Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: NE9ZF5f3I06L7+0gg0KLx7AKbRFMrquNWVUTdVejnD4=
Subject key identifier: 35:E6:D6:1D:9A:EA:7E:EC:10:33:01:EF:1D:05:1D:A9:5C:E2:19:7A
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019E1CEB87F86123ED8735F6F55DE7328E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 16:00:58 +0000
Manifest this update: Tue 12 May 2026 16:00:58 +0000
Manifest next update: Wed 13 May 2026 16:00:58 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: N71y8OGklfa7I/hFNfuzboxGXfX2/jQCKdp1AWgGQyQ=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:87:f8:61:23:ed:87:35:f6:f5:5d:e7:32:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: May 12 16:00:58 2026 GMT
Not After : May 13 16:00:58 2026 GMT
Subject: CN=35e6d61d9aea7eec103301ef1d051da95ce2197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:1a:ee:35:04:d5:ac:4a:64:d2:f1:2d:ff:
6c:46:c9:00:b0:0f:3b:96:30:ea:75:90:15:40:02:
4f:e6:8d:82:7b:ad:43:ea:94:cb:e6:e8:30:8e:c0:
e3:7b:f5:f4:ad:73:2f:b1:84:d8:99:b5:62:19:f3:
43:a8:f2:30:ae:43:79:76:e6:8d:9c:78:fd:4b:0a:
49:e7:1d:4f:8e:48:56:12:67:29:7a:24:64:9f:78:
01:cb:32:45:b7:18:e7:80:34:3f:5c:d0:9f:d0:3c:
db:c8:f3:20:29:e6:27:34:01:2e:e8:3f:f2:b3:a6:
e6:61:8b:f3:70:f0:ff:56:b9:d9:ea:71:27:31:7d:
4d:a0:11:fa:b6:28:5b:ec:23:05:0d:96:ca:b2:72:
ef:e6:f9:02:1e:37:33:6c:c0:1a:2b:29:bc:02:4d:
e3:3c:9c:8d:82:2e:3d:e3:b3:28:d8:1a:8a:0a:f6:
b7:70:b5:b2:f5:09:40:1d:1c:6f:93:c6:39:f5:a6:
89:44:67:be:ac:f0:1f:2a:e4:e4:5c:5a:da:28:2e:
66:41:3a:35:a6:78:c1:c9:81:1a:91:ca:c6:dd:48:
ad:fe:13:29:22:a7:e6:06:7a:e6:c5:c7:a0:81:f2:
28:c8:fa:a2:76:75:2f:c4:96:cc:e4:53:1e:8a:5b:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:D6:1D:9A:EA:7E:EC:10:33:01:EF:1D:05:1D:A9:5C:E2:19:7A
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:59:68:fa:02:3e:60:8e:65:24:89:43:92:64:ad:a5:6d:1c:
ad:e3:63:41:46:81:f1:5a:9c:7d:f6:77:83:85:db:3a:1c:c9:
28:2e:f3:4d:4d:a2:6e:d9:5d:ab:43:61:3e:f8:61:c4:63:ce:
b4:21:a2:97:e4:cc:1a:5f:1a:af:78:c8:1a:ec:02:aa:cb:ee:
13:bd:ca:c1:57:d2:93:de:8f:02:e9:bc:87:13:e4:80:8d:a0:
29:3c:e3:8d:5e:ed:87:1e:1c:38:f9:76:d0:be:bd:b5:36:3d:
83:1d:07:af:7c:4e:38:65:89:03:c7:d4:f1:78:7f:35:ce:69:
8c:71:11:28:17:4a:22:7e:84:d8:d6:f2:98:76:8e:ee:f4:a7:
71:ef:ca:41:06:d2:a8:42:d8:d4:59:ea:d0:02:d1:27:bc:01:
fd:76:45:78:dd:cb:2d:34:b5:d3:cf:8c:f3:03:e0:04:ce:15:
df:b4:63:47:90:78:46:67:89:fe:9a:49:84:1a:76:0f:f4:23:
b4:7e:49:b2:2e:e7:26:59:d4:12:cf:fc:0a:d7:5c:b0:9c:40:
2f:a0:c1:e3:59:9a:bb:db:0c:cf:08:5a:80:25:64:b1:33:ea:
0d:51:e2:4d:e4:22:0f:4f:d4:2a:82:e8:80:fc:cc:a0:f0:ed:
7f:16:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:54 2026 by rpki-client