jwhfOhodXajMGh2HraRqxr6/MO2lCGzQXXOA=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
3: LZIb0ymnvJVoat3eKMXkwKhNB3s.roa (hash: MiIObMs9Gh9JbmWmMRy+8OGwOPF9Eqpf22VuDL3pf3g=)
4: zWYuzq0jad5Hmb8WA-NfP-3d2Zw.roa (hash: Yyyb//vmnQwxfSQUibaXnsRT2TgMJg/Syp1I0vzXlrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1d:b5:4b:e7:d2:0e:9a:20:1b:b5:d1:54:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=455ee9c7a4117efe6fdc216de370fa4a054ede7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:fd:9e:8c:78:16:4e:84:74:27:e4:1c:d3:
ed:9a:4e:f0:bf:79:15:e0:a9:4b:21:db:bb:99:e4:
7f:c9:6f:d7:06:31:cb:f6:34:13:11:10:29:d6:22:
1f:9a:9d:52:00:fc:d3:11:60:d9:2d:41:d2:f8:bd:
49:53:30:c7:cd:45:1f:6a:fe:65:cd:b0:84:3b:bd:
55:91:e9:57:7f:27:80:4b:03:58:4f:72:90:d9:8e:
c4:44:c3:37:aa:11:da:6b:22:85:8b:bb:a1:45:12:
58:68:5d:51:40:16:02:fe:53:08:3d:38:9a:0a:8f:
ae:e6:e6:bc:76:87:d3:58:ba:c4:0a:5d:54:9d:4a:
b5:7b:83:0d:c6:6a:44:2e:c5:63:b3:a3:aa:36:aa:
ed:67:0b:a5:a3:4d:07:ac:d6:e4:17:78:24:8a:2f:
dc:33:d3:c7:64:04:c1:74:20:cf:f2:3e:c3:91:34:
e5:8f:db:38:4f:99:03:ba:3f:53:1c:e6:15:37:6c:
60:00:3e:64:8f:4b:3a:9b:b1:62:37:a9:49:da:7a:
e2:02:9b:76:2d:36:4c:59:c2:68:97:47:76:d5:51:
30:df:d1:ba:db:dd:af:96:2b:23:21:ff:f7:1a:d0:
75:28:84:94:15:4b:f6:72:ce:9f:f3:89:a4:90:ee:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:E9:C7:A4:11:7E:FE:6F:DC:21:6D:E3:70:FA:4A:05:4E:DE:7E
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:78:e5:e9:ce:90:b5:b8:07:b2:38:88:f5:cc:81:a2:0e:9b:
1c:df:33:fb:0c:7c:28:97:7a:18:9e:29:81:a9:bd:05:00:6a:
41:99:37:a5:99:9f:51:36:b9:7b:ab:73:71:cc:63:9d:1d:0e:
e5:04:85:14:b3:21:68:62:38:af:ca:7e:86:20:4a:51:4f:ae:
b1:75:24:8c:54:87:6a:8a:29:5e:63:d4:c4:4f:12:8f:5d:3d:
c6:04:0b:7d:39:81:c6:3a:d1:8f:66:7c:50:90:92:80:26:87:
c9:d9:6f:f3:9b:26:5c:74:40:80:8b:e4:0e:7b:0f:bc:56:d8:
8f:bc:0d:da:c8:7f:33:89:6b:92:85:38:78:ae:d9:9b:f6:3c:
e7:dc:ab:8c:90:c1:7c:3d:01:e2:99:ed:d8:73:67:3f:ba:43:
10:54:09:80:12:24:d8:77:08:09:52:34:04:49:d5:05:74:f4:
10:b2:ed:ff:17:4a:cc:79:21:57:1f:7e:ce:5c:51:20:c3:ce:
12:7d:26:13:c5:10:75:bd:a7:08:20:43:90:a7:db:ea:b8:0a:
a3:b1:7e:89:42:88:57:aa:c9:34:e0:6c:0d:0f:22:95:19:48:
92:da:2d:35:34:95:2a:48:1d:14:63:89:53:07:42:e4:b7:58:
ed:22:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:19 2026 by rpki-client