Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: rxzSFQGCtWJvT1slipESGQJqc54/jydEKBNOOWttvnU=
Subject key identifier: 9D:46:79:36:38:2F:33:7F:30:EF:B1:08:6F:59:5B:4F:54:11:F5:A6
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 019E1C46B9A1E23B387A0A25F0F68DB1275D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0EB4
Signing time: Tue 12 May 2026 13:00:57 +0000
Manifest this update: Tue 12 May 2026 13:00:57 +0000
Manifest next update: Wed 13 May 2026 13:00:57 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: jMOaLSZr1QfbWaKjYPRIpLH/mxumBp5gmK5B/J3tSbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:b9:a1:e2:3b:38:7a:0a:25:f0:f6:8d:b1:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: May 12 13:00:57 2026 GMT
Not After : May 13 13:00:57 2026 GMT
Subject: CN=9d467936382f337f30efb1086f595b4f5411f5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:0e:75:89:f1:1e:79:2b:26:8f:12:74:ab:
b6:a7:e5:8f:a4:ae:50:6a:2c:cc:0a:9d:0b:03:2a:
a8:6e:2e:8f:ef:7a:7a:4b:b4:d5:f7:97:fc:ba:f3:
39:99:f8:01:ea:7d:6d:0c:eb:a8:f4:d4:6b:1a:a1:
ab:41:d3:80:c1:56:16:3e:2c:46:37:40:aa:d8:a0:
e4:40:e1:28:9d:14:dd:55:89:2f:66:d5:b5:a7:d8:
40:6c:cf:15:32:17:6b:a1:db:07:f3:e7:7a:5e:58:
e2:82:23:b7:44:bb:ea:4e:36:d8:19:90:5d:c7:c8:
af:03:8d:21:94:b7:60:67:cb:dc:a6:37:21:9e:86:
89:e9:d6:69:fd:a2:df:67:75:af:38:3d:d4:4f:d6:
2e:3f:4c:3e:ea:52:e9:d6:ec:3e:2c:99:5f:01:c2:
84:ec:85:2f:ad:81:6c:97:5a:22:7b:b8:16:e8:9b:
2d:9b:7f:7a:2d:dc:9e:26:4d:0c:c6:b3:ea:af:b9:
2b:c8:c3:4e:7b:fe:6e:1b:06:b1:b9:29:b9:14:6e:
dd:56:31:1d:80:c0:91:a4:99:e3:85:1f:5a:14:ff:
a7:36:a6:ea:6c:1f:08:ca:e0:0e:33:7a:01:c1:13:
4a:f7:9b:9d:30:24:bc:7f:b7:a4:a8:d6:e7:fc:14:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:79:36:38:2F:33:7F:30:EF:B1:08:6F:59:5B:4F:54:11:F5:A6
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1e:d7:b5:88:75:1f:1f:c8:7b:7e:7e:eb:39:f7:78:63:61:
bb:20:6e:7f:dc:b8:ab:1a:43:e5:26:02:f6:e5:bc:f8:40:b3:
1c:dd:cd:94:75:e8:ef:cf:34:b4:dc:b6:18:7e:22:48:26:e1:
a8:b1:cd:08:d1:94:83:04:0d:be:62:f7:54:82:c5:79:03:cc:
b0:07:f2:cf:a7:f1:5d:fe:14:a0:c0:0e:44:e6:36:6a:be:b0:
78:ca:66:d3:ba:a4:f0:fc:63:9d:4a:b9:00:71:f0:b0:7d:3d:
03:57:6e:3b:cf:28:a3:b6:97:da:40:98:88:6a:98:cb:5d:32:
26:ff:3d:0a:1d:39:f2:fe:18:e0:e8:c7:30:51:70:bd:1f:ec:
b2:4a:39:79:43:ed:44:96:9f:83:45:af:30:02:00:17:6e:74:
1b:79:20:b8:c0:c3:d9:6c:96:60:f1:03:fc:9e:5b:d8:d5:c6:
01:7b:ef:29:48:c2:e9:80:c8:33:8c:fb:4f:42:79:67:ee:e2:
3c:6f:18:a0:f5:c7:59:29:32:4d:6e:2c:f7:37:33:6a:a7:5f:
99:1e:80:bc:1d:07:67:52:b2:13:6c:46:ba:c5:7c:c2:88:25:
b8:07:95:39:95:ff:80:6c:fc:5c:f5:32:9d:3a:82:7c:e0:21:
48:49:21:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRrmh4js4egol8PaNsSddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWY2MWNjNDA2OWMzNjM2MjQ0NWQ4MTg4OTEwMzQwYjZl
NTdiYTUwHhcNMjYwNTEyMTMwMDU3WhcNMjYwNTEzMTMwMDU3WjAzMTEwLwYDVQQD
Eyg5ZDQ2NzkzNjM4MmYzMzdmMzBlZmIxMDg2ZjU5NWI0ZjU0MTFmNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+AOdYnxHnkrJo8SdKu2p+WPpK5Q
aizMCp0LAyqobi6P73p6S7TV95f8uvM5mfgB6n1tDOuo9NRrGqGrQdOAwVYWPixG
N0Cq2KDkQOEonRTdVYkvZtW1p9hAbM8VMhdrodsH8+d6XljigiO3RLvqTjbYGZBd
x8ivA40hlLdgZ8vcpjchnoaJ6dZp/aLfZ3WvOD3UT9YuP0w+6lLp1uw+LJlfAcKE
7IUvrYFsl1oie7gW6Jstm396LdyeJk0MxrPqr7kryMNOe/5uGwaxuSm5FG7dVjEd
gMCRpJnjhR9aFP+nNqbqbB8IyuAOM3oBwRNK95udMCS8f7ekqNbn/BRBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1GeTY4LzN/MO+xCG9ZW09UEfWmMB8GA1UdIwQY
MBaAFNifYcxAacNjYkRdgYiRA0C25XulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3Njkt
ZWEzMmMyOGQzODdjLzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3NjktZWEzMmMyOGQzODdj
LzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx7XtYh1
Hx/Ie35+6zn3eGNhuyBuf9y4qxpD5SYC9uW8+ECzHN3NlHXo7880tNy2GH4iSCbh
qLHNCNGUgwQNvmL3VILFeQPMsAfyz6fxXf4UoMAOROY2ar6weMpm07qk8PxjnUq5
AHHwsH09A1duO88oo7aX2kCYiGqYy10yJv89Ch058v4Y4OjHMFFwvR/ssko5eUPt
RJafg0WvMAIAF250G3kguMDD2WyWYPED/J5b2NXGAXvvKUjC6YDIM4z7T0J5Z+7i
PG8YoPXHWSkyTW4s9zczaqdfmR6AvB0HZ1KyE2xGusV8wogluAeVOZX/gGz8XPUy
nTqCfOAhSEkhuA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:50 2026 by rpki-client