
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
File: mfjXrl5OvAIjSnse4rebl2DbOq8.mft (raw, json)
Hash identifier: EBqxBrD9RQFd7FXi25x3oao9NGZiApXHj0u3KXw9vak=
Subject key identifier: 1C:82:BA:43:CD:09:52:08:DC:9E:1B:31:EC:AB:68:01:48:FE:20:66
Authority key identifier: 99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
Certificate issuer: /CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Certificate serial: 019E1EA30B5023191EBB0D7098FD58F19070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
Manifest number: C2
Signing time: Wed 13 May 2026 00:01:01 +0000
Manifest this update: Wed 13 May 2026 00:01:01 +0000
Manifest next update: Thu 14 May 2026 00:01:01 +0000
Files and hashes: 1: iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa (hash: aaSOVrkxAJe8O2mFpYgKoWep+9G/A7GJM36+XM4ZkBc=)
2: mfjXrl5OvAIjSnse4rebl2DbOq8.crl (hash: qdZgXffgejIdRutSzG76mAxJt27HUmOTX44enogMmXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:0b:50:23:19:1e:bb:0d:70:98:fd:58:f1:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Validity
Not Before: May 13 00:01:01 2026 GMT
Not After : May 14 00:01:01 2026 GMT
Subject: CN=1c82ba43cd095208dc9e1b31ecab680148fe2066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:a5:b2:01:0b:3b:89:77:99:a6:f4:95:62:
28:7b:8f:59:ba:c3:22:71:dc:8e:45:ed:c2:5b:cd:
02:4e:24:42:55:c6:c6:a4:3d:b4:a3:3b:95:0d:9c:
c3:a4:b2:81:a8:f2:e2:4e:14:12:91:1e:6e:ec:05:
19:69:d7:74:e9:f2:2c:7a:22:d0:c9:2d:64:24:b8:
27:0e:01:bb:ac:3e:66:e6:fc:55:fc:25:42:ac:51:
cb:a8:59:47:ef:98:4c:96:60:cf:b1:5a:d5:66:a1:
19:14:64:2b:de:a6:62:b5:8e:d3:c3:db:0a:08:51:
03:27:90:e9:b8:bc:cd:31:18:38:90:6c:5c:af:4c:
fc:ee:ca:1a:73:8e:99:65:c9:7a:92:17:36:c2:d8:
a7:3d:69:38:60:9b:d2:f0:a0:10:2e:35:92:d5:7e:
68:24:43:73:22:ec:0c:a9:32:6e:a0:15:26:2d:fc:
15:55:c8:f1:11:d9:de:68:df:40:ee:b8:d2:43:d5:
de:25:f6:37:bb:b1:d7:d0:3a:eb:b5:75:47:ce:f8:
86:24:53:26:99:ec:10:40:2b:c5:e0:59:53:ae:a2:
2c:79:3c:00:b4:cc:40:fb:7a:27:60:ab:39:6b:4e:
5f:ef:59:9b:38:8b:41:ae:ae:a5:52:d3:c5:ea:3b:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:BA:43:CD:09:52:08:DC:9E:1B:31:EC:AB:68:01:48:FE:20:66
X509v3 Authority Key Identifier:
keyid:99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a0:2e:8c:09:64:18:00:47:60:a3:15:b8:56:f9:03:a9:7c:
db:70:1c:b3:45:63:e8:37:6c:5a:0e:13:e1:de:00:33:d9:fe:
23:6e:3d:60:32:2d:25:bf:a8:93:06:d7:7f:d7:d4:f5:19:e9:
1a:af:39:42:3f:88:38:5a:ae:3a:31:e6:6f:09:b5:9b:21:04:
fb:57:af:26:cd:e8:2f:03:d0:00:cc:7d:9b:04:72:c5:c5:e2:
84:1b:30:ee:12:53:91:a9:f5:b8:20:b2:4f:cf:24:a1:df:89:
bb:d7:8f:bd:b3:0a:2e:73:e3:b9:99:0f:4a:6b:b4:46:2f:d6:
3e:8a:01:72:17:da:a3:75:48:cd:35:3f:cf:7a:64:41:44:5a:
80:71:78:3c:e0:fb:ee:07:41:b0:c7:ce:c7:3f:42:89:2a:4e:
65:72:30:1b:fc:5c:ea:af:27:ae:dc:70:a9:ee:e0:8d:3c:b8:
22:48:a0:6a:a9:a7:53:9f:16:8c:51:2f:66:d7:d9:39:17:08:
d1:96:6c:b3:0b:03:48:4d:68:96:63:46:d0:a8:9d:95:9a:73:
e6:81:62:bf:e1:7a:ef:05:74:a6:98:41:16:3b:25:5e:d6:44:
65:d3:90:a3:ff:a7:bb:f7:d8:26:f2:3a:7c:38:31:ee:8b:60:
45:29:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:25 2026 by rpki-client