Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: NCV64iPxzGLq1cBpnTowDSyQeEStgMt7Z2Vd6wJwY8M=
Subject key identifier: E4:1B:FE:73:21:BC:FB:70:E4:89:DA:85:D6:85:AE:5D:A3:3E:DB:BF
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019F17C26BB4A9A3F53364E05EE6D9621A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 09:00:45 +0000
Manifest this update: Tue 30 Jun 2026 09:00:45 +0000
Manifest next update: Wed 01 Jul 2026 09:00:45 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: DFqTHkD7x5oqngx3pKJ3+Y89Sz1/8Vxtz4oW8bsjRnA=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:6b:b4:a9:a3:f5:33:64:e0:5e:e6:d9:62:1a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jun 30 09:00:45 2026 GMT
Not After : Jul 1 09:00:45 2026 GMT
Subject: CN=e41bfe7321bcfb70e489da85d685ae5da33edbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:27:9c:c7:99:cc:8d:fa:63:e4:77:81:27:
03:c8:cc:ca:9c:38:0f:11:43:e0:70:1c:d8:a0:0a:
89:86:66:e6:66:e1:7b:ca:38:c0:1a:67:4a:a8:46:
8b:b5:38:34:63:27:2d:f5:dd:53:31:58:1d:30:98:
9c:dc:72:0c:b8:b1:e5:35:63:dd:d1:a9:09:e1:16:
0e:1e:eb:3e:56:8a:01:75:ca:5e:cf:98:9d:2e:12:
64:04:31:d1:6d:3f:cd:c6:7d:6a:ff:b7:9e:de:e4:
82:29:72:19:41:ce:71:9c:46:70:ed:21:8f:ba:3b:
bb:8e:48:21:86:73:d8:32:84:6e:fe:7f:a3:da:a2:
a8:cc:15:02:55:b1:0c:ef:40:ef:7e:ed:5b:43:04:
5c:38:56:47:88:34:8f:ae:7d:be:a9:3d:92:c9:ea:
75:a1:45:53:1a:ed:68:b5:f3:9c:71:cf:7c:67:d3:
fe:b1:e1:7d:e3:21:b7:fa:28:40:85:20:2f:96:ec:
03:f0:7b:06:44:a3:4c:dd:af:d3:47:a5:d3:8d:da:
76:53:f0:1b:fe:93:bd:4b:be:a1:9e:fb:b7:25:fe:
a1:e9:d7:95:38:71:bc:da:3d:89:d4:60:68:37:7d:
fc:b3:e0:51:15:24:bf:46:62:00:b7:cf:2f:bb:34:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:FE:73:21:BC:FB:70:E4:89:DA:85:D6:85:AE:5D:A3:3E:DB:BF
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:87:7c:b0:85:84:7d:bc:5c:58:1c:dc:c3:f4:c7:8a:46:
c0:16:05:2d:ff:df:55:4c:dd:8f:ed:9b:ec:b4:77:85:72:f7:
73:90:35:05:dc:de:3a:98:da:f0:31:9d:97:ff:9e:64:b8:fe:
b8:8f:01:72:ca:35:49:cb:68:2f:5b:a8:90:f2:a7:d7:e3:ee:
4d:d1:38:5f:af:1d:fb:06:95:bd:4e:e4:6e:06:4a:a4:bd:83:
2e:69:ee:59:9c:96:1e:8b:1c:16:1f:f4:5a:71:44:d6:5f:a2:
c0:50:7d:35:08:f3:e7:7f:5b:0a:d7:1e:43:ce:f7:cf:da:d4:
bf:b5:19:17:89:1a:5c:4f:27:75:89:e7:86:47:fe:55:74:1c:
93:a2:a0:a7:89:95:43:a6:89:f4:a5:b5:44:ec:a0:10:17:79:
dd:1f:7c:b9:62:e2:f3:08:de:b8:ce:b9:6b:db:0c:18:34:e0:
b9:04:f5:4b:9d:ab:9e:64:7a:51:3a:9a:65:15:f6:21:f3:07:
63:de:d3:00:34:7f:20:4b:80:8e:36:ad:0d:58:24:59:38:5d:
54:f8:f6:af:e0:b6:df:ee:64:8f:a2:30:6d:2a:7b:de:41:48:
40:2b:14:76:8f:0c:17:02:28:22:1c:77:ae:01:3c:93:f9:e7:
d5:20:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:00 2026 by rpki-client