Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: Ysdff1HBDQ57qQWnN9a/Qcu2kd+YWrnJ+lfJUfYDdi4=
Subject key identifier: 1B:89:F4:B4:9C:1E:77:B6:45:0E:8F:E0:E4:30:13:E2:B5:71:96:33
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019D99D04822C96473BB1BA4AC51F8B74C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0E9B
Signing time: Fri 17 Apr 2026 05:00:57 +0000
Manifest this update: Fri 17 Apr 2026 05:00:57 +0000
Manifest next update: Sat 18 Apr 2026 05:00:57 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: v91M9OQb/mzpDDpNENvybSJRD49Dde/NkCnJXsB1npg=)
2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:48:22:c9:64:73:bb:1b:a4:ac:51:f8:b7:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Apr 17 05:00:57 2026 GMT
Not After : Apr 18 05:00:57 2026 GMT
Subject: CN=1b89f4b49c1e77b6450e8fe0e43013e2b5719633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:9a:53:5a:c2:70:89:c4:30:02:9d:e2:cb:
d1:cf:d9:22:0f:32:ba:bd:86:52:db:0e:01:68:3a:
63:e2:60:55:34:4f:9b:2b:a6:5d:1a:10:20:3a:c2:
8b:b1:81:cc:e7:e5:bd:a6:5e:f1:ed:5e:0f:2c:33:
7d:5a:ec:3c:f9:b6:97:ca:13:0f:19:37:eb:01:00:
0e:a5:74:d2:70:98:06:af:f9:33:73:0c:30:93:ba:
1e:52:e6:30:aa:7e:f1:17:68:b7:a0:ea:3d:f7:ab:
21:9e:01:ed:37:9b:13:e2:ff:1e:1b:20:a5:2d:4c:
89:92:8e:66:fd:c4:aa:cc:b2:ae:ea:5e:4a:06:e5:
7c:4a:74:8d:3d:da:6e:c2:a8:fe:66:aa:79:4f:de:
c2:b4:43:fb:93:29:f0:34:19:db:36:59:ba:95:2b:
93:a7:58:80:e5:57:4f:a1:29:5f:8a:23:06:96:b7:
ac:46:af:7e:01:7e:6f:15:6e:53:29:d6:47:cc:84:
1b:de:dc:4a:96:90:87:a3:39:0b:1c:4b:72:73:31:
c7:0a:34:fb:32:de:4e:33:52:24:0c:d6:92:39:9c:
5a:2f:db:58:cf:df:98:26:09:62:b2:1a:29:9b:1e:
92:92:8f:ea:fa:df:e2:82:d1:69:f9:4a:77:b9:35:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:89:F4:B4:9C:1E:77:B6:45:0E:8F:E0:E4:30:13:E2:B5:71:96:33
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:78:37:76:75:d0:5e:37:81:76:85:fc:ee:29:cc:c0:78:0a:
8b:64:1d:d0:d5:3e:21:36:93:bd:fd:6a:9c:c6:d2:80:2f:6b:
b4:40:49:b4:e5:53:95:df:13:3f:7e:d0:55:9d:52:9e:74:4c:
97:26:c5:86:b7:95:42:1c:85:b5:32:13:de:f1:e1:2e:a7:0c:
4b:01:13:2a:2f:e6:7a:40:f9:0f:f5:c5:cd:8a:0a:e3:84:ed:
89:29:43:1b:80:5d:20:10:d3:81:47:91:7b:68:a6:84:73:7a:
a6:4b:6e:c6:cd:2b:fc:e0:93:7d:19:3c:0f:05:41:e3:62:34:
90:f6:0a:58:fe:1b:6f:6e:2c:71:2b:4d:98:17:65:45:1e:6f:
f7:5f:70:9a:17:f2:58:7b:37:69:c6:b1:af:6e:6d:d3:99:e7:
67:30:dc:f2:22:8c:ba:a3:4a:c6:14:92:4d:34:6e:f5:d9:a3:
a8:70:96:28:c6:24:db:fd:ae:0b:a6:4b:c7:40:7a:e2:8c:fc:
fc:9d:da:eb:ec:46:50:7d:d8:b2:97:ef:21:bc:c9:14:86:bd:
b6:7d:a9:6f:6e:c7:79:d8:67:d2:04:1f:95:5f:e6:b2:4f:77:
29:21:2b:64:a3:d5:9a:01:b1:41:44:15:1c:de:6d:8d:4c:4d:
a9:cc:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:41 2026 by rpki-client