Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: hZWENkaTPrV5X2Z7SAJYYYej96RiTlzabS3cR3dZRxI=
Subject key identifier: A1:E8:E1:00:FD:7D:6D:F8:4B:FE:3E:FF:9C:21:A5:9D:7B:B7:89:F1
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019D992B84C93B91DBD668B00886EA25A84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 02:00:59 +0000
Manifest this update: Fri 17 Apr 2026 02:00:59 +0000
Manifest next update: Sat 18 Apr 2026 02:00:59 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: 5qzrY/h/gyDhNRdIGuM6yR4USpNO7VzQMUvogWdi074=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:84:c9:3b:91:db:d6:68:b0:08:86:ea:25:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Apr 17 02:00:59 2026 GMT
Not After : Apr 18 02:00:59 2026 GMT
Subject: CN=a1e8e100fd7d6df84bfe3eff9c21a59d7bb789f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:8c:65:bc:dc:e8:f6:2f:94:92:5c:34:36:
27:cb:6a:29:87:98:28:8f:59:7f:2f:03:42:d7:aa:
0d:ed:88:af:80:12:87:b1:8d:c6:b2:e5:fa:8b:5e:
4b:eb:d7:0c:3f:03:c2:c3:20:0a:d9:f0:b0:16:0e:
58:8a:56:60:1a:72:73:79:8e:15:a4:53:d6:2b:01:
07:1b:74:85:3f:4f:b3:e2:17:b2:af:59:1c:b6:5b:
02:3c:80:51:36:6a:e4:a4:f2:da:72:e3:fe:62:7d:
9d:18:fd:33:b4:bb:75:df:58:dc:91:d0:14:52:ed:
d6:c1:73:00:08:56:c7:bf:ab:35:ef:80:4e:bc:21:
e1:42:31:b0:a7:e9:07:63:78:f0:74:01:95:3a:c2:
56:f4:85:f0:4d:74:36:91:1b:9d:16:fd:44:a3:12:
90:35:0e:44:42:e9:ee:98:10:01:12:2f:83:3b:19:
eb:2b:b7:bd:8f:38:4a:62:58:fd:cb:f5:ba:d0:0e:
0d:51:a4:2f:53:1b:aa:7a:fc:c8:0b:c2:23:9e:02:
cb:93:41:56:e0:59:e4:51:62:4c:7f:e0:dd:90:31:
2b:07:95:7c:be:54:b6:c5:e6:c1:7e:61:86:4f:fe:
39:5f:ca:82:4c:00:2e:e4:21:29:1d:9d:5f:0b:a6:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:E1:00:FD:7D:6D:F8:4B:FE:3E:FF:9C:21:A5:9D:7B:B7:89:F1
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:20:da:72:d5:3c:3d:79:1f:69:c9:9b:e2:25:ef:9c:81:57:
82:48:61:af:3a:d5:12:40:ae:07:03:bb:69:49:b8:7f:07:df:
a4:ed:a6:b9:c9:f9:32:6d:7c:0f:d4:4c:0c:1b:0b:bd:6a:bb:
43:d4:b4:27:27:f7:ca:4f:f8:b8:2b:c0:2c:a5:46:3c:61:f4:
41:3e:27:e7:a0:d6:5b:9d:04:23:1f:cb:58:19:c5:3f:3d:3a:
bb:59:ec:ce:dd:40:c7:c9:64:e5:bb:bc:ef:85:34:45:90:7f:
ca:a3:0f:cc:a1:85:d7:64:a0:ee:81:60:18:02:e5:f9:8e:da:
ca:e4:a0:3d:c9:96:b8:59:76:02:5e:df:65:ce:41:6c:08:89:
c3:84:62:1e:e7:a8:14:08:02:ea:12:42:6b:da:95:c4:f9:93:
41:7f:cb:31:76:86:7f:8c:ab:70:2a:43:b0:b0:4e:73:ae:03:
b9:60:da:5f:0d:63:6f:34:07:3e:84:28:01:c2:31:05:6d:12:
bb:98:f9:c2:2b:b0:00:f7:be:58:d5:59:39:56:b1:67:a0:f7:
b5:29:38:8f:62:ef:1f:2d:34:59:ea:f1:da:47:c3:a8:db:52:
40:9d:23:11:02:f4:26:79:a0:71:ff:70:ad:f5:b0:62:21:f4:
3a:1e:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:17 2026 by rpki-client