Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: bIkmgN62BSDxzgAtm5HdMH8RJrmzcZplnfL599C9hCQ=
Subject key identifier: 7E:F3:D0:66:E1:C3:94:CF:EF:F3:6A:A4:33:6E:AF:7A:27:2D:12:37
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019D999942394113E0080ABB7A1070637D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0EB3
Signing time: Fri 17 Apr 2026 04:00:51 +0000
Manifest this update: Fri 17 Apr 2026 04:00:51 +0000
Manifest next update: Sat 18 Apr 2026 04:00:51 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: rhoRaKQSl3POFjKiHQko98Uij0KfyuEHsevH12y+r2I=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:42:39:41:13:e0:08:0a:bb:7a:10:70:63:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Apr 17 04:00:51 2026 GMT
Not After : Apr 18 04:00:51 2026 GMT
Subject: CN=7ef3d066e1c394cfeff36aa4336eaf7a272d1237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:5d:e8:d0:21:9c:c1:61:b1:3c:ce:e3:48:
ab:81:c6:f9:ea:90:da:f8:53:e8:cd:09:9e:70:5e:
e8:c8:e1:44:dd:97:80:d9:f0:9c:f6:3e:36:92:77:
6b:02:3b:0a:14:94:73:76:3c:b7:35:89:3b:5f:17:
5a:16:c7:3f:c8:db:ad:e4:4d:16:c5:b9:29:fe:41:
a6:1d:d4:03:06:47:a8:52:5b:49:66:a1:2b:4d:cc:
5c:db:8f:3c:07:a1:f7:b7:27:2b:5a:fd:44:42:5c:
87:e3:b6:4b:75:14:3d:47:d2:52:fb:14:c9:05:ec:
65:43:12:58:e2:10:31:74:c2:28:6a:3a:4c:8a:08:
4e:42:34:b8:be:d1:64:be:03:35:59:15:75:ca:77:
8f:81:9f:76:e4:02:16:4c:0a:b8:4a:d4:d1:9c:3f:
1b:7f:de:c6:3f:f3:c3:06:ab:5c:24:9e:2b:2c:b3:
60:6c:33:38:8f:0f:08:17:1f:3e:54:d6:ca:b8:69:
e9:14:a6:3d:37:1d:94:db:cb:d2:39:bf:77:91:ed:
9b:f3:53:5e:17:8c:f0:a7:24:b8:d5:94:41:7e:ae:
cb:8a:73:8c:a2:02:e9:49:64:f5:93:66:3c:5d:f5:
07:79:c2:b0:31:f8:f6:b4:5a:fb:ce:5e:2e:57:86:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:D0:66:E1:C3:94:CF:EF:F3:6A:A4:33:6E:AF:7A:27:2D:12:37
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:27:7f:bb:a7:8d:ea:40:a8:fd:3b:66:bc:30:55:05:88:
cd:45:26:ee:9f:17:4c:95:7e:ea:4d:38:f8:37:bd:e6:bf:1d:
7b:0b:34:37:e5:4d:57:71:5f:d6:9d:4b:74:a7:96:71:90:aa:
b6:7c:5a:11:64:87:0f:ac:94:66:1a:2c:e9:cd:69:66:c2:5d:
a3:5a:b8:ac:e4:67:ec:fc:05:1a:9a:22:87:ab:b8:c7:66:08:
3d:8d:93:c7:a6:fe:6b:a0:1c:46:f3:f9:98:78:0d:f9:39:8d:
da:fd:1e:f5:b7:b8:47:e8:34:4b:88:ef:23:e4:da:55:10:7f:
85:d8:69:42:34:66:bd:ef:22:db:18:16:6b:06:f7:b7:a4:90:
03:8b:1b:0e:4d:d6:20:b0:ec:53:33:70:19:17:39:13:8f:ef:
09:e3:c7:01:ac:3e:4f:d3:35:4c:ad:0f:b2:d2:cd:c0:6c:19:
a4:92:df:4e:31:59:50:7c:78:78:40:38:11:dc:de:7d:d6:83:
81:aa:34:e7:c4:59:84:55:08:29:b8:f4:65:30:86:14:0d:0a:
f4:8e:36:ba:db:32:95:11:55:e5:72:f7:2d:78:5d:36:ae:87:
63:7c:1d:43:2b:a2:b6:d0:ac:5a:44:4a:20:c7:cc:83:0a:0c:
e6:77:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:54 2026 by rpki-client