Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: 5rqYQVSPOUSH6ceIUNQCyUjapFfbejIOCltEk8zD6cU=
Subject key identifier: 7A:7B:5D:61:6D:3D:D0:FF:08:D2:6D:96:99:B2:4F:80:8D:87:6A:76
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019EBF23D13F41553D7D043F793DAF8DA896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0F4B
Signing time: Sat 13 Jun 2026 04:00:55 +0000
Manifest this update: Sat 13 Jun 2026 04:00:55 +0000
Manifest next update: Sun 14 Jun 2026 04:00:55 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: 72wLLJZVIr9tfLIxrqe+E5MNVF/cKCvK7EVTXJG3x98=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:d1:3f:41:55:3d:7d:04:3f:79:3d:af:8d:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jun 13 04:00:55 2026 GMT
Not After : Jun 14 04:00:55 2026 GMT
Subject: CN=7a7b5d616d3dd0ff08d26d9699b24f808d876a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:7b:71:04:20:ed:02:e3:11:58:fa:d5:e8:
1e:12:82:c4:c6:7a:2d:88:54:f6:72:bb:c5:f7:4d:
03:f0:40:55:ce:fd:50:4b:3d:3f:00:a7:eb:ac:e9:
da:71:04:4f:fd:61:93:c9:1d:20:22:b9:66:8e:09:
10:a2:7a:b2:0c:10:aa:8d:3b:af:54:c8:25:76:83:
cc:51:f6:b1:92:0e:e3:e1:83:01:49:89:3b:3b:19:
cd:ba:64:c7:81:73:c5:16:b4:4b:02:b8:cd:ae:4b:
15:96:5f:10:19:07:6f:89:03:b8:a4:d6:6d:f4:ed:
75:91:67:ba:39:cc:46:6b:81:30:46:a3:46:e8:60:
50:26:b7:bd:cf:b6:33:bb:27:b2:e7:2b:87:18:9f:
4e:b1:4f:ce:08:43:5e:25:06:cc:15:92:41:33:02:
61:44:c9:8c:39:e4:1e:d2:13:0b:eb:75:17:ff:b7:
57:e9:f2:38:0e:ed:6c:fb:c1:00:74:0e:b5:1a:1f:
24:a2:91:fe:40:b2:5a:7c:36:ee:91:e4:56:62:50:
57:e6:3a:19:aa:f3:f6:f3:b6:42:ca:38:86:52:67:
fe:f9:47:c5:f4:fd:98:c3:3f:36:cb:ad:b8:cc:3d:
4d:6b:01:e4:1d:d2:88:42:f5:86:31:cb:6f:c6:46:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:5D:61:6D:3D:D0:FF:08:D2:6D:96:99:B2:4F:80:8D:87:6A:76
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:16:3b:42:2b:29:3d:f4:cf:1e:85:bf:34:93:38:61:30:a0:
44:5a:52:9f:06:ba:44:82:96:a6:24:e6:ab:b5:0a:9a:c3:25:
67:54:26:f2:76:19:11:ce:7e:63:4f:89:33:97:e6:70:08:f1:
99:42:20:47:f5:d0:8f:80:6b:a1:af:66:cf:ce:a5:5c:e9:b4:
a6:62:75:ae:93:02:c2:ca:4d:07:e8:08:e7:df:3f:0a:31:79:
41:0d:f0:2e:10:ce:97:e4:e8:70:c4:33:17:4f:1a:f1:27:51:
e0:e9:16:3d:b7:d7:c7:97:52:18:b5:19:5f:ca:42:16:5d:67:
df:83:9f:4e:fb:69:bb:e8:64:35:8b:6f:a6:18:c3:12:56:ea:
42:bd:81:ad:0d:f8:43:c2:2a:a2:a4:33:38:9c:b5:55:3a:f7:
30:19:27:c9:8c:89:45:79:3a:06:02:5b:5f:b0:ce:84:b8:56:
19:5b:94:9f:cd:ef:2f:9e:46:ae:41:76:13:b8:34:dc:f6:77:
6d:b3:73:29:5d:a1:66:ce:95:33:3e:95:84:85:49:31:3a:ae:
28:2c:c6:db:21:de:99:14:5e:8c:10:ff:77:f6:ac:b4:c0:42:
f7:31:fc:8b:d6:a4:77:88:08:b7:8b:ce:83:e4:7a:95:6a:d7:
e3:64:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:46 2026 by rpki-client