Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: 7FLAzc8oInCb7tlUEbnjEwhe4HY7zB75hcQEj4BJQ9M=
Subject key identifier: C4:AE:B6:FE:AF:64:27:EC:1F:9C:DF:DC:73:D2:62:17:F2:75:27:C5
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019E1CB4EC8D839237CDFD2B0884E48D9CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 15:01:19 +0000
Manifest this update: Tue 12 May 2026 15:01:19 +0000
Manifest next update: Wed 13 May 2026 15:01:19 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: lYYFo2mm1apt9GmgvBxuknnq3FU9/e2MxQ9qFDv5POQ=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ec:8d:83:92:37:cd:fd:2b:08:84:e4:8d:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: May 12 15:01:19 2026 GMT
Not After : May 13 15:01:19 2026 GMT
Subject: CN=c4aeb6feaf6427ec1f9cdfdc73d26217f27527c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:d7:1f:6e:f4:4b:f4:90:3f:09:6a:91:a6:
a3:5f:36:ea:33:20:ae:11:ee:7a:fa:d0:03:ed:f2:
2a:dc:15:25:d7:14:dd:24:93:bd:c0:6b:0a:e2:2f:
44:07:cb:13:9b:ff:07:03:aa:96:d0:bd:50:49:0c:
34:4e:92:a7:92:90:4a:74:99:0a:16:14:b8:c6:36:
47:5d:38:c9:41:66:dd:e1:e6:25:1d:1d:4b:2e:dc:
3b:70:42:87:48:b8:ce:e4:3c:57:b2:41:a9:26:5e:
7b:4f:6f:93:8a:35:47:41:8d:d1:1a:21:d0:92:60:
3f:df:0d:7c:b5:27:31:e8:f1:b3:45:f2:66:33:5c:
e0:a5:6f:09:6c:c6:92:87:fe:90:8c:58:a8:45:b5:
73:fd:19:89:3f:2b:63:46:a3:03:3e:30:56:ea:92:
4d:8f:8e:d5:3b:3e:fb:af:4e:dc:a0:73:ac:a1:19:
2f:e7:c1:8e:48:5b:7b:ee:65:09:64:40:65:17:79:
c9:81:dd:09:c5:d1:db:4d:41:5c:80:fa:22:9c:98:
96:2b:b0:ec:fb:ad:60:2d:71:c8:8f:27:6b:a4:6b:
f2:d5:97:32:2a:0a:54:60:45:dd:08:0b:ad:5b:b3:
f4:23:a7:4c:95:d1:62:a5:e9:f8:7e:73:7d:e9:89:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:B6:FE:AF:64:27:EC:1F:9C:DF:DC:73:D2:62:17:F2:75:27:C5
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:47:a1:0f:82:bd:bf:34:5e:0d:6a:25:ad:5c:86:ea:a9:
80:e2:1e:59:22:b9:65:8a:8f:6d:2a:f5:72:bb:54:0f:3e:b5:
f5:ec:b8:dc:58:14:ee:8c:27:21:92:1f:8c:5b:3d:48:b4:ad:
d9:8d:25:53:52:e1:25:75:c2:14:71:70:60:0d:bb:b7:a8:72:
96:6b:fe:72:08:a3:f1:00:41:dc:1d:59:85:ae:3c:96:b2:2c:
c0:f3:4f:77:47:0d:7c:f2:6c:f3:bf:06:10:88:30:e7:d6:1d:
a1:76:5c:7a:90:de:dc:7b:c8:16:61:64:e5:b3:d7:12:0a:70:
a7:9f:ac:98:01:00:cf:db:3f:1e:29:52:87:7a:b6:a3:f3:72:
90:50:42:56:a1:64:db:de:b9:e8:f4:d3:07:11:f1:6f:3f:86:
52:be:cb:68:7a:00:25:7f:20:86:f2:d8:c3:bc:1e:9f:68:e8:
87:c9:d9:7a:82:c6:35:2f:86:3b:3b:02:8d:19:ee:04:55:ab:
5d:a5:7c:f5:43:df:a4:6a:70:8e:60:d6:d0:3a:77:10:b8:ff:
2b:ca:9c:1b:a3:f2:f0:14:14:87:f9:e7:b9:5f:5c:4f:bb:16:
a5:61:24:86:f5:e8:ae:bd:e4:ec:1e:f4:7b:a2:08:14:18:5d:
1a:30:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:28 2026 by rpki-client