
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier: +30f+rZ0bP+gV0rHspNAkeqw0gcMzqQ1cyPr42hFRvg=
Subject key identifier: F0:C2:63:5F:BC:12:79:FC:EE:3D:D3:DA:5F:70:1E:90:64:32:7A:93
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 019E1D5967E1ACB38D5A8E9E71D24B628C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 18:00:58 +0000
Manifest this update: Tue 12 May 2026 18:00:58 +0000
Manifest next update: Wed 13 May 2026 18:00:58 +0000
Files and hashes: 1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: TBAt7ZWn5nij7T2WuK3FYOC5m5NU7Mcup9HITwb7jYA=)
2: F6fUHhyih39ackVWeOiT1Us1Y8Q.roa (hash: puoFvjqopp+quYrffqHcq8C0zEtx3DRFmOVecmQhdMc=)
3: gXTXswMAqOUZcicFKanGyy8Pc24.roa (hash: CsXx31nQ+NdycTm6E1P0Qb6Ob5IJ6xBFv4kmPa3DVVo=)
4: kOj1s5oO7oSiq_7ZjXoN1j2kTnE.roa (hash: Y6xric3ra7rVJoctwp2vvhl14A8o24GxxC7BIDvBIlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:67:e1:ac:b3:8d:5a:8e:9e:71:d2:4b:62:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: May 12 18:00:58 2026 GMT
Not After : May 13 18:00:58 2026 GMT
Subject: CN=f0c2635fbc1279fcee3dd3da5f701e9064327a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:28:71:ed:59:56:0c:81:59:86:a3:ce:fa:
92:d7:c5:43:5e:14:3c:35:2e:d4:03:bf:9a:6d:1a:
ea:91:92:80:5c:dc:9c:f5:72:2c:37:41:6b:7e:b0:
ab:2d:8d:6c:19:8e:87:72:f0:64:d6:cd:f6:cf:d7:
2c:f7:b0:72:47:9d:4d:96:37:53:ec:fc:39:ab:7b:
e5:67:f3:4b:96:34:4e:d4:12:d3:54:e7:55:33:ce:
dc:cd:76:52:fc:a1:77:13:58:ac:7d:41:b6:0b:dd:
8d:be:b5:44:64:52:1f:e4:d9:df:a5:7c:9f:9e:6e:
74:d8:5a:34:86:8f:96:fa:58:19:f0:6a:38:f3:82:
30:d8:cd:dc:5a:17:66:5a:46:ab:a7:c1:29:f6:0b:
6a:80:51:67:fa:6e:e9:11:fe:0e:0f:23:ee:1e:9f:
21:a3:34:1e:2c:15:8c:18:f3:a0:95:0d:ce:6e:29:
ea:11:77:5c:6c:94:e0:26:e2:56:9d:82:41:f8:82:
ee:49:b5:ab:12:de:73:d4:e7:6d:b3:7b:27:12:31:
93:59:5a:0a:c6:fe:36:bb:b6:e2:16:ae:27:42:e2:
63:89:a5:1d:56:ea:ec:a8:14:f0:6e:4b:2c:c4:92:
95:c3:b4:ca:af:8d:a1:1a:ac:2a:b9:3f:4d:50:52:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C2:63:5F:BC:12:79:FC:EE:3D:D3:DA:5F:70:1E:90:64:32:7A:93
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:19:70:e9:cf:99:02:28:7a:aa:c6:a5:71:b2:e3:85:d8:
10:1f:bb:e0:8d:5b:8c:39:bd:5e:8f:28:32:ab:d1:d0:c2:0e:
fe:d1:95:30:fb:79:53:31:cd:f2:a1:ab:31:33:0c:d8:94:ed:
8f:0a:8d:bb:ac:4e:40:7c:d5:6e:82:7e:66:6b:0a:15:7d:be:
63:3d:0e:8b:2d:d1:6d:9b:11:db:bf:2c:78:d2:7d:06:ae:73:
4a:fb:e2:0b:f2:92:9f:6d:cf:6a:3e:e6:6b:e1:d5:f6:ab:7b:
7a:06:7f:fd:fd:d9:9a:08:42:a6:c9:9e:b7:53:db:3e:74:e1:
3e:e9:a1:26:cb:6d:c6:11:7d:06:3f:ee:83:c0:14:03:6e:ce:
2a:9e:78:00:55:cf:dc:13:1d:d6:ce:0e:78:cc:09:47:65:13:
a1:b3:2a:e0:6f:26:38:d8:99:69:dc:4f:1a:fa:db:60:7e:10:
e7:e6:7e:13:93:61:99:ba:90:10:a7:ea:33:3a:0b:62:e2:5b:
9d:8c:68:91:f5:5b:b5:ed:60:8e:68:88:7a:8f:65:f1:d7:8c:
06:de:f2:04:77:d1:56:af:cd:4c:e8:38:b4:ab:16:e1:4f:ba:
14:08:6f:c9:ff:39:8c:5c:eb:c0:dd:1f:4a:86:16:48:34:ac:
e0:bf:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:22 2026 by rpki-client