Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: mB6TQ8QySmgNdJqpI2gQe8TG6MNXjPGah0EaWgYfnCA=
Subject key identifier: 58:80:76:54:9F:58:C8:EE:80:CD:D6:68:1B:7B:FD:C2:9E:17:A1:F2
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 019E1D591ABBF4D1BF41733453A4378E33B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0B42
Signing time: Tue 12 May 2026 18:00:39 +0000
Manifest this update: Tue 12 May 2026 18:00:39 +0000
Manifest next update: Wed 13 May 2026 18:00:39 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: 0fzViRy58mK/MGkYbMiXNn01n2BwcuHbDA1fQrI+fkw=)
2: zuAP0P2ieWMLtXb48E1VVwKO93w.roa (hash: KzZQHMAxju4Nmcnntgy06fN2nxsFzdB0gSb36aOEgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:1a:bb:f4:d1:bf:41:73:34:53:a4:37:8e:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: May 12 18:00:39 2026 GMT
Not After : May 13 18:00:39 2026 GMT
Subject: CN=588076549f58c8ee80cdd6681b7bfdc29e17a1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:ea:3a:7e:20:e4:b4:d7:ff:95:d2:5e:75:
1f:5e:c4:f5:f0:a1:6b:67:9b:54:56:37:91:7b:47:
30:fa:07:a6:c9:d5:3b:e1:d2:a4:c3:62:73:f1:89:
2d:5e:27:c9:7d:58:01:86:7f:2f:c2:b1:60:b6:7b:
a0:56:7d:ea:eb:a4:a4:ac:b4:34:85:4e:4b:ea:a1:
b0:df:f6:9d:7c:80:0a:d2:81:51:d4:d1:c8:d7:1d:
bf:5a:bc:88:a7:be:0c:99:8e:52:e9:99:52:6b:b9:
da:d5:a0:88:23:e6:82:9a:f3:c3:6f:fd:50:b4:33:
cd:85:8e:4e:89:9e:9d:1e:0b:e3:c1:20:17:38:50:
46:6a:72:82:b0:df:f4:6e:7b:8a:67:b3:ef:cc:d1:
7c:9c:aa:7a:d3:7b:b5:68:a1:c1:96:1c:c0:19:45:
d5:af:03:82:cc:ed:9f:15:22:49:ad:c3:63:de:26:
a1:be:c3:9e:f1:9e:14:97:27:86:2a:b7:ef:93:f3:
65:15:eb:b8:d6:21:d4:d6:d0:88:3d:68:bc:4c:0f:
db:b5:31:17:7b:c5:6e:28:73:01:9d:1f:1d:d5:4d:
db:fe:5b:b6:d3:fb:97:5e:58:71:ae:7c:3d:e1:b2:
97:b5:e3:09:6b:d2:fb:0a:db:8b:84:a4:ee:ca:bf:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:76:54:9F:58:C8:EE:80:CD:D6:68:1B:7B:FD:C2:9E:17:A1:F2
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2a:c1:1b:56:af:c7:90:ec:94:88:1a:13:6d:21:8c:29:ec:
c6:59:f4:06:d0:98:d1:83:f2:57:1e:a0:c7:e6:8e:c5:04:f0:
fe:41:da:36:13:2d:70:73:5f:8a:b5:2c:2b:a2:bd:c6:ca:ab:
56:19:52:86:c6:00:94:19:22:53:d9:f2:73:13:1f:99:9c:c3:
62:7a:c3:65:a2:f9:d7:e9:69:c4:4e:12:7b:86:05:74:b9:96:
89:7b:46:6f:52:00:23:75:b0:65:9a:bb:5b:32:cc:8d:10:13:
7c:b7:a8:43:35:35:6a:46:81:ff:c8:da:1f:f5:22:aa:c4:46:
8a:4a:20:75:e8:22:41:70:93:da:79:d2:81:de:8b:00:f0:af:
ee:e6:8e:a2:a6:42:d6:3a:95:76:ab:7a:f8:87:f2:e9:7c:9b:
69:14:ee:53:ec:ba:58:ee:7b:30:bf:45:0b:83:e6:78:39:81:
8f:10:c9:28:f3:01:59:c6:a1:f8:3c:62:65:86:0d:ec:8b:c0:
94:09:ac:db:11:30:8d:bb:64:00:62:9a:4b:2b:e0:93:60:bb:
11:c1:37:6e:d2:2a:94:30:8d:2c:56:b9:51:38:6d:06:60:06:
b2:40:fc:59:a2:3e:86:e1:9f:71:2c:33:af:f5:16:66:7e:f7:
ae:c8:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:12 2026 by rpki-client