Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: x2FI4fVCuqf+8xir5O4U0nH+1wWamts7idT17zhN5Xo=
Subject key identifier: D5:20:A7:90:85:D1:BE:54:22:65:68:91:A1:E8:CD:08:5E:9A:11:90
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019DA59D13BBC3F5D8292134604346EB2A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 0335
Signing time: Sun 19 Apr 2026 12:00:27 +0000
Manifest this update: Sun 19 Apr 2026 12:00:27 +0000
Manifest next update: Mon 20 Apr 2026 12:00:27 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: tJKYPjdlIXTkA4Qg5JfLkSgzPe+vVbEb01ImcVHONXI=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:13:bb:c3:f5:d8:29:21:34:60:43:46:eb:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Apr 19 12:00:27 2026 GMT
Not After : Apr 20 12:00:27 2026 GMT
Subject: CN=d520a79085d1be5422656891a1e8cd085e9a1190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:cb:77:c3:9f:04:89:1f:b4:81:ab:15:6c:
63:cf:a0:6a:f9:9f:23:26:b0:1f:4b:31:d6:84:e2:
d8:dd:54:b2:2f:e9:6c:a9:17:b6:c3:ca:6f:b1:92:
e2:53:aa:4f:86:cb:3f:0b:1b:62:d0:20:17:94:fb:
38:10:d3:32:7b:07:3d:15:04:6b:5f:fa:4a:bb:9a:
eb:a4:bf:8b:40:29:70:55:57:9a:08:2d:6c:9b:8c:
b6:26:21:1e:12:02:9e:5e:49:6f:5f:bb:ba:55:98:
47:e1:fd:ba:7f:cd:58:b9:4e:33:e4:ab:98:6f:36:
11:c3:e0:e7:eb:4b:58:97:e8:75:38:1e:1f:a5:d8:
de:2e:4b:19:8b:69:0d:b5:a9:53:3f:3b:cd:c9:9d:
68:04:9c:4b:d8:30:69:ca:ab:8c:1b:89:9d:7a:97:
32:a4:b6:27:f5:d3:4d:0e:4a:55:39:6e:75:9f:d8:
09:16:82:e9:a6:51:ea:d0:53:6c:d6:22:0a:f9:77:
0e:02:05:c4:0d:39:b1:44:60:86:30:ae:b2:77:53:
85:1c:7b:36:f7:64:ab:fb:db:c7:bc:64:02:5e:ef:
bf:39:b1:39:7e:9f:61:24:d6:62:d5:31:d9:03:83:
f8:e6:44:f0:a8:f4:55:1e:d4:46:7c:cb:c3:58:ce:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:20:A7:90:85:D1:BE:54:22:65:68:91:A1:E8:CD:08:5E:9A:11:90
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:79:a8:dd:9c:05:0c:a7:ec:90:d1:c2:69:99:cf:56:52:5f:
8d:2c:0a:32:78:ea:34:85:4d:06:53:d2:17:13:48:a7:bf:65:
f0:7e:a1:c8:ef:59:0d:ad:2d:0c:a9:3a:01:e8:d3:40:e9:fa:
ba:c2:25:ff:d4:fd:b9:ff:ae:68:e8:e3:96:6f:ca:74:3d:90:
2b:07:2a:a1:ef:39:2e:3d:4d:6d:ad:8b:26:a6:13:0b:60:87:
9a:84:ff:a9:fa:f7:db:4a:ab:49:11:fa:2a:ff:f6:5d:61:40:
8b:65:4f:61:29:47:66:99:35:f0:3e:2f:f6:9f:41:9d:67:c2:
c9:6f:31:29:e8:63:62:da:a0:96:95:0b:bd:68:85:32:1f:32:
4c:72:c8:9d:bd:4b:79:12:11:8d:1d:16:fc:f4:75:eb:2b:51:
7f:82:06:03:8d:ff:51:22:3a:76:5a:7d:0e:71:48:b5:dd:65:
ad:fd:a8:7c:f8:5c:5c:c0:b4:00:87:c6:5a:a4:13:de:ad:b1:
21:e3:10:34:d4:27:33:04:57:de:28:84:fe:85:54:ab:a7:aa:
df:9d:8c:29:84:b3:64:ad:5f:23:3c:50:f5:31:e0:a6:fc:18:
a5:75:38:ee:1a:ee:db:ec:95:84:50:d9:f7:8a:78:4c:b0:c6:
ce:47:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:07:41 2026 by rpki-client