Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: Cutc7N+38W/oHfkWR5fgmELOgyfksRV6sLc4J2Hs6kA=
Subject key identifier: 8E:8D:48:FA:DA:C9:6C:68:37:27:70:14:AC:7A:B0:93:A6:DB:F8:6A
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019E1D2264078CC14786FF75B43F417A7996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 12AA
Signing time: Tue 12 May 2026 17:00:53 +0000
Manifest this update: Tue 12 May 2026 17:00:53 +0000
Manifest next update: Wed 13 May 2026 17:00:53 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: +e3N+i3prShw6WzDFntbh63VLfcH5q2hwUbpkNekfXc=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:64:07:8c:c1:47:86:ff:75:b4:3f:41:7a:79:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: May 12 17:00:53 2026 GMT
Not After : May 13 17:00:53 2026 GMT
Subject: CN=8e8d48fadac96c6837277014ac7ab093a6dbf86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:6d:be:18:f9:87:e5:d8:92:d6:aa:43:be:
1d:15:fa:c5:a6:3b:8c:ea:50:44:4d:d2:5a:7b:ce:
61:3e:58:37:7b:d5:64:9d:85:bb:a2:4b:53:b8:14:
a1:3d:7e:eb:8a:64:3e:b3:39:a8:30:c8:b7:1a:11:
55:c1:48:76:49:bb:8b:29:77:eb:b3:f1:05:02:fa:
c1:50:a7:cf:75:32:4e:de:9a:f8:7f:aa:88:0d:a9:
8e:c6:cc:05:99:1b:2e:ec:80:77:89:48:fc:9f:60:
81:3b:c7:c1:bd:f7:74:31:2a:fc:7a:5d:c3:a8:3d:
a9:eb:87:3f:af:f1:15:20:cc:09:96:13:97:f7:3b:
c7:d6:c6:b5:9f:8c:49:3b:2d:ff:c1:9e:6b:66:6e:
34:7f:99:4e:67:dd:d5:40:3a:d2:d9:a1:14:25:25:
f1:b9:63:0e:da:ad:91:79:80:b8:c1:b7:89:d9:ab:
cc:c3:ee:df:50:df:45:73:15:81:85:2d:73:d1:86:
fa:62:67:15:43:5c:2f:39:b4:c4:ec:53:83:04:7b:
5a:3c:3e:42:a8:09:82:43:dc:6e:d9:91:ee:dd:38:
19:c8:87:3a:dd:49:dc:e0:7d:7d:2c:cd:42:99:5c:
ee:5e:62:ea:ec:d5:4f:02:a7:03:14:62:3c:79:7a:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:48:FA:DA:C9:6C:68:37:27:70:14:AC:7A:B0:93:A6:DB:F8:6A
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:08:17:9d:7a:4f:c4:db:ae:c1:db:3f:84:e4:c1:1b:29:b8:
50:e8:07:66:49:36:69:81:2d:54:54:3f:c3:2b:a4:60:0c:5d:
6a:c9:e9:94:50:48:5a:57:ef:2f:a1:ce:55:fc:75:02:5f:c1:
dd:ce:6a:5d:05:0e:00:d8:5f:6a:59:3d:c9:fc:db:fd:b6:61:
81:e5:57:69:d5:75:43:cf:6e:80:4e:7c:b1:3a:09:81:88:df:
54:b9:df:11:fb:2f:32:df:13:cf:d3:6f:8d:18:be:e1:12:10:
47:d5:75:cd:0a:c1:9e:0e:f8:2a:cb:c1:31:ab:22:2b:a1:b6:
81:a1:d9:cb:c1:32:29:ab:43:7c:d8:8c:fd:0b:cb:a1:55:87:
48:1a:3b:c6:45:82:c4:82:2e:1a:ac:0f:2e:7f:75:03:c4:ff:
e9:6f:10:42:a1:fe:7d:00:b2:4e:61:25:7b:bd:49:2a:10:02:
ce:51:bf:e4:86:d1:58:55:8f:b2:80:c7:01:96:0a:91:dd:4b:
84:f5:c0:09:cb:34:76:e9:d2:0a:57:38:29:fd:35:8a:13:c0:
69:39:3f:f2:93:bb:2f:84:75:29:a9:93:e1:de:e4:2e:a1:66:
8a:5e:ed:b4:30:ed:79:a0:72:b6:53:5b:5c:7f:95:72:5e:c7:
33:a9:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:36 2026 by rpki-client