Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: /qQd7TiI8dAALz1cEFeNb14BZ0KFudL6zyPcRbdNk0E=
Subject key identifier: 3B:1F:AD:A6:35:1D:7D:94:E2:EB:F3:05:EA:B5:4D:17:4E:14:74:C5
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019EBEED15AC33DB80448F946392EF39E9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 03:01:09 +0000
Manifest this update: Sat 13 Jun 2026 03:01:09 +0000
Manifest next update: Sun 14 Jun 2026 03:01:09 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: YKaQ7FwFBrJhWzsddg04iF9HyaIm0I1hgThNCFYRsoQ=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:15:ac:33:db:80:44:8f:94:63:92:ef:39:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jun 13 03:01:09 2026 GMT
Not After : Jun 14 03:01:09 2026 GMT
Subject: CN=3b1fada6351d7d94e2ebf305eab54d174e1474c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:a6:86:0b:cb:3a:71:37:ca:f8:9e:14:22:
30:2c:b8:d8:b8:0d:b2:2c:1d:ba:b0:ff:5a:29:dc:
d3:57:8a:8b:aa:ac:80:91:66:97:61:c9:8a:f0:e2:
a5:6b:60:eb:f5:a0:5e:58:ff:1a:dc:4a:ed:df:02:
8e:b5:0d:db:e3:05:a2:83:57:49:40:a8:fc:de:ef:
07:f7:b5:c9:5a:78:25:f5:79:bd:3a:88:75:ac:4e:
78:7c:6d:a6:91:3b:40:06:05:d9:5c:4f:6d:5d:ec:
48:38:c7:7b:75:7e:69:ff:3c:e1:2e:4b:cc:4b:1f:
29:85:30:73:d8:44:bd:13:35:0f:b1:5e:34:92:e8:
c3:bf:42:82:8e:e5:5a:09:43:8a:10:72:60:3a:a7:
91:2c:19:83:d6:b5:06:ff:d0:20:37:82:67:e4:5d:
86:55:0f:4b:f8:2a:78:9b:f2:7b:81:3d:cb:be:ab:
71:e0:d9:9d:c9:9a:01:86:5d:e6:d9:c3:d4:6a:bd:
f2:ff:4c:12:87:d6:12:4c:39:0a:90:e4:83:69:59:
6d:cb:b3:27:f6:c7:d7:0f:7a:e3:01:55:74:54:19:
0a:d0:ba:68:03:a9:50:55:af:02:3e:4c:3b:f0:e6:
e3:2b:2d:bd:8a:f1:8a:a5:ff:cb:f7:27:0a:9b:61:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:AD:A6:35:1D:7D:94:E2:EB:F3:05:EA:B5:4D:17:4E:14:74:C5
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2b:b3:ed:cb:70:41:bf:03:70:1e:d3:d0:0d:1e:19:f4:69:
26:2e:29:76:d0:3c:de:b1:f4:65:ba:e9:f8:e2:12:d6:ce:43:
f2:8f:a7:cd:ec:73:d1:78:cd:44:02:e8:c6:51:d7:49:3a:06:
33:cf:e2:6c:47:1f:a9:8f:ba:41:97:b7:be:00:e7:0b:23:ac:
4a:21:fe:bd:39:3b:bf:f1:89:05:55:61:09:87:21:55:1f:d4:
70:c7:45:c1:6e:d5:37:ea:30:03:65:0a:2a:b0:53:ed:c3:42:
2f:58:eb:c3:bb:13:f9:74:60:73:6f:86:df:83:11:e0:0f:64:
9c:e9:d7:3c:3a:2b:ca:10:61:47:52:f9:4d:44:7f:45:7d:da:
41:1c:92:47:a7:9a:6c:d8:0e:e3:46:61:45:7d:5c:fb:8b:03:
d8:6c:1f:46:be:ee:56:9c:b7:eb:75:0b:90:a6:e4:1e:53:6e:
26:db:ed:a1:cc:38:0a:72:0a:28:d5:85:99:81:aa:42:2a:76:
35:92:a5:9c:2e:ea:c4:f1:a0:c2:3c:75:60:a0:4d:f3:8c:d7:
fa:69:c3:24:a7:51:73:f8:66:6d:0d:9d:63:c0:5b:db:86:64:
a3:45:ba:74:51:e5:46:e3:c7:2d:d2:e9:94:91:d8:8b:92:17:
b0:91:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:19 2026 by rpki-client