Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: bjYltBQJgvqFlhHY2s+J5Paxzy24UJQgLhmCYbJMkxw=
Subject key identifier: 8E:0F:21:EF:DF:75:B9:EA:E0:E9:A7:FD:EC:14:C4:4E:E0:04:44:D6
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 019E1EA376BE4501408E5507706B9B2CAEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0B55
Signing time: Wed 13 May 2026 00:01:29 +0000
Manifest this update: Wed 13 May 2026 00:01:29 +0000
Manifest next update: Thu 14 May 2026 00:01:29 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: Zp+B8bgxsxagNnhqp+XbiaT2jkVKsvtKz5uiWHU7XUo=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:76:be:45:01:40:8e:55:07:70:6b:9b:2c:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: May 13 00:01:29 2026 GMT
Not After : May 14 00:01:29 2026 GMT
Subject: CN=8e0f21efdf75b9eae0e9a7fdec14c44ee00444d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:db:8e:9d:53:16:74:3b:fe:b1:8c:e4:86:
18:8a:9c:e0:65:8d:47:c9:34:77:42:cb:ed:9d:62:
4b:09:fe:0f:65:af:7d:98:71:5b:aa:a1:bb:e3:13:
b6:27:d8:48:11:14:0e:e4:ec:4f:7b:67:7d:77:9b:
82:c0:ba:57:e9:aa:a3:63:e7:12:30:b9:6e:93:7c:
9f:8d:1f:3b:ad:a8:59:ea:89:58:85:64:7e:20:9e:
37:ac:f3:bf:cb:4a:c6:b9:5c:58:3b:ed:a0:9c:40:
fe:84:cc:a3:54:f5:60:da:3c:30:8b:40:fa:a1:53:
2b:74:c1:4b:07:da:00:1b:a1:aa:1d:cf:82:02:09:
90:77:88:7f:c1:d9:8f:46:e1:e0:91:b3:57:ba:0e:
da:af:d9:d5:1e:7a:96:08:cc:d6:87:00:22:eb:e8:
2a:46:ae:db:97:8b:5f:f7:7d:aa:ee:39:8b:d5:4a:
e1:9c:57:d6:d3:a2:04:0b:1c:05:fb:19:76:2f:e8:
b2:c5:15:3c:86:f5:06:2c:f0:83:b7:6f:68:41:57:
32:0e:73:d8:e8:b7:22:84:75:93:1e:66:ba:1b:f6:
fc:af:25:fd:10:2e:8f:02:8d:04:0e:19:6c:d0:6f:
63:a9:75:9a:3b:da:ea:62:73:9d:55:42:20:a8:be:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:21:EF:DF:75:B9:EA:E0:E9:A7:FD:EC:14:C4:4E:E0:04:44:D6
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5c:e7:81:e2:86:06:f6:b0:b8:da:f3:a1:24:be:97:06:e3:
f1:8d:35:33:c6:20:d3:f5:d9:53:dd:5a:0e:e2:a5:f8:26:2b:
b6:d0:72:51:50:fe:f9:13:92:d4:e1:a1:ee:72:b3:23:05:e2:
ee:b3:aa:01:f3:0c:46:00:e8:02:68:21:7f:5c:88:85:db:98:
02:85:55:99:e0:61:d9:77:85:45:99:72:1d:7a:37:74:b4:f5:
6a:89:04:59:ea:d5:56:b8:00:95:80:5a:63:4f:db:6e:39:19:
f0:09:0b:18:cb:10:23:7f:5f:ab:e1:dc:dd:f5:a1:d7:02:ae:
fd:90:7f:6f:dc:68:fb:60:14:b8:43:37:41:c2:79:e1:f4:b5:
e3:27:10:45:af:b6:38:4d:94:2d:b5:3e:d4:99:89:6d:86:7c:
aa:4f:bb:c6:5e:32:a8:0b:be:6d:f6:3d:82:e7:92:db:f6:14:
45:f0:c7:d3:bd:6f:5a:8c:65:7d:11:a8:5c:cf:fd:a1:fc:99:
02:b4:b7:39:c9:00:2e:e2:b7:2c:eb:4e:9b:91:36:89:1c:90:
69:3f:ce:e2:a0:bd:74:02:c1:27:f0:39:6c:d5:8a:83:ce:78:
1a:ec:5c:98:13:44:41:e3:84:7f:03:a8:ef:9c:8b:ab:86:70:
85:b7:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:05 2026 by rpki-client