Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: EIdomZfPfJYtE+tT1qhrkAomd6eG46X/murEBsa7KH8=
Subject key identifier: 9F:B5:4B:54:08:7E:2C:D9:FC:88:64:84:A5:45:2A:14:85:4D:20:70
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 019E1E356F65FB3F13F43663DE79C344BF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 0B9D
Signing time: Tue 12 May 2026 22:01:18 +0000
Manifest this update: Tue 12 May 2026 22:01:18 +0000
Manifest next update: Wed 13 May 2026 22:01:18 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: Y+cej4npJMywXbE+83zkqIlXM3mfSaZnSjjR45sNuA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:6f:65:fb:3f:13:f4:36:63:de:79:c3:44:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: May 12 22:01:18 2026 GMT
Not After : May 13 22:01:18 2026 GMT
Subject: CN=9fb54b54087e2cd9fc886484a5452a14854d2070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:f5:ee:8f:a4:4b:e9:1e:a3:3a:40:b4:2b:
f5:bb:32:b5:64:ea:5f:1c:90:cc:d4:be:29:94:e0:
e7:f4:ea:af:39:78:05:83:97:01:57:9c:7f:4e:e7:
ea:7d:f9:7a:c1:5f:da:07:27:8f:e5:bb:5d:09:ba:
03:34:14:6a:dc:d2:29:cc:9c:43:66:9d:35:f7:63:
e5:dc:6a:1a:9b:8e:8c:a4:3e:12:43:9a:57:1d:02:
1c:57:e0:6f:6b:c1:1c:65:d7:79:62:49:1e:bd:29:
ea:ea:3a:86:76:03:d6:3d:eb:fe:25:16:cc:9d:2c:
79:c9:ca:87:11:e2:9f:2d:f5:96:41:4d:26:a5:b6:
e3:3c:94:70:37:df:bf:2b:bf:b6:a8:a1:c8:79:f0:
c3:36:6f:bd:90:ac:7f:d0:eb:56:09:08:a7:c6:f9:
43:35:9d:91:be:f7:5f:fa:9f:8b:f1:3c:b7:71:79:
44:eb:e3:50:cf:a6:4e:5a:5f:8a:59:4d:33:e2:f2:
9a:58:25:13:29:2c:e8:46:12:3e:08:ce:01:86:ad:
9a:c1:56:99:78:a1:ff:43:4c:2b:40:89:dc:a8:b0:
bb:75:80:24:2c:ac:41:d0:e1:37:cd:af:3f:16:3f:
af:ea:0b:e4:4c:1d:2d:cd:64:25:97:ff:a4:74:99:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:4B:54:08:7E:2C:D9:FC:88:64:84:A5:45:2A:14:85:4D:20:70
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a3:f9:3f:b2:dd:2f:2f:5a:fa:b2:db:e5:80:ed:df:d0:90:
65:fb:83:7d:fc:85:fe:78:68:3a:f0:2c:37:3f:9b:d7:db:a1:
e8:9d:87:c4:9d:13:e7:60:b6:d9:f6:a7:73:fa:f2:05:74:da:
51:e0:95:3a:66:7d:11:7f:6c:88:8f:1f:e7:6d:46:8e:54:a6:
43:a9:6c:3a:32:04:bf:61:3e:d0:2b:d0:78:98:b4:48:b8:7a:
bf:eb:b7:c6:1b:0b:97:0c:da:b1:55:2d:04:b9:3a:8b:40:ec:
5f:81:02:38:95:08:30:fb:dd:64:90:e2:64:28:5c:d3:96:42:
a8:8a:90:14:46:53:6c:4e:64:ba:d6:7c:3c:d5:c2:ea:8a:9e:
fa:73:77:fd:7c:a3:4a:b9:7b:42:7b:04:7b:0f:3a:d8:9d:6d:
d5:85:72:43:0f:fa:da:02:40:64:7f:67:aa:eb:ae:66:48:9b:
69:9c:42:ea:e4:f9:e4:c5:14:e7:56:57:4f:55:71:b8:bd:db:
d6:99:60:32:ff:ec:3a:cb:5e:d5:cd:3b:2f:63:4c:fa:11:c1:
bf:fd:22:77:8f:50:59:fb:3a:37:a6:35:30:37:0f:75:b8:c4:
1f:c5:e2:c9:47:db:41:a1:aa:22:cd:36:96:a1:67:47:38:fb:
af:f6:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:10 2026 by rpki-client