Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: 95Ur0r/LNgP19F1psoUBwgoV9omM+EiAVngm9HSLPB0=
Subject key identifier: 9C:23:71:80:D0:81:56:7C:8A:FA:03:81:95:22:B4:96:A3:9C:FB:13
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019D38D36AC1F2DAFC609F750755EB99744D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 7WEVe5gNZbs96C2aUn67YuPAm+df4zMgbmPjlGuklBE=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6a:c1:f2:da:fc:60:9f:75:07:55:eb:99:74:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=9c237180d081567c8afa03819522b496a39cfb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:a8:55:95:26:c1:28:3a:45:61:a6:64:6a:
30:f4:fa:41:c8:42:40:7f:07:6a:09:1e:c5:8f:4e:
2f:b9:34:89:a6:cf:59:21:2e:4e:85:6f:78:24:ce:
d3:6c:d8:1b:b8:14:6b:bd:68:21:ad:9f:06:4c:32:
4d:ce:76:b2:99:fe:c5:36:0b:46:8b:ad:17:9f:ce:
b8:af:1d:7f:51:b4:63:ad:48:45:a3:de:2a:22:06:
59:f5:a6:fb:bd:3d:60:2d:7e:64:c9:a8:f2:c4:80:
37:81:89:05:53:41:31:61:7e:e3:69:61:0d:25:39:
56:c9:45:a0:11:da:56:0c:9b:0a:65:1f:7c:79:dc:
89:51:e4:aa:37:1b:79:00:8a:c8:a4:97:80:38:8e:
1b:8e:54:94:f2:ff:a0:08:af:0c:b4:6b:73:71:e3:
ee:4a:92:1c:d5:6f:d6:27:b1:77:e7:d9:b0:7c:d1:
7e:a0:21:6d:4e:3f:66:1f:b0:54:5b:96:cb:24:63:
4a:fe:e2:2a:dc:90:56:70:cb:d0:37:1c:33:f9:af:
e9:9f:40:48:69:06:83:b5:b4:5b:ed:d4:58:48:ed:
03:9e:b1:01:0f:1e:a1:94:91:f4:44:7b:22:1d:ab:
6d:7d:25:2b:3a:7b:8c:51:81:9d:91:db:4f:c5:75:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:71:80:D0:81:56:7C:8A:FA:03:81:95:22:B4:96:A3:9C:FB:13
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:c0:b1:78:02:04:21:8f:a6:be:7f:07:da:24:d5:52:81:
9a:b4:c3:fc:82:5d:eb:37:45:42:bb:89:a7:a3:25:0a:35:72:
d0:4d:b5:06:09:2b:75:61:b2:40:b6:15:fc:df:77:c8:b3:f0:
6a:b3:20:5e:95:3a:f4:7e:ae:44:92:2c:6b:14:a7:85:a9:51:
6b:9e:3a:77:80:51:ee:f1:2d:4b:f2:67:3c:9b:62:45:e5:0d:
aa:fe:9b:b1:eb:61:f4:41:14:fb:e2:48:08:23:4b:ab:5e:83:
dc:38:8a:c9:e3:41:26:46:55:0a:8e:46:25:27:b0:49:2c:8a:
43:02:76:bf:67:a2:3a:36:8f:bd:0b:bd:2c:fe:84:55:59:e6:
75:99:ad:36:18:21:00:a7:72:24:36:04:b6:38:0b:63:c4:21:
c3:b0:7b:43:1b:e2:3f:1f:b0:b0:1c:38:0d:82:46:39:b6:be:
27:2a:f5:d3:5a:1b:c5:e7:6a:e5:94:a1:58:4a:54:57:b1:96:
90:c0:d3:c3:48:a6:8b:14:34:6f:51:be:dc:fd:9a:1a:45:4f:
f8:2c:d7:97:b7:be:40:4b:75:be:16:2d:12:7d:a5:7c:ea:e7:
57:f1:c6:bc:5e:47:2e:10:df:ab:25:82:68:d7:f0:05:07:aa:
76:35:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client