Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: R3oVwETABDkMeQaa75iB78zjB6xIyoKCqMlVS+zZwEg=
Subject key identifier: 5B:36:7C:08:0C:56:09:18:36:C3:5A:5C:46:3D:30:1B:1C:5C:BE:8A
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019E1C474219B28EC29CD834BB3FBD9CFD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 10B9
Signing time: Tue 12 May 2026 13:01:32 +0000
Manifest this update: Tue 12 May 2026 13:01:32 +0000
Manifest next update: Wed 13 May 2026 13:01:32 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: qjclh37nXwdp7fn8IvUKZxMEOzgwmuDErghJpwxjpRo=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:42:19:b2:8e:c2:9c:d8:34:bb:3f:bd:9c:fd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: May 12 13:01:32 2026 GMT
Not After : May 13 13:01:32 2026 GMT
Subject: CN=5b367c080c56091836c35a5c463d301b1c5cbe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:14:36:ef:12:15:25:56:ed:69:a0:db:53:
32:3f:30:ef:ff:2c:f6:41:d2:66:ac:77:5b:00:7f:
cd:ae:93:23:59:b4:01:3a:3c:f0:b2:54:1b:3d:de:
8a:f4:3e:10:9e:4d:cc:57:60:68:73:96:25:ce:78:
44:5c:a8:9e:ea:ab:e6:d6:eb:82:04:1e:84:49:fe:
87:ec:41:e4:1a:4a:02:37:dc:56:7c:18:32:fc:0f:
9c:7d:84:9d:51:37:6e:76:f5:ea:9a:b2:38:1f:cc:
2b:ec:44:ef:42:e7:c9:bb:30:cf:7f:b6:19:02:7e:
b8:d1:a1:01:26:97:53:7f:2d:9e:4b:c1:93:f4:f1:
d5:96:94:37:f8:3e:b7:24:c2:83:51:ec:04:32:58:
f1:e9:28:b4:06:c2:93:9d:86:2d:d7:81:84:e6:3b:
d0:ef:09:64:62:6a:16:f9:9e:95:7e:58:76:b6:87:
d4:da:10:73:8f:69:a7:fb:82:94:66:2c:38:f5:db:
07:e4:0e:3f:cd:e9:ad:12:76:a4:28:78:e0:e5:2a:
07:54:f5:a5:08:a7:34:2d:a1:c6:b3:1d:08:4a:cd:
82:e7:6d:ff:da:9d:01:8a:fa:e6:23:a6:41:5b:17:
16:82:4f:49:e3:15:a5:56:ca:6b:07:ea:08:c2:2d:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:7C:08:0C:56:09:18:36:C3:5A:5C:46:3D:30:1B:1C:5C:BE:8A
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:42:04:8c:94:72:65:83:b7:21:b0:de:ea:26:1b:0b:7e:9d:
80:33:b1:69:8f:33:92:f6:c2:57:5f:51:53:04:b5:56:c4:41:
6c:60:47:74:26:7c:e0:ae:0f:3a:84:fa:0c:d3:75:69:d9:c3:
36:b3:bd:70:70:53:23:04:12:55:4c:b4:6f:f2:5a:54:14:0a:
05:86:c1:3b:cb:ae:92:b7:61:fa:92:07:5d:5f:58:b6:4b:f8:
b2:92:a6:5a:b6:93:9a:b1:1f:84:21:ae:bd:99:e4:83:3a:78:
0c:c7:81:04:df:d9:93:de:00:a7:2c:2c:51:a9:c4:fd:b4:e4:
03:f5:9d:be:3e:42:ee:e1:3c:0d:fa:87:dc:28:7a:36:a0:63:
8b:c1:f6:e0:15:65:02:2a:32:11:08:4d:a9:73:f9:32:af:62:
b8:03:84:94:00:6e:b2:9d:e9:4b:e3:a6:41:e0:76:5a:a3:09:
3f:af:1e:5c:fd:91:1c:5e:f8:cc:86:71:11:07:0d:a4:65:85:
0a:3f:52:74:3f:a6:d8:b2:73:92:0f:5a:3c:fc:ef:ff:23:19:
89:2f:d0:75:10:9d:b7:3d:e8:90:67:ed:dc:51:9f:07:17:1f:
71:2f:51:01:2a:17:d8:c5:28:cd:fb:86:26:e8:12:3c:e5:ca:
29:52:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:36 2026 by rpki-client