Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier: Om57+q3UbZn+xMVh0Q3sYqSDYd6Eci4M1IVIL88pkxk=
Subject key identifier: A2:8B:EE:23:F1:EE:EB:C6:72:DD:F6:0C:97:3C:09:55:79:A0:C8:8D
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 019D9C63887C3E07E2281D1CC8B29E71ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number: 15C2
Signing time: Fri 17 Apr 2026 17:01:01 +0000
Manifest this update: Fri 17 Apr 2026 17:01:01 +0000
Manifest next update: Sat 18 Apr 2026 17:01:01 +0000
Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: Rjcgh5581394oitR0tWnl9Ub1TnDE7R2PxRmEGskq64=)
2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:88:7c:3e:07:e2:28:1d:1c:c8:b2:9e:71:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Apr 17 17:01:01 2026 GMT
Not After : Apr 18 17:01:01 2026 GMT
Subject: CN=a28bee23f1eeebc672ddf60c973c095579a0c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:1e:b0:9d:44:d9:c8:6b:b9:1a:9d:ec:fe:
d1:a8:aa:c6:20:7e:22:c4:43:81:f5:2d:e1:bf:6d:
21:58:e2:c9:da:de:a1:ef:e7:a2:3d:4f:cf:c2:61:
d4:94:d2:26:81:21:bd:0f:f9:71:b9:24:60:6d:17:
86:b3:5b:b5:74:3b:c0:7a:77:76:08:4d:14:a6:93:
ac:57:e3:ee:5e:1e:02:91:94:a0:90:79:fb:4a:e9:
fd:f3:51:54:af:fc:e6:21:04:58:81:f0:6e:2e:b5:
9a:0d:ef:08:ef:0c:8c:02:08:71:b2:16:db:b1:3f:
70:1a:4f:3a:d7:b3:6b:e2:40:e1:b3:76:95:28:2e:
6f:c9:a7:fd:47:70:01:05:6e:8f:3b:1a:ce:d1:aa:
87:8c:0f:93:f4:c4:52:62:b3:60:7f:89:82:11:eb:
f5:36:49:08:b6:51:1e:1b:50:4a:28:59:32:a5:0e:
b4:9d:19:92:cf:10:44:d4:c0:1c:ed:17:78:a3:e3:
05:10:67:5a:5b:81:9c:ed:cd:3e:60:0a:a6:4e:a9:
79:bb:5c:f9:51:55:7b:c2:4b:a4:7f:16:44:35:c4:
e1:6d:34:b3:8b:0f:d9:10:96:2d:1b:df:fe:2e:43:
ce:d6:69:4b:12:95:3e:29:09:0b:c4:c3:74:ca:28:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:EE:23:F1:EE:EB:C6:72:DD:F6:0C:97:3C:09:55:79:A0:C8:8D
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:60:af:06:d6:d5:fe:f1:e0:c2:5e:37:99:7c:af:32:d7:d7:
89:f6:06:bf:d3:9f:a5:db:ad:3c:46:6d:99:93:00:b8:89:f2:
72:f8:d9:d7:94:68:77:d3:8b:2d:14:1b:83:7a:c7:73:91:46:
c6:9e:a9:be:60:e3:8e:54:ad:33:a1:f8:d3:32:d8:f4:18:d9:
89:ae:4b:df:a3:df:a5:c4:34:c9:f4:7a:80:f4:cb:29:57:4b:
3b:d7:76:a3:7d:e6:69:87:70:7b:4d:45:db:af:12:7a:75:3b:
e2:7f:66:fb:7e:d4:fc:30:a3:25:4a:e9:4f:39:a7:72:4c:7b:
33:31:ba:75:d5:38:d4:a6:4b:20:b4:4f:55:d3:78:2f:38:82:
05:ff:72:02:4f:b5:85:59:94:c7:6f:53:a1:42:f9:9d:13:90:
83:43:3c:f1:23:37:2c:6e:76:32:05:cf:94:40:09:d7:6d:58:
66:ea:31:a9:5c:c5:93:58:81:cf:22:62:94:10:6e:4d:a0:56:
df:b4:07:70:7c:cc:9b:0f:ac:62:dd:39:b7:2b:27:0a:c3:12:
a3:78:c1:fc:71:7c:19:cc:f2:c6:d6:04:45:c3:2b:e1:cf:6d:
62:b5:20:04:17:ac:3b:9d:02:40:38:8d:12:c2:f9:7c:a2:1e:
02:20:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:08 2026 by rpki-client