Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: P7+bltxAUzfxg7Uo+a5L7F7YvTfcKgmMYp3YUuj5k9w=
Subject key identifier: 6A:F2:B3:11:EA:7A:05:99:AD:EC:DA:DE:B7:FB:E2:27:21:57:8E:C1
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019D29607AD75B363C99BE16785772333D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 7A0/KDB/IUV+shYpZ81g6j3KNdwrFLcuc6R2ZBBMmfU=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7a:d7:5b:36:3c:99:be:16:78:57:72:33:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=6af2b311ea7a0599adecdadeb7fbe22721578ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:39:79:52:b5:9f:13:7e:90:c5:7f:c3:50:
a8:a0:59:49:63:c7:6c:a1:6c:7b:9d:44:4a:f0:59:
d4:65:46:d1:ea:20:50:3a:8f:2d:50:00:a2:3f:60:
90:5f:84:5b:c0:f5:13:43:36:af:85:70:54:40:4a:
98:d9:b9:e4:f5:1d:2a:4a:a3:48:75:6c:c9:43:ab:
d1:76:92:b2:2c:5e:c5:92:b5:49:3c:40:f8:fa:8f:
0e:a8:be:c9:1b:3d:51:88:fe:12:17:5f:f3:20:8c:
30:07:29:a9:4d:da:1d:17:db:86:ba:ca:c6:13:c5:
a3:b3:92:3c:d0:92:eb:c0:e9:72:ea:f2:58:a7:95:
ef:b6:95:c4:8f:58:fd:65:9e:53:4d:a2:25:cb:0e:
bd:49:7b:be:0b:df:99:db:4e:21:57:0e:3a:05:a6:
ce:52:e1:ec:ee:2e:3d:ec:2d:2b:9d:05:1f:ae:6a:
97:e9:0e:bb:bf:a9:46:3f:10:1d:e9:31:d2:e0:51:
aa:10:52:11:d9:43:7b:66:c1:41:d3:37:35:21:5f:
63:5b:01:db:cc:c2:f6:3e:9c:b1:16:0d:c5:97:5a:
f6:b1:c5:a8:ce:3a:f0:e9:85:cc:d1:ea:78:61:82:
74:f8:ed:f2:eb:64:40:5c:ef:34:26:5f:bd:1d:d8:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:B3:11:EA:7A:05:99:AD:EC:DA:DE:B7:FB:E2:27:21:57:8E:C1
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:26:67:fe:da:39:af:02:9c:4c:df:85:78:6f:ba:6b:b0:3e:
12:53:38:92:3a:e4:46:a2:e7:5a:b7:e2:dd:1a:24:0f:de:97:
1f:a0:7d:d5:00:62:7a:4d:57:2c:31:06:fa:99:56:d0:3f:99:
85:cb:02:5c:93:8f:f1:7e:e7:78:5d:9e:4b:76:15:d5:d3:7b:
e0:79:1a:92:16:07:f5:93:53:0a:13:83:ed:12:92:1d:2b:cb:
6b:2f:22:c5:91:c1:0b:d1:13:28:21:4e:e1:5d:93:14:bf:59:
1a:85:7e:45:49:15:74:f9:bd:d5:8b:63:2d:f4:07:55:ec:fa:
a3:29:9d:c5:87:90:c9:b7:06:a8:ec:37:44:e8:92:32:94:8e:
59:5a:cf:3d:fa:5f:2f:26:92:76:d1:f5:8b:22:30:21:10:bc:
fc:8f:0a:8b:ed:43:cb:4e:fb:62:ce:80:29:3f:dd:25:86:cb:
e7:92:f2:1d:87:fd:44:7a:a8:da:3e:89:94:e8:1e:92:0d:72:
37:df:22:b1:b8:a8:b9:29:ee:91:34:5a:1c:7d:9f:9e:8e:4a:
10:42:e5:3f:a1:ea:4c:01:23:39:20:ed:e9:69:96:df:02:8e:
c4:4e:92:a5:ae:f8:61:87:4a:e9:ab:f1:9d:1b:7d:4c:b6:4d:
76:4c:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:39 2026 by rpki-client