Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: WC3/YLx3gZyO18D5vEf4ryO5NjNN0INQin9iIpGY3Ag=
Subject key identifier: D8:07:F9:1A:1D:CA:48:77:65:01:22:35:0D:D5:DF:F3:58:26:E7:EF
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 019E1D901E3ADB7D683EC72DAED83DCB8F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:00:44 +0000
Manifest this update: Tue 12 May 2026 19:00:44 +0000
Manifest next update: Wed 13 May 2026 19:00:44 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: ad58Kd6MNyYy7n6YQSq78EU7QiKVFHUbRTGV/67ka3o=)
2: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (hash: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1e:3a:db:7d:68:3e:c7:2d:ae:d8:3d:cb:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: May 12 19:00:44 2026 GMT
Not After : May 13 19:00:44 2026 GMT
Subject: CN=d807f91a1dca4877650122350dd5dff35826e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:50:42:09:b6:12:9a:26:1c:83:1c:78:c6:
8c:7b:7a:fc:2e:76:e9:d8:e4:fc:0d:c6:85:da:01:
1b:42:2a:90:ab:30:01:e7:fe:0b:89:02:46:17:e2:
04:a8:3f:e5:91:ab:5b:68:9b:7b:38:dd:3b:91:ac:
e8:fd:7b:50:fc:1c:cb:d7:15:ad:2e:54:29:05:7b:
e0:fa:22:26:f7:6e:f5:cd:8e:b1:8e:de:1a:41:69:
3f:11:12:15:34:1d:8a:4e:a4:5f:4e:a5:65:6a:66:
c9:f9:20:91:4d:03:0e:7f:a3:88:44:06:1d:aa:a9:
65:6e:a1:76:70:f3:dc:6d:96:de:01:4f:f1:94:2e:
60:90:00:a0:cd:05:56:53:d2:7e:91:75:00:56:f8:
61:18:83:59:61:e5:37:c4:77:22:f5:f5:08:df:7f:
95:15:db:4f:64:d7:79:23:44:d4:9a:95:a1:3c:09:
2a:fd:40:f6:63:8f:ac:62:af:61:8b:0b:52:1b:c2:
a6:c9:5f:7c:90:5d:58:aa:43:6b:62:ff:0b:e5:37:
53:bf:2b:4f:47:e8:60:ec:e8:62:63:26:71:79:4f:
ea:b8:83:78:9f:82:3c:25:5a:32:11:e9:e1:f6:11:
f0:1f:5b:89:1b:b2:1d:c4:d4:b7:1a:b5:32:60:dd:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:F9:1A:1D:CA:48:77:65:01:22:35:0D:D5:DF:F3:58:26:E7:EF
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:ea:4a:3e:3d:93:e9:9e:63:7d:e2:23:21:79:f7:e9:0d:
39:17:5a:f2:48:eb:89:b3:b0:71:9d:1d:94:fe:0f:db:08:a3:
5c:c4:9a:fe:cf:ff:60:6c:5d:19:e3:b9:a9:7a:03:9d:37:60:
d8:1f:d6:06:ea:f4:8b:c1:bc:6d:82:1a:26:7b:07:ea:de:dd:
0b:47:36:f6:1c:b6:9c:69:fe:7a:c8:07:06:0d:13:9b:b2:f7:
2b:23:99:8c:6a:89:f7:ab:b5:79:6b:72:48:b9:c9:cc:82:a2:
40:e8:40:52:58:dd:00:d7:d8:8b:5e:2a:b3:d6:52:da:db:f1:
6b:d1:a5:9c:25:50:c2:ad:92:5d:c8:73:78:eb:80:9e:a6:b4:
3a:6d:e3:80:14:2c:8b:7b:aa:a8:e4:8c:33:4f:f4:55:c1:32:
de:03:91:8a:b6:c7:a8:86:bb:fd:21:e0:45:fc:c0:69:ff:b6:
89:65:6e:bc:f6:f2:16:48:2b:ae:91:d8:92:c1:aa:c4:6d:6d:
9d:9e:90:04:59:a7:d8:21:01:62:e3:81:5e:b0:75:88:4e:48:
e0:fb:9d:5f:1c:92:c2:42:32:d6:ff:9a:75:61:81:35:52:5b:
db:7b:42:e0:30:64:8f:e8:f3:40:8a:7e:4e:51:51:1e:37:f5:
a3:6c:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:28 2026 by rpki-client