Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: ySPsQ7y/r0BCoqkmJsWpRUoZ9i235nIjBSQu3muwzgs=
Subject key identifier: E8:89:F0:83:6C:D2:6F:84:12:DE:D8:41:95:AE:27:EB:B3:76:32:BA
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 019E20916A107DE494CB2C824FD94A4E75B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 09:01:01 +0000
Manifest this update: Wed 13 May 2026 09:01:01 +0000
Manifest next update: Thu 14 May 2026 09:01:01 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: b3PNxUZdMZ6gZCeNfVU1rGzJ+n8WmSEqMdbZcgsT+A4=)
2: VEbdeDBfoS7OV3q8Pyt7XMZlTvw.roa (hash: ryGpV2N0yjPTa2J+772hPmPtDVApuFyLbz9EHlqw2ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:6a:10:7d:e4:94:cb:2c:82:4f:d9:4a:4e:75:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: May 13 09:01:01 2026 GMT
Not After : May 14 09:01:01 2026 GMT
Subject: CN=e889f0836cd26f8412ded84195ae27ebb37632ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:cd:b5:aa:ea:45:87:ec:7a:3e:ad:96:d2:
47:90:f5:bc:05:fa:d9:3a:a2:7e:10:de:92:42:fc:
1c:0e:f2:ae:db:6c:05:56:11:3f:0a:2d:61:29:6c:
91:d1:c9:92:5e:47:87:65:bb:64:0d:1d:57:61:42:
c6:d1:ce:3d:c9:fe:91:12:c6:cc:49:7a:fc:eb:b3:
b2:60:90:21:17:e4:34:61:0d:40:cd:f2:c4:3f:3f:
64:f3:13:91:37:4f:6a:52:8a:ad:e6:4e:3d:7f:f5:
ca:52:80:ef:70:35:e8:fd:22:94:08:6d:e4:0c:5d:
af:6c:ce:da:b8:d4:7a:03:4a:8d:31:6a:84:61:14:
9a:5a:17:70:67:6f:eb:25:15:b8:be:7d:2c:8f:c5:
77:8a:72:28:60:fa:15:8c:92:9e:4a:fa:cd:64:6a:
22:cc:34:f0:ba:dc:71:ab:cb:86:40:76:99:7e:f3:
eb:d5:26:76:6a:b4:90:57:94:82:77:00:d9:d7:53:
f2:49:b1:39:38:c4:0a:e5:1e:35:6d:dc:f4:b3:26:
50:00:8f:28:86:25:15:7b:c9:b2:6d:2f:da:b0:56:
45:38:99:11:11:3c:a1:24:e6:22:c7:50:e0:62:f6:
d4:ca:a6:5d:bb:92:36:9e:29:64:34:3e:c1:46:63:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:F0:83:6C:D2:6F:84:12:DE:D8:41:95:AE:27:EB:B3:76:32:BA
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:e0:a0:48:58:1a:80:d8:87:e7:77:ea:b1:ca:6f:32:fb:
f2:72:c9:06:f1:5f:d6:5e:d2:e7:d4:7e:96:38:f7:88:1e:f3:
01:f4:fc:03:6a:fe:1e:1c:88:34:33:ad:da:1f:0f:d1:59:9e:
36:f4:af:6b:e9:11:e3:15:5f:9b:52:cc:8b:7a:3c:30:cb:78:
91:da:53:04:e4:a8:3e:52:c7:9c:2f:7a:c0:ca:57:93:11:4d:
49:79:b2:28:64:31:c0:aa:fc:54:5d:dc:91:3a:87:b8:08:ed:
48:ef:c4:99:8c:6c:24:ab:82:8c:c3:a4:b2:c2:48:8b:db:28:
7f:6c:b6:fd:48:b9:60:74:92:55:8c:d6:db:aa:8d:fb:d9:fb:
09:47:d1:43:fe:59:d7:a2:c2:2e:01:be:fc:71:a2:c9:d2:e0:
e7:1b:99:47:c1:99:2b:65:df:52:cf:07:22:0a:59:5f:69:04:
98:a7:b3:8b:76:98:ba:cb:60:6a:1e:2b:fd:68:57:08:3b:be:
09:b1:95:59:cd:53:45:ee:1a:f7:b3:54:cd:86:ad:8d:54:94:
de:01:b3:07:ed:54:40:ec:16:43:fe:a2:d5:54:12:39:ec:9d:
23:a2:99:af:54:e9:79:8e:60:dc:de:ce:24:b7:11:f6:6f:83:
86:56:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:53 2026 by rpki-client