Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: d+aiRLa4M4JT+hCu6/qDz05keNf7fxTXWWvgKa/4jC0=
Subject key identifier: E5:DA:A8:F6:51:34:96:81:E6:29:2F:15:15:AA:32:E0:E5:32:03:53
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 019E1D90700676170333FF93E5B9774DF7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 06C9
Signing time: Tue 12 May 2026 19:01:05 +0000
Manifest this update: Tue 12 May 2026 19:01:05 +0000
Manifest next update: Wed 13 May 2026 19:01:05 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: czg8WNWRrLcjOqRB/y5FFFW8JZS8bzNjQQUyOmP4dJQ=)
2: KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa (hash: BSUmQnkTle9HViYYJkRZjSse8w3JaRvHWOR9HNyaels=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:70:06:76:17:03:33:ff:93:e5:b9:77:4d:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: May 12 19:01:05 2026 GMT
Not After : May 13 19:01:05 2026 GMT
Subject: CN=e5daa8f651349681e6292f1515aa32e0e5320353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:a2:e4:c0:18:86:3f:06:b0:0f:de:33:00:
65:7e:4f:18:92:cf:43:c5:4c:f0:f6:0c:35:b6:05:
5f:a6:2a:4d:ab:24:46:20:3c:30:33:99:33:f1:a7:
92:7a:5b:63:f5:39:15:2e:a1:fc:23:c1:a5:d6:77:
bf:97:43:82:3c:ef:91:90:90:0e:ef:42:6b:44:04:
31:f7:08:36:e2:12:78:8c:a1:13:c5:52:67:ab:be:
26:09:36:95:93:63:88:6b:7b:18:aa:5a:29:c1:b4:
93:19:b7:ad:a8:00:e9:e5:1b:02:3c:b6:6d:e2:5a:
84:4b:1c:19:66:98:1e:50:bb:ae:45:1a:26:13:69:
83:ef:6f:0d:28:d1:3e:5f:93:83:49:d8:48:0d:06:
d2:be:03:91:6f:62:a3:7d:05:c0:ce:1c:2d:ba:bd:
20:e8:c9:e8:71:d8:fb:9b:44:27:ba:26:dc:d0:63:
d0:b9:19:e7:6e:9b:ad:9e:c6:1f:32:27:8f:75:d8:
8c:c0:d1:4b:5d:a4:63:b4:d1:ca:25:09:dd:c7:04:
07:29:c3:70:cd:81:65:a6:2c:8b:e2:5b:34:af:21:
41:5e:71:ed:ab:2f:a7:f8:e0:98:65:6b:ce:90:a2:
9a:09:d5:21:d7:46:e2:b9:74:1c:d3:36:c0:a2:f5:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:A8:F6:51:34:96:81:E6:29:2F:15:15:AA:32:E0:E5:32:03:53
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:78:bf:a4:a6:c3:c5:af:a1:39:aa:ac:72:98:d8:11:dd:
7b:9f:b8:68:ca:79:03:b2:b4:82:4c:8a:33:dc:de:8c:39:a5:
ad:a6:78:82:bd:f0:30:0c:83:c8:b1:e2:ad:a4:e6:e8:59:2a:
bb:82:63:ba:ae:c4:27:ba:59:ad:d9:32:98:02:3f:c0:0b:c4:
f6:1b:df:bb:2a:9f:bd:b8:8a:58:e2:2a:b4:28:79:00:b7:eb:
17:2e:f6:1a:26:cf:d5:f6:3e:00:45:18:41:4c:11:49:be:5a:
d1:bf:d4:65:b6:3b:48:cf:3e:61:91:5d:cd:e7:9a:1b:96:f3:
dc:d5:8a:a9:96:9a:b5:55:50:8f:38:1b:da:26:08:54:a9:76:
f0:45:f9:5b:88:31:93:c3:fa:c0:77:62:df:2d:8c:3c:32:e3:
a8:8a:b4:e2:5d:e4:e4:82:17:ba:34:40:8a:93:d1:85:c7:f6:
d6:0c:9f:15:3a:56:6a:60:a4:73:f3:98:24:9d:33:77:d1:8a:
c2:42:3c:78:ef:c5:10:6c:4a:03:22:08:fa:84:b0:e2:a5:ca:
2c:47:56:d1:39:30:0c:65:1f:0e:b9:e3:3a:3b:89:1d:60:b6:
f0:f2:27:1f:40:79:23:29:78:b5:8a:84:f1:10:1f:89:98:02:
42:df:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:51 2026 by rpki-client