Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: HiArsbQGnSXQbLUl2PBvJK0D0tRBivvItPdGDoK6vbs=
Subject key identifier: 2E:8A:CA:7F:FE:60:8A:08:56:D2:F7:13:AA:6B:17:56:9E:50:E1:D0
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 019E1D59DCB809D055476A5F27485E0844B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 17CF
Signing time: Tue 12 May 2026 18:01:28 +0000
Manifest this update: Tue 12 May 2026 18:01:28 +0000
Manifest next update: Wed 13 May 2026 18:01:28 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: 1nXyz4XO1yg8ezhM9lNu+5Zo7zpQ4zmsyoPBRIJxudc=)
2: xET4g9Q22br6M_aAIvnYf8vNiW4.roa (hash: Co0dW764z3RfUQJ68TAOxwF+Vuab9DVTLXdcNmyxXW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:dc:b8:09:d0:55:47:6a:5f:27:48:5e:08:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: May 12 18:01:28 2026 GMT
Not After : May 13 18:01:28 2026 GMT
Subject: CN=2e8aca7ffe608a0856d2f713aa6b17569e50e1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:09:19:f8:44:84:cc:5d:6f:d0:de:45:be:
69:db:02:6a:11:f7:9d:01:b9:d6:a2:3a:e0:ff:ac:
39:79:f1:af:32:c0:f5:45:45:aa:48:29:7a:aa:8e:
40:e8:88:aa:e7:33:f2:bf:3a:c9:99:0a:65:70:f7:
40:e0:55:5d:8b:cd:fb:b2:73:cb:ce:37:dc:7f:b9:
72:20:8e:c1:53:cb:49:72:f2:87:c8:6d:da:23:61:
95:93:f2:9a:02:aa:08:f1:1c:a4:b8:e0:a5:88:d6:
db:f4:5b:63:18:2b:3f:5e:6a:ee:e8:d4:5a:4b:1a:
7a:32:ac:33:f6:6a:11:ea:04:0e:a7:4f:85:c5:d6:
c1:36:a9:7d:25:57:62:8c:e3:d4:e7:d9:d7:6d:5f:
3f:ca:ba:80:12:d2:1e:c4:a8:68:27:94:d4:8d:f6:
8e:91:18:81:7a:e1:9c:dd:c5:1e:ca:b5:e6:27:3b:
0b:6a:d2:3b:8f:5c:8a:79:36:6b:c5:4e:97:98:e3:
dd:7e:d5:56:10:fa:55:de:f4:9b:e4:72:1c:73:0d:
e6:bb:95:26:93:b8:0b:1e:8c:8f:5e:ed:32:4c:e1:
61:e6:4a:5d:b3:51:d6:c0:f2:ae:e8:be:1a:a3:82:
bb:1c:11:ed:dd:d3:7d:58:be:df:7b:44:aa:5e:f9:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:CA:7F:FE:60:8A:08:56:D2:F7:13:AA:6B:17:56:9E:50:E1:D0
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:34:cc:9f:76:d5:9c:a5:03:b9:8d:16:e9:91:f5:5d:af:
ed:99:8d:bf:6b:e9:ca:10:af:33:b1:cd:ed:58:9b:a0:bf:a9:
9c:7f:75:7c:9c:8b:4b:61:89:c7:13:0b:30:be:7e:e9:43:45:
77:e1:53:19:97:0e:bb:af:09:49:22:74:2d:9a:e3:19:c4:60:
33:78:d4:d0:42:13:b5:5b:56:a6:c9:86:99:90:2f:ce:97:03:
54:06:6e:2c:cd:3f:2b:3e:9f:9b:0d:cf:dc:f7:97:ed:22:b1:
d3:08:10:70:ac:1e:1e:6c:d5:8e:35:58:b5:cf:3c:0e:c3:52:
e4:8b:bc:d3:79:2b:13:f2:16:8a:7f:14:39:62:0d:41:86:d5:
a7:c8:c8:82:31:74:ea:a5:c0:22:24:d7:7a:4a:0c:04:cf:c6:
c7:f0:48:41:06:82:29:17:e1:86:92:c5:de:44:01:53:0b:55:
8c:4e:03:ac:4e:ce:90:db:40:c5:de:eb:9f:e3:cd:2a:7c:07:
f8:b3:11:54:32:a7:e5:af:83:e6:88:a4:11:3f:80:72:73:7f:
41:ff:73:66:13:9d:11:1e:dd:e0:a9:c5:24:4c:a1:fb:7a:3b:
4b:e5:43:4f:17:1b:5f:a1:96:16:c2:c3:39:67:df:67:40:25:
ee:de:f1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWdy4CdBVR2pfJ0heCESxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NzczZDczM2QxODQ1YzQxZDNmOWEzNjJiNTViNzRlNjg2
ZjljMDIwHhcNMjYwNTEyMTgwMTI4WhcNMjYwNTEzMTgwMTI4WjAzMTEwLwYDVQQD
EygyZThhY2E3ZmZlNjA4YTA4NTZkMmY3MTNhYTZiMTc1NjllNTBlMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ4JGfhEhMxdb9DeRb5p2wJqEfed
AbnWojrg/6w5efGvMsD1RUWqSCl6qo5A6Iiq5zPyvzrJmQplcPdA4FVdi837snPL
zjfcf7lyII7BU8tJcvKHyG3aI2GVk/KaAqoI8RykuOCliNbb9FtjGCs/Xmru6NRa
Sxp6Mqwz9moR6gQOp0+FxdbBNql9JVdijOPU59nXbV8/yrqAEtIexKhoJ5TUjfaO
kRiBeuGc3cUeyrXmJzsLatI7j1yKeTZrxU6XmOPdftVWEPpV3vSb5HIccw3mu5Um
k7gLHoyPXu0yTOFh5kpds1HWwPKu6L4ao4K7HBHt3dN9WL7fe0SqXvkYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Kyn/+YIoIVtL3E6prF1aeUOHQMB8GA1UdIwQY
MBaAFNl3PXM9GEXEHT+aNitVt05ob5wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMt
MDFhMjlmNWY2ZGRlLzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMtMDFhMjlmNWY2ZGRl
LzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgs0zJ92
1ZylA7mNFumR9V2v7ZmNv2vpyhCvM7HN7ViboL+pnH91fJyLS2GJxxMLML5+6UNF
d+FTGZcOu68JSSJ0LZrjGcRgM3jU0EITtVtWpsmGmZAvzpcDVAZuLM0/Kz6fmw3P
3PeX7SKx0wgQcKweHmzVjjVYtc88DsNS5Iu803krE/IWin8UOWINQYbVp8jIgjF0
6qXAIiTXekoMBM/Gx/BIQQaCKRfhhpLF3kQBUwtVjE4DrE7OkNtAxd7rn+PNKnwH
+LMRVDKn5a+D5oikET+AcnN/Qf9zZhOdER7d4KnFJEyh+3o7S+VDTxcbX6GWFsLD
OWffZ0Al7t7xKw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:57 2026 by rpki-client