Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: Fwie7aMry3cozZGcVAoz2Ei5eIYZJaPfOucDKaysZEs=
Subject key identifier: 7F:68:43:6A:66:9D:BB:24:A6:1F:36:00:A2:57:E2:51:CE:D3:AB:70
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019E1D90505001FD8920439884983254F0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: rn0ZEzlBIdHtzR3g1/iDRvcIQmYLCrzOa4ElylhZ/Aw=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:50:50:01:fd:89:20:43:98:84:98:32:54:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=7f68436a669dbb24a61f3600a257e251ced3ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:6f:57:67:06:80:e1:67:13:fe:da:dd:85:
54:1a:c7:e7:1b:d6:b4:fa:77:49:a1:b0:9c:36:a7:
b6:c1:04:6d:f8:f3:66:52:4b:fd:67:cb:d6:45:65:
04:14:b2:31:39:a7:5f:ea:3f:a1:64:78:ec:a8:3a:
c9:e5:d8:c0:0e:ae:58:21:80:79:63:39:d1:d0:83:
fb:59:a3:da:e9:51:7f:87:4c:21:2b:82:5f:45:14:
39:fb:bb:94:b1:69:46:44:c9:6d:d4:10:47:1c:e7:
53:5f:79:52:ee:b0:14:ca:7d:36:b9:10:11:a2:c5:
84:1f:3a:ec:4f:85:90:0b:37:78:73:e8:d2:0e:11:
19:7c:76:f6:07:5f:59:b9:05:03:f9:20:86:35:49:
06:7b:ef:57:67:f3:4c:75:2c:8a:e0:a5:dd:bd:74:
bc:2c:fc:70:29:0c:65:c9:75:45:a8:d9:4b:3f:91:
95:ae:3b:7f:b2:49:d5:75:b0:de:eb:03:c7:a7:cb:
d7:26:c3:9c:48:d2:2a:b8:ed:3e:65:5b:32:5d:38:
ae:ab:a8:31:80:ed:af:95:9c:68:f4:d8:f8:d2:ea:
c7:12:93:c2:a1:f7:f1:3e:b0:a7:86:78:33:85:b9:
d6:76:8d:27:34:24:4c:10:1a:e5:6a:56:76:72:90:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:43:6A:66:9D:BB:24:A6:1F:36:00:A2:57:E2:51:CE:D3:AB:70
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:74:58:53:ee:53:e6:a7:29:30:dc:bd:3d:14:e3:38:ef:
aa:59:50:c3:c8:1e:31:20:83:65:52:57:e3:7b:61:61:0c:f4:
d6:35:5d:cb:58:ee:e6:1b:7f:b8:f1:50:d7:22:ec:f6:fa:03:
70:77:31:8a:62:2c:07:b3:e5:3a:b2:ab:a4:b7:70:be:19:76:
f6:9b:85:cc:75:48:57:5a:74:59:a8:02:1e:b1:15:85:7d:46:
ae:c7:aa:30:ad:f6:6d:ee:16:41:b8:10:0a:9f:d4:b0:b9:67:
0e:93:a3:b4:71:03:2f:ad:08:95:b9:95:22:6a:94:15:7b:93:
f3:73:64:a4:ea:bb:9c:43:df:f1:1a:44:39:73:05:fe:0e:93:
ad:6b:51:aa:85:97:77:58:0b:56:21:47:dc:7f:fa:5f:0e:85:
be:4b:52:1f:1c:36:21:e8:b8:26:12:dd:b9:4e:d0:d5:6a:c8:
28:e0:52:bc:e4:a0:ff:df:45:88:48:d2:b2:c7:61:a1:02:21:
28:07:e3:27:6e:fd:88:f9:b4:16:9b:4f:53:50:54:a4:54:a1:
63:a3:7a:dc:ed:e7:73:ae:a5:73:0f:66:95:04:91:49:ed:8c:
d2:3d:c3:d6:43:18:7b:21:4f:09:f5:a6:50:e3:71:8a:45:ea:
54:0b:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:33 2026 by rpki-client