Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: R12A3LPXIfWGBIjvekR7HZy3KZpizk6cJNy05PY+Cws=
Subject key identifier: C2:FC:93:18:FF:A6:16:95:13:6C:93:0E:3A:02:63:A7:F8:0F:45:E8
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019E1E6C46732B85DED4D8FC981ADC006396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 01BC
Signing time: Tue 12 May 2026 23:01:12 +0000
Manifest this update: Tue 12 May 2026 23:01:12 +0000
Manifest next update: Wed 13 May 2026 23:01:12 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: C7nB1i1ERJiBUb/IWUzstC9QhrjUr+z2TLANTlg9oUk=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:46:73:2b:85:de:d4:d8:fc:98:1a:dc:00:63:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: May 12 23:01:12 2026 GMT
Not After : May 13 23:01:12 2026 GMT
Subject: CN=c2fc9318ffa61695136c930e3a0263a7f80f45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:5d:5f:f6:8f:91:fa:c3:d3:19:e4:c3:b3:
7b:82:4e:82:4d:65:9a:26:db:24:7f:38:1a:55:e3:
9a:1d:13:bc:71:14:58:5a:9c:f6:e2:de:21:31:e0:
66:2f:68:0c:3e:e5:c2:86:04:ca:45:59:8d:4b:3d:
e4:95:38:cc:25:09:d0:57:b1:1f:4c:13:98:12:27:
41:7c:9a:6a:09:85:7c:db:ec:d9:c7:a6:b6:fe:f2:
51:2c:1c:4f:26:9d:72:f8:4a:3e:8b:d2:c2:7e:ea:
ee:e2:8d:03:bd:62:55:5e:08:13:0c:3a:d6:01:86:
9b:68:f7:a8:87:3b:a3:31:80:6c:da:c7:52:85:37:
ab:95:3d:d3:6e:18:af:9f:d3:a0:74:7c:4a:ed:50:
38:15:d3:d7:57:cb:18:2f:70:f0:86:35:87:24:af:
22:90:b3:23:46:22:62:cb:9f:12:85:fe:aa:a4:1c:
4c:23:26:c4:76:11:a4:a0:2d:04:fa:ba:88:eb:2e:
8f:26:1a:db:48:28:c8:95:b7:83:88:68:82:8a:51:
50:e0:0f:c6:1c:a3:7e:fd:8c:06:16:67:43:c2:bc:
3a:02:42:e3:8c:f8:1e:4f:18:70:f3:6c:e6:22:b8:
81:ec:32:7a:a0:a9:89:04:d0:ce:4e:96:3e:ac:cb:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:93:18:FF:A6:16:95:13:6C:93:0E:3A:02:63:A7:F8:0F:45:E8
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ed:06:64:38:20:21:ed:61:90:25:00:26:1c:62:96:e5:58:
5e:a3:33:ea:5f:fb:4a:df:3d:06:0b:f3:1d:ec:d6:28:5a:8e:
15:a2:29:2c:b2:2a:31:17:fa:32:a7:23:19:55:05:e7:c5:00:
b3:a5:ea:70:29:12:37:36:86:0c:ef:c3:a3:9b:d5:69:b0:ef:
f7:d5:21:57:d9:c4:62:c9:78:ba:c7:60:46:1e:0a:a4:ce:02:
bd:02:a4:70:24:b1:7c:70:d2:9d:1c:7f:82:2c:1f:3b:33:b6:
7a:c3:66:03:07:46:b0:97:f8:46:12:df:62:05:62:37:f4:f3:
5d:46:59:1e:7b:aa:a5:a4:2d:a5:fb:39:0a:5a:8c:2f:44:ef:
26:6f:e2:1d:89:0c:fa:16:7f:1a:a0:ab:ef:1c:ea:84:e8:3c:
28:f9:87:b8:bd:c8:5a:19:c7:37:f5:98:24:7e:4f:d5:e5:81:
4d:fb:f7:db:46:c3:25:78:be:af:a4:13:2e:89:3f:2a:f3:25:
03:89:58:90:a0:02:dc:21:7e:85:2d:62:70:e3:56:d4:97:c8:
f8:79:9e:ba:b2:8f:b5:20:a9:ab:2d:04:7d:f0:a2:18:72:4c:
fb:38:a6:89:4c:fe:89:7b:6d:89:b8:bb:d0:bf:24:ea:62:26:
e6:70:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:09 2026 by rpki-client