
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: m7MByvxBrdLp5INd6lTUJ03DC7ec4rsGdh/MzbyXs5g=
Subject key identifier: 7E:CB:11:BB:D9:3C:AD:3F:1C:4A:3C:C6:FC:64:8E:8D:45:A4:3E:3F
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 019E1D226E1ACD2C16E037E2814EE2C6878A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:00:56 +0000
Manifest this update: Tue 12 May 2026 17:00:56 +0000
Manifest next update: Wed 13 May 2026 17:00:56 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: mum6s90+mQCZuDv35q336bM4fMMui8qC/nfGUWNX9m4=)
2: 2bJ2chGfdjROmt484R3iaMkBv5s.roa (hash: qIi6O0mX3eNR+7L75XDWNrvKkZYX8S4LP3pHsAXc7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:6e:1a:cd:2c:16:e0:37:e2:81:4e:e2:c6:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: May 12 17:00:56 2026 GMT
Not After : May 13 17:00:56 2026 GMT
Subject: CN=7ecb11bbd93cad3f1c4a3cc6fc648e8d45a43e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:0c:e1:a2:72:ca:cb:f2:0b:ec:04:10:ce:
71:8b:c1:6d:9d:ba:92:b9:db:e7:df:bf:97:6f:6c:
b4:59:74:59:fc:55:52:f3:8b:f8:e2:2a:6f:08:85:
99:ea:69:90:4e:9a:aa:ac:49:96:38:08:89:39:a3:
d2:28:c0:03:fe:29:d8:1d:f1:66:5f:67:1d:8b:9f:
2a:bf:fb:2e:42:ba:f9:e9:e0:2d:35:1a:1e:17:27:
29:c2:09:5d:6d:9f:0d:ff:41:0d:35:28:cc:36:c4:
1e:24:c2:34:9c:6d:13:44:11:89:88:fd:d7:e8:c6:
59:00:79:21:65:3e:13:57:bb:63:4b:7a:96:c0:ae:
2f:e0:42:5d:9f:63:18:7d:06:98:1f:89:31:ca:ed:
74:c7:f8:0d:35:ed:48:60:17:68:a6:e1:b3:28:8c:
b3:a0:13:e2:cd:9d:60:91:44:a6:fb:9d:93:66:89:
ac:9f:85:ae:f3:33:8e:30:0b:35:ff:47:b5:80:90:
8e:56:67:0f:f6:fb:da:8b:95:cb:f8:c3:4d:96:5d:
0e:05:47:bd:bc:af:a9:b7:17:f7:1b:5b:56:fc:01:
10:6e:3e:b4:a9:16:ef:8b:51:fe:c3:ef:ae:a8:c9:
85:ac:14:fc:43:f5:6b:58:39:7a:e1:07:39:c5:6b:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:11:BB:D9:3C:AD:3F:1C:4A:3C:C6:FC:64:8E:8D:45:A4:3E:3F
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:37:69:7f:cf:ee:ff:1d:2f:b0:b9:e8:60:67:d2:f6:c0:7f:
77:d6:03:3b:b9:ee:17:af:44:f9:98:7f:e5:da:dc:67:66:e3:
d8:d1:49:73:3d:9a:9b:0c:82:00:1f:6c:b1:68:a8:ce:3f:ad:
f8:7c:dd:74:f0:86:eb:12:f6:05:b7:9a:43:4a:27:ee:2e:b9:
f2:28:4b:58:96:39:e7:5a:cd:d2:d8:cc:57:99:1b:b6:31:b4:
a3:9e:25:0d:a9:96:d0:c7:be:c4:70:b8:32:ce:99:d0:59:df:
3d:2d:9b:ad:b5:41:ee:7e:fe:4b:9f:25:40:ff:57:2e:27:78:
76:54:50:7d:ca:3e:96:f9:28:3a:14:4e:15:59:84:01:b7:e8:
22:82:54:90:19:2b:ca:2a:d3:e7:3b:3a:c9:6e:9a:c0:fc:21:
c7:b5:e9:f5:70:10:ad:a0:36:5d:7c:ae:12:17:3d:11:bc:81:
e7:65:86:fc:43:44:44:b9:56:43:5d:06:22:d2:b5:cf:4e:01:
ba:53:c8:f7:34:e2:a4:43:7c:65:41:28:5e:47:da:cd:a0:e8:
05:9b:88:13:58:c3:67:44:46:6f:6c:fe:29:81:30:89:97:11:
d1:9b:85:f3:77:0a:2a:f5:ef:8e:eb:78:6f:93:0c:51:62:9f:
55:f1:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:24:09 2026 by rpki-client