Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: WLYEZCkmcc4DsOs3VM0egifQFvGplgM0D23DYplfKew=
Subject key identifier: 96:46:5F:29:BD:BD:EC:FF:31:CB:31:F2:05:62:B4:61:89:7D:F9:AE
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019E1CB46F07560A121C1D418F3830E063AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0B0B
Signing time: Tue 12 May 2026 15:00:47 +0000
Manifest this update: Tue 12 May 2026 15:00:47 +0000
Manifest next update: Wed 13 May 2026 15:00:47 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: E0dGs0Enfi8eaL/bGA+DTQx8nLtdDkeV5a6R9iMo60A=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:6f:07:56:0a:12:1c:1d:41:8f:38:30:e0:63:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: May 12 15:00:47 2026 GMT
Not After : May 13 15:00:47 2026 GMT
Subject: CN=96465f29bdbdecff31cb31f20562b461897df9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d0:a0:89:0a:e2:97:7f:3b:af:8c:3d:ac:14:
91:6f:67:8e:85:9f:af:5e:b0:81:42:dc:bd:13:42:
b1:f6:82:9e:94:25:fe:06:21:a5:af:35:88:28:6d:
b8:15:b2:62:db:c8:f3:1e:e7:40:36:ba:fe:41:a5:
f2:04:bb:59:cd:7c:06:fc:fb:d9:fa:c7:fd:c7:19:
fe:e6:80:ce:3a:ec:fa:ba:69:64:5f:be:33:17:99:
36:1f:8a:08:57:a3:46:68:e9:15:fe:bd:9c:da:5d:
48:03:46:4f:a2:35:45:a4:44:ec:f7:4e:44:9e:b8:
c5:db:23:ab:74:71:02:da:8f:a2:ce:24:2c:c7:6b:
c7:80:be:9c:ae:c7:0a:04:e4:16:b4:a1:71:57:01:
fe:8b:36:e0:c9:e7:6b:4b:9d:50:0c:93:2c:33:3b:
da:ce:e2:3a:1a:a4:4c:f8:9b:b6:fa:02:48:43:98:
c6:42:67:2b:07:72:60:11:eb:18:39:55:62:c2:2d:
3e:ec:f6:a7:db:2c:e8:48:f3:21:91:15:1b:bd:83:
eb:30:ea:fa:fd:9e:b9:76:70:04:6b:fb:de:7f:02:
7c:5d:57:d0:bc:35:49:9f:05:46:35:6a:47:9a:11:
31:75:a2:54:ea:1d:4e:e2:29:ce:04:f8:8a:c2:6a:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:5F:29:BD:BD:EC:FF:31:CB:31:F2:05:62:B4:61:89:7D:F9:AE
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:dc:5e:af:24:36:00:c6:f1:1b:6b:ce:7b:5d:a2:c3:70:
e8:5e:30:6b:9c:e3:13:39:eb:28:06:a1:8e:f9:a0:04:f4:52:
b8:9f:bc:a9:68:c0:d6:c8:fb:0c:87:c0:fc:e5:88:ed:fa:7e:
9d:1a:bb:20:82:3e:72:da:91:3e:f1:6e:86:73:8c:32:b3:26:
0f:e5:2b:37:de:bb:e6:81:5d:80:6e:35:fd:1e:58:8d:f1:c5:
83:99:5a:0a:e4:8f:76:12:bb:f4:fd:a8:f8:cc:a9:80:a7:af:
08:70:4e:89:a5:e4:cb:f9:4e:9c:70:cc:5a:67:22:8c:8c:22:
97:3c:57:b3:af:04:47:e3:6b:d5:3b:7b:74:25:b7:2f:da:30:
75:4c:37:2e:9f:1a:9d:1e:45:e2:34:ce:01:1d:c1:90:06:77:
60:7e:b7:16:b6:c3:fd:b9:b9:fc:5a:9e:25:17:ee:2d:c5:e3:
e9:a2:10:15:0e:68:90:21:2c:7f:a5:db:ab:a2:7c:ec:9b:0d:
67:44:b9:a6:44:2a:fc:c4:cb:91:22:b1:80:61:08:03:dc:57:
2b:ec:c6:66:95:5b:c7:29:a2:c2:94:47:63:3d:65:7d:91:0e:
7e:11:34:8e:40:89:bb:d7:ef:e5:7b:8c:b6:59:e7:ff:c6:d0:
20:ff:da:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctG8HVgoSHB1Bjzgw4GOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGZmZGJjOTMzMTc4ZDdhMWJiZjk5NjA4ZTNhOTVkNGRl
ZThhZTYwHhcNMjYwNTEyMTUwMDQ3WhcNMjYwNTEzMTUwMDQ3WjAzMTEwLwYDVQQD
Eyg5NjQ2NWYyOWJkYmRlY2ZmMzFjYjMxZjIwNTYyYjQ2MTg5N2RmOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89CgiQril387r4w9rBSRb2eOhZ+v
XrCBQty9E0Kx9oKelCX+BiGlrzWIKG24FbJi28jzHudANrr+QaXyBLtZzXwG/PvZ
+sf9xxn+5oDOOuz6umlkX74zF5k2H4oIV6NGaOkV/r2c2l1IA0ZPojVFpETs905E
nrjF2yOrdHEC2o+iziQsx2vHgL6crscKBOQWtKFxVwH+izbgyedrS51QDJMsMzva
zuI6GqRM+Ju2+gJIQ5jGQmcrB3JgEesYOVViwi0+7Pan2yzoSPMhkRUbvYPrMOr6
/Z65dnAEa/vefwJ8XVfQvDVJnwVGNWpHmhExdaJU6h1O4inOBPiKwmolUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZGXym9vez/Mcsx8gVitGGJffmuMB8GA1UdIwQY
MBaAFNoP/byTMXjXobv5lgjjqV1N7ormMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2Ut
M2NhZDM3MDY3NDA1LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2UtM2NhZDM3MDY3NDA1
LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7HcXq8k
NgDG8RtrzntdosNw6F4wa5zjEznrKAahjvmgBPRSuJ+8qWjA1sj7DIfA/OWI7fp+
nRq7III+ctqRPvFuhnOMMrMmD+UrN9675oFdgG41/R5YjfHFg5laCuSPdhK79P2o
+MypgKevCHBOiaXky/lOnHDMWmcijIwilzxXs68ER+Nr1Tt7dCW3L9owdUw3Lp8a
nR5F4jTOAR3BkAZ3YH63FrbD/bm5/FqeJRfuLcXj6aIQFQ5okCEsf6Xbq6J87JsN
Z0S5pkQq/MTLkSKxgGEIA9xXK+zGZpVbxymiwpRHYz1lfZEOfhE0jkCJu9fv5XuM
tlnn/8bQIP/a8A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:18:03 2026 by rpki-client