Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: AgGFdjgRgWLJKx7nFHnz+M+4BHBWZN8LPVMzw4ulD+k=
Subject key identifier: 8E:71:CD:2C:74:4F:4D:EC:2F:AC:20:BF:74:7A:AD:B3:14:9D:DB:D6
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 019E1CEB576F6F1BCCEDAABF5B104BE9A0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 16:00:45 +0000
Manifest this update: Tue 12 May 2026 16:00:45 +0000
Manifest next update: Wed 13 May 2026 16:00:45 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: D5H0W6kHSDRdO3fpU9YYtk++Gu+Otlcfm6MPzMWCGGk=)
2: maZq56SMgB7nWqqF5eeF3G-X-7A.roa (hash: xVS8tTvs0Q9QEIgJ9B2IqY6QH4qt+wpz/OCltyOVeVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:57:6f:6f:1b:cc:ed:aa:bf:5b:10:4b:e9:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: May 12 16:00:45 2026 GMT
Not After : May 13 16:00:45 2026 GMT
Subject: CN=8e71cd2c744f4dec2fac20bf747aadb3149ddbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:cb:12:4d:7c:dd:e7:b8:90:da:7f:10:40:
01:bd:a0:01:34:5b:1c:78:a3:44:15:71:10:35:cb:
90:56:b2:fa:10:14:27:bd:a4:62:3e:fd:c8:6f:17:
c2:a3:50:e1:1a:2d:41:08:bd:ca:a2:63:53:0a:ca:
b9:78:f5:f0:4b:61:51:c8:c7:02:da:8a:92:c7:3a:
33:17:8f:ff:02:e1:e1:0f:fc:fc:53:36:fc:cf:7f:
14:9c:2c:b8:82:fb:1d:a2:d2:a7:29:c9:fc:e8:0a:
0d:ca:56:ed:d6:aa:b5:57:df:04:bb:e8:75:65:15:
4b:f9:22:a4:d5:bd:84:ed:95:4d:60:f2:ef:37:e2:
eb:a6:9a:0e:2e:8e:2f:d7:89:ed:f2:99:b4:b9:2f:
45:bf:67:de:cb:94:6e:0c:12:40:6a:bd:a3:1b:98:
8b:a6:04:5d:40:53:da:e1:30:ff:89:63:58:b2:ea:
18:3d:04:92:67:e6:31:4e:3f:38:88:6e:a9:53:08:
89:cf:d1:62:8a:0b:2b:0a:08:5b:ae:97:e9:34:a4:
47:cf:ea:48:1e:b4:f9:c1:73:11:ce:e5:0f:48:10:
0d:67:ac:44:23:62:4d:f1:ab:7c:6b:b6:37:21:1e:
aa:a4:8b:ab:f9:27:5a:9a:2f:5a:9f:96:b8:72:9c:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:CD:2C:74:4F:4D:EC:2F:AC:20:BF:74:7A:AD:B3:14:9D:DB:D6
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7d:9b:04:2e:95:62:88:cc:37:0b:cb:65:ae:e2:9d:27:82:
a9:a4:ac:b7:6e:1f:0a:3d:00:9b:c9:f4:33:af:33:30:57:94:
6d:07:72:13:db:f4:a3:c4:90:d5:20:a4:9c:f4:fd:28:c0:55:
91:e1:99:b8:66:69:7e:f2:b9:49:61:e7:7c:ca:0e:11:be:95:
f5:12:96:99:f8:54:7d:d7:5c:74:3a:d9:f1:04:46:45:fb:bd:
21:86:12:3c:7f:58:4a:08:02:12:7b:16:b7:e3:05:55:66:81:
bd:50:da:f9:b1:e2:a5:be:fb:d4:7b:74:fe:80:05:6a:68:1f:
3d:b1:f8:2b:01:34:02:44:81:71:dc:c6:21:25:81:9d:ec:4f:
5b:9c:bf:98:ca:6b:2d:66:6c:ac:6f:b0:88:7a:1d:45:e3:31:
db:d9:f0:f2:1d:d8:52:cf:65:c8:28:c0:21:00:2d:cb:89:cf:
04:fa:16:e2:80:79:d6:8d:0e:53:39:09:d3:74:af:df:20:ce:
32:a2:f5:32:bd:3c:ca:1d:9e:01:ea:07:dc:98:38:e2:32:5a:
c2:6c:45:69:45:6c:d0:c8:75:39:1e:66:5e:16:e3:13:d5:ee:
29:ee:d7:23:88:b0:d1:6a:8e:71:0c:a2:fe:82:0e:19:e0:b2:
46:fe:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:55 2026 by rpki-client