Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier: nYHZII/721wnUZl+J7XlN9ln8Xhg7PA36vG+/XeAzlM=
Subject key identifier: 9E:B8:AB:B8:3F:81:92:E1:B9:90:82:2A:86:09:A2:CC:FD:C5:D3:44
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 019E1E350C50381AC9FCDD0932F6E78AE4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number: 09B2
Signing time: Tue 12 May 2026 22:00:53 +0000
Manifest this update: Tue 12 May 2026 22:00:53 +0000
Manifest next update: Wed 13 May 2026 22:00:53 +0000
Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: xABDjFYqF2CqE0PDafmm24IXBS37lQ1/fVV8jxfk2Ww=)
2: iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa (hash: 2U9RkTvh/CP+gL154cvBJ8P7xRzyHflZ/rH4Y3M1elw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:0c:50:38:1a:c9:fc:dd:09:32:f6:e7:8a:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: May 12 22:00:53 2026 GMT
Not After : May 13 22:00:53 2026 GMT
Subject: CN=9eb8abb83f8192e1b990822a8609a2ccfdc5d344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:0d:b2:9d:2a:5a:a9:d5:38:7d:b7:12:9f:
c7:a2:37:48:f1:01:e6:81:4c:41:38:dc:27:89:9f:
fd:0f:09:f1:5f:69:2a:8e:ba:98:a5:a5:cc:12:37:
f5:d8:5d:d7:fa:be:d9:55:ef:37:90:1d:3f:0f:dd:
43:45:75:dd:cf:c8:b8:d9:6d:26:e1:c7:40:b2:9e:
68:45:8d:17:a5:c8:10:e5:dc:59:e8:c6:f5:d6:02:
6e:6c:dd:7d:40:64:7a:69:f9:53:b3:f9:32:47:f3:
b1:0f:34:23:d3:a9:de:63:50:7d:94:1b:68:52:1c:
3f:90:ad:77:8f:87:05:03:f0:1a:92:11:b9:1f:37:
8c:d4:84:76:2e:1e:bc:f9:27:0b:ab:62:52:87:f9:
5d:9b:40:24:29:a8:7f:65:55:c0:c6:bd:90:c2:e0:
ed:9b:fd:c9:4b:aa:63:8d:4d:c6:b9:ae:ce:36:a0:
80:84:23:a1:55:15:dc:93:a0:18:4c:a7:bd:92:91:
7d:22:7e:14:fa:5c:df:6c:69:de:f9:f9:f4:1e:13:
23:9d:b6:9a:6c:17:e5:09:10:f7:91:52:59:02:fa:
44:20:3a:c8:12:15:79:d7:4d:2c:1d:f6:89:a6:ae:
0f:89:d2:f5:a5:40:81:48:22:cb:a8:b3:9e:f8:ef:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:AB:B8:3F:81:92:E1:B9:90:82:2A:86:09:A2:CC:FD:C5:D3:44
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:16:6a:e8:e8:11:1e:9b:d1:3e:9e:9d:ff:f0:9b:54:df:
61:5c:69:fb:ea:45:ec:8e:31:19:25:be:35:eb:45:63:54:6a:
4f:ba:b8:68:5d:2f:29:32:7f:b0:6a:d7:09:47:85:23:1e:5d:
54:9e:b8:fc:c5:a9:9b:90:5e:42:7d:1b:c5:9d:f4:13:cd:7f:
61:c8:bf:af:fb:0d:47:64:be:3b:d9:40:e8:e7:79:04:73:e9:
01:b5:f2:df:55:7b:b9:82:c8:48:12:86:f6:a6:57:3f:5c:84:
80:0f:ae:b4:23:42:01:e6:28:ff:ff:bb:35:c2:27:20:73:cf:
95:48:23:68:e4:08:e4:ed:fc:53:cb:09:1b:40:3d:93:e6:96:
fc:78:f4:ed:eb:55:7e:ad:aa:c9:58:2c:2f:89:b2:40:4a:15:
56:ca:4e:3e:e2:10:83:c5:98:be:6a:da:05:7a:6e:90:d5:75:
d4:f8:85:7e:5c:60:d9:3e:bc:81:7a:be:dd:db:2a:7e:5a:d7:
e0:a4:77:33:42:b3:9d:3f:ee:b1:1e:f2:86:10:8f:f4:c1:5c:
eb:32:be:16:e8:68:70:75:f1:f9:46:23:f2:e8:b7:00:52:b2:
ad:37:89:d8:9d:60:2d:4f:a0:03:d9:ef:84:ea:47:ec:2b:2e:
ee:a7:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:19 2026 by rpki-client