Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: /8m5AZ4wIoiiny6siQFNCBzaqE0q9Hit+YEQilOjmmo=
Subject key identifier: 39:C5:81:2F:8E:41:D2:27:24:80:A6:F7:61:8F:47:77:2B:51:BC:3E
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019E1EDA65CCF833A0FB61A4AABD5CDCDB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 01:01:29 +0000
Manifest this update: Wed 13 May 2026 01:01:29 +0000
Manifest next update: Thu 14 May 2026 01:01:29 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: lfkgqYyITb0saai/gxTtAGZdpHj4NPMm/0D76u+w/sc=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:65:cc:f8:33:a0:fb:61:a4:aa:bd:5c:dc:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: May 13 01:01:29 2026 GMT
Not After : May 14 01:01:29 2026 GMT
Subject: CN=39c5812f8e41d2272480a6f7618f47772b51bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:e4:e9:5d:c1:7c:6d:4f:78:29:1a:cc:23:
07:be:0d:6d:18:02:4a:49:e0:12:24:56:e6:d4:03:
ed:c7:53:74:52:18:dc:70:2b:99:99:32:e4:bb:a7:
0e:d1:bc:db:6a:4e:ce:db:a8:c5:74:6e:c7:c1:80:
f5:ba:84:10:0f:40:e8:80:81:13:b8:df:db:fe:0c:
a7:c3:53:db:37:86:7b:07:08:d3:6f:0d:08:f5:d1:
7c:34:05:ca:ed:37:42:c6:c2:ed:0c:f7:be:a9:49:
10:e1:ad:3c:3c:69:55:fc:e5:e2:05:fc:97:b9:f4:
59:55:bf:f4:c0:3f:92:fd:a1:32:80:13:1f:6a:a2:
a2:9a:b0:c8:b4:dc:d6:75:fb:f7:43:07:bc:97:f7:
97:7e:a1:dd:b8:a8:3d:f4:7f:3b:fe:00:a1:db:e1:
2a:a9:3d:10:03:bc:22:1e:a4:aa:66:42:fc:90:b3:
ac:ee:e6:22:be:55:a7:e7:d6:bc:a1:e9:4b:9f:8e:
d7:cd:89:b9:0a:f4:7d:57:4c:9b:f4:2d:39:ba:00:
2b:8f:36:ae:54:ed:d5:e6:e2:73:dd:de:34:ab:01:
9b:7c:e3:48:46:1f:6e:a1:bc:b7:61:fe:fa:5d:af:
c4:cc:d3:69:74:f1:6a:f7:4d:75:9b:49:2d:f8:7e:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:81:2F:8E:41:D2:27:24:80:A6:F7:61:8F:47:77:2B:51:BC:3E
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:f6:f2:5c:fd:e6:46:4a:33:2c:f5:d0:63:17:25:cc:8f:
56:08:88:51:50:0a:33:03:7b:60:b2:03:23:79:a5:30:12:98:
f8:76:8b:5a:54:1d:30:13:23:b4:97:5d:13:15:9f:19:86:cc:
8b:0f:08:69:a6:11:49:4c:14:76:15:37:b0:ea:ff:0a:62:a9:
7f:88:ff:85:30:52:50:3c:cb:fc:61:17:d5:e0:47:c4:3d:92:
ee:30:44:8f:bb:d2:0c:25:75:5f:33:45:d1:c1:2e:a3:b5:6e:
23:be:9d:28:dc:3d:ec:e6:02:38:20:87:3d:08:30:18:c1:1a:
6b:9b:12:8a:24:e6:c1:10:95:a6:f5:89:de:b0:dd:dd:a7:a6:
1b:b4:99:ed:75:2f:19:a1:4b:60:bb:64:f0:6c:5f:24:b6:f5:
50:0c:0e:53:d2:2c:9c:fa:c8:10:fe:b6:16:9e:8b:e1:d8:65:
ee:f9:93:08:6f:22:39:93:78:b5:2d:13:3d:0b:ae:fa:73:69:
f0:6b:36:89:75:2b:52:48:49:ec:5f:01:ff:88:96:91:39:fe:
7a:f6:d3:b0:33:6d:91:13:a7:8f:17:35:1e:f3:15:ca:a3:60:
e9:5f:c4:9c:7c:5e:13:c7:48:f6:59:58:16:3f:67:6f:38:41:
dd:79:db:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2mXM+DOg+2Gkqr1c3NuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTg2NDIyMjc5ZDlkOGI0ZTY4ZTY5YjEyOTZlNTMyZDRk
YTBjM2YwHhcNMjYwNTEzMDEwMTI5WhcNMjYwNTE0MDEwMTI5WjAzMTEwLwYDVQQD
EygzOWM1ODEyZjhlNDFkMjI3MjQ4MGE2Zjc2MThmNDc3NzJiNTFiYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Xk6V3BfG1PeCkazCMHvg1tGAJK
SeASJFbm1APtx1N0UhjccCuZmTLku6cO0bzbak7O26jFdG7HwYD1uoQQD0DogIET
uN/b/gynw1PbN4Z7BwjTbw0I9dF8NAXK7TdCxsLtDPe+qUkQ4a08PGlV/OXiBfyX
ufRZVb/0wD+S/aEygBMfaqKimrDItNzWdfv3Qwe8l/eXfqHduKg99H87/gCh2+Eq
qT0QA7wiHqSqZkL8kLOs7uYivlWn59a8oelLn47XzYm5CvR9V0yb9C05ugArjzau
VO3V5uJz3d40qwGbfONIRh9uoby3Yf76Xa/EzNNpdPFq9011m0kt+H78MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnFgS+OQdInJICm92GPR3crUbw+MB8GA1UdIwQY
MBaAFNsYZCInnZ2LTmjmmxKW5TLU2gw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2Mt
NWM3NzIzNDYwMjIzLzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2MtNWM3NzIzNDYwMjIz
LzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyv28lz9
5kZKMyz10GMXJcyPVgiIUVAKMwN7YLIDI3mlMBKY+HaLWlQdMBMjtJddExWfGYbM
iw8IaaYRSUwUdhU3sOr/CmKpf4j/hTBSUDzL/GEX1eBHxD2S7jBEj7vSDCV1XzNF
0cEuo7VuI76dKNw97OYCOCCHPQgwGMEaa5sSiiTmwRCVpvWJ3rDd3aemG7SZ7XUv
GaFLYLtk8GxfJLb1UAwOU9IsnPrIEP62Fp6L4dhl7vmTCG8iOZN4tS0TPQuu+nNp
8Gs2iXUrUkhJ7F8B/4iWkTn+evbTsDNtkROnjxc1HvMVyqNg6V/EnHxeE8dI9llY
Fj9nbzhB3XnbLg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:24:28 2026 by rpki-client