Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: Drsdtx2eoBnvw/RXcmyBjGKz+SBqT0EtYakZK1irHA4=
Subject key identifier: CA:17:CA:D4:37:6F:5E:D2:AC:6B:AF:04:68:DA:CE:BC:19:9F:0E:F9
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019E1DC7829B6F794597E17F58A3D5B0A84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0D99
Signing time: Tue 12 May 2026 20:01:14 +0000
Manifest this update: Tue 12 May 2026 20:01:14 +0000
Manifest next update: Wed 13 May 2026 20:01:14 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: 5fYJtoKB2IGoP+xenCxmEsFjf7oiOVE2konfphFgR28=)
2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=)
3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:82:9b:6f:79:45:97:e1:7f:58:a3:d5:b0:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: May 12 20:01:14 2026 GMT
Not After : May 13 20:01:14 2026 GMT
Subject: CN=ca17cad4376f5ed2ac6baf0468dacebc199f0ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:4c:be:6e:91:e7:c7:1e:c5:cf:9e:ae:ba:
3b:6c:61:ac:bd:4a:2f:b1:58:9c:30:c3:25:23:17:
48:6b:cd:dd:04:dd:fa:85:b2:29:29:fd:8c:21:d6:
8e:9c:c2:a9:27:2f:b5:9f:b7:86:5f:f1:29:d9:68:
95:98:6b:c5:35:bd:14:92:4b:03:1b:14:d9:15:66:
54:e8:05:f5:32:3a:1f:42:c7:a7:59:25:97:f7:92:
7a:af:3f:26:a8:2d:98:fc:ee:41:65:42:0f:ff:b5:
02:15:b1:72:e3:2f:38:f1:1a:a9:1d:a9:06:23:ac:
18:be:28:d0:84:8d:ab:10:42:25:af:e7:a3:f0:ee:
9b:77:e9:71:b7:97:f3:c7:b4:f1:67:9b:1a:5f:e2:
34:66:b3:7e:53:73:b8:57:d6:64:23:13:a3:42:72:
66:24:23:3c:58:a1:95:c9:fd:38:a1:87:5c:e9:18:
c0:b2:7e:c0:cc:1d:37:d3:79:d5:d6:60:f4:e2:7a:
0a:d5:51:e3:40:20:97:f0:e5:2e:f0:e1:bf:11:c0:
10:bf:66:9d:cf:b0:51:8c:cd:be:c9:0a:2f:ef:49:
40:4c:3a:76:32:3e:47:11:5e:89:7e:dc:a1:d3:9a:
67:ce:8b:6c:3b:58:3e:50:b8:ee:ba:48:ce:b8:5c:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:CA:D4:37:6F:5E:D2:AC:6B:AF:04:68:DA:CE:BC:19:9F:0E:F9
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:97:92:73:1d:97:43:66:04:0e:c2:de:56:e4:84:e7:d7:a8:
3f:f7:dc:e6:c6:77:00:a2:41:9c:92:5a:29:91:67:4d:20:16:
2c:5c:51:1f:a3:f3:93:43:9e:80:e6:8b:7b:c9:af:76:d3:8c:
f5:cd:58:aa:0d:88:72:ef:40:58:97:ba:a3:65:82:64:57:81:
80:a0:37:e6:2b:8c:97:a8:00:59:72:5c:d7:eb:77:7f:26:0b:
8f:3e:cd:89:57:ea:3c:a0:0c:1d:70:6a:dc:13:8a:a3:7d:0b:
19:d5:7c:e4:a3:4c:39:42:35:33:74:94:bc:fb:5c:47:00:d3:
ff:3c:6f:be:b2:14:81:55:e7:07:01:dd:73:f8:07:2b:ea:ec:
89:3a:15:0e:e5:cf:d8:a9:2e:77:a4:37:69:d0:ba:8b:68:5a:
df:2c:a8:7a:d0:86:5f:6d:a9:3b:51:be:c1:76:a1:d3:3b:40:
5f:23:cf:ff:7f:0a:ee:77:2f:e5:bd:23:3b:b4:62:bb:b9:d0:
16:fb:af:8b:85:73:ba:31:b3:dc:3b:fc:bf:a7:b9:20:03:bd:
a6:5b:83:57:40:6c:b7:52:06:aa:53:5b:50:75:af:d2:ca:cf:
e6:29:80:9e:b4:4f:d8:77:a4:e6:56:00:83:02:34:68:c1:37:
70:3a:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:53 2026 by rpki-client