Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: ix0l9kjgUt1mXo+0GoBbW2goBTn5PmQsv6tjardAtSY=
Subject key identifier: 1E:CD:A0:F6:AA:AF:8C:43:B2:FA:39:45:D9:E3:89:C8:36:83:31:DD
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019EC17FC298DAE7580C213DCB95CCA7BD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 15:00:35 +0000
Manifest this update: Sat 13 Jun 2026 15:00:35 +0000
Manifest next update: Sun 14 Jun 2026 15:00:35 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: HMRXgMljxQ5Bp8fZDSEXwTb5bhX39QFz/KnmUFJjaxc=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:c2:98:da:e7:58:0c:21:3d:cb:95:cc:a7:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Jun 13 15:00:35 2026 GMT
Not After : Jun 14 15:00:35 2026 GMT
Subject: CN=1ecda0f6aaaf8c43b2fa3945d9e389c8368331dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:0d:c5:bd:3e:5f:d8:a9:dd:90:e9:46:d3:
9e:a3:b5:ff:9f:d5:8a:d0:6a:85:a8:54:42:fc:89:
a4:17:3f:c1:72:9d:57:21:30:04:9c:6c:0f:4a:df:
94:d3:b4:be:fb:e2:61:fd:90:0b:1f:c4:ed:02:13:
6c:e6:b1:b2:f6:81:bb:a2:30:ae:25:bf:96:68:87:
3a:05:2f:cc:1c:e1:59:5f:4a:48:3c:92:4e:51:95:
79:65:d2:30:f5:04:3a:63:45:fa:6e:e7:e0:a0:32:
f0:d9:23:ea:f4:63:dd:88:af:ee:8a:1f:2e:64:e8:
e2:f4:88:d0:2a:0b:73:df:d6:2b:30:37:69:0e:e8:
59:75:70:1f:18:b9:6c:90:fc:1c:be:71:60:9e:62:
46:16:93:15:14:90:17:42:b1:ad:57:c3:c8:1a:06:
1e:70:c6:cf:f2:fc:b9:9a:fa:14:c9:44:fc:82:f2:
49:17:2e:35:e9:80:85:ad:c2:e1:c8:f6:7f:3c:6e:
2e:85:98:38:5d:86:47:9a:a0:43:1e:ec:2c:d2:55:
f2:37:7e:4b:63:ce:60:9a:5b:09:ff:48:03:6a:2f:
4e:54:5a:d2:bf:53:e6:1b:4a:a5:c5:a9:c8:c0:71:
59:3c:05:0d:83:5b:c6:c4:91:7c:73:97:9d:68:c4:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:A0:F6:AA:AF:8C:43:B2:FA:39:45:D9:E3:89:C8:36:83:31:DD
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ea:f0:fe:fb:03:b9:97:ff:56:08:63:0d:1c:d9:2f:bf:03:
ec:a9:7c:ca:f9:cb:9b:61:59:88:ff:b2:84:5c:2d:ff:e3:dd:
98:15:c7:cd:b3:c8:0f:de:0a:c3:ad:74:a8:4c:9a:6e:81:cb:
9c:a9:47:c1:19:d7:72:b1:76:cb:30:97:73:bb:58:8e:3e:b3:
b1:e3:51:26:11:6e:5f:87:da:c9:f0:67:e0:42:86:37:9a:d3:
64:e5:c9:9c:e6:b7:79:d9:04:e5:32:61:45:78:c2:53:c7:8b:
6c:3e:8a:0f:4f:f3:59:9a:2f:d7:ef:d8:59:2b:23:55:d3:31:
1d:b5:61:b3:a2:7f:b0:35:06:1c:00:4c:f6:49:7c:1d:1d:2f:
bb:1e:1e:96:e6:ae:46:92:b1:1e:b3:3d:a1:5e:48:5a:de:71:
4e:fc:07:fe:59:ff:7d:4b:e0:b8:71:ca:05:ff:4a:95:c8:e4:
7c:35:44:a3:51:80:13:39:f1:8e:7f:2d:54:48:fc:ab:1b:cb:
63:f5:f2:34:23:a7:b9:cc:d1:ab:d3:f2:6f:f0:b3:a6:40:0d:
fd:b9:ca:5b:06:83:07:a0:d5:d9:70:fc:cc:3b:38:cb:af:51:
4f:5e:a2:e8:1a:35:70:66:24:d9:47:25:12:fb:ef:9f:21:fb:
c2:74:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:17 2026 by rpki-client