Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: 3PUUMBC2d9kBF4XibIHVtMsAZb7khGtymIH/XaFIIVw=
Subject key identifier: AA:D9:1F:08:3C:EC:E4:F2:2D:5C:8E:71:47:7F:5B:F0:CA:32:C5:CD
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019F18312E5B6D7E646BF95875E73773D130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0A39
Signing time: Tue 30 Jun 2026 11:01:43 +0000
Manifest this update: Tue 30 Jun 2026 11:01:43 +0000
Manifest next update: Wed 01 Jul 2026 11:01:43 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: 4FzVwJpUOrJe35VAySGlMeJSkANjrqIlZ0O56BMZhZw=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:2e:5b:6d:7e:64:6b:f9:58:75:e7:37:73:d1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jun 30 11:01:43 2026 GMT
Not After : Jul 1 11:01:43 2026 GMT
Subject: CN=aad91f083cece4f22d5c8e71477f5bf0ca32c5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:b4:cd:29:d9:7f:21:9a:71:1f:21:0f:3f:
f5:3d:1e:57:ec:02:c7:f8:1e:83:8e:58:ab:35:86:
9f:01:dc:2a:e4:7d:d8:6a:67:de:cc:6a:fc:46:1c:
8b:d8:29:52:47:00:ef:a0:ad:65:67:1d:f4:6a:ea:
9f:bb:b2:f5:c0:da:ab:4e:9f:7d:8b:cc:3a:41:48:
57:25:d8:7c:8d:7e:fb:00:48:30:06:0f:4b:18:8f:
bd:ac:8d:b2:d6:69:ca:11:42:b2:85:49:28:d3:79:
25:00:fc:5c:0c:6c:19:dc:04:0f:3e:a1:6b:2f:c5:
9d:cc:af:1b:23:72:af:ca:bd:5b:1c:c9:eb:d2:35:
91:16:49:9e:cb:79:13:0f:0f:66:d2:6f:00:15:d3:
b2:4d:93:c7:c4:c8:b1:08:e2:63:31:6b:79:dd:d6:
1e:d5:9c:b9:85:f1:bd:6f:d5:98:10:ea:5d:3c:a4:
09:17:b9:fe:c9:f2:45:78:7d:58:fc:ae:53:07:a4:
29:b9:d4:2e:e4:5b:93:54:df:db:ff:14:b0:a4:97:
42:1d:ac:43:54:7c:05:c2:93:f0:9f:26:a3:27:d1:
57:37:f1:b9:9b:db:e9:e2:4e:76:54:bd:fc:7b:b8:
a7:33:02:a8:88:b9:8e:0f:f0:1d:b8:43:fe:4a:1e:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:1F:08:3C:EC:E4:F2:2D:5C:8E:71:47:7F:5B:F0:CA:32:C5:CD
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8e:e4:30:c7:2d:c6:ba:13:bf:5c:4a:4c:44:4f:87:f7:c7:
b4:d5:c5:6b:3b:9c:e0:6a:a2:7e:16:63:0b:53:9e:b1:c5:f7:
d0:68:e7:e1:c0:a1:3b:97:b2:74:e3:cf:b1:2c:81:de:aa:89:
c6:fc:0c:69:5b:56:aa:67:de:22:93:ad:e2:09:21:83:21:38:
2e:dc:33:88:88:de:c3:61:c6:12:ea:ba:d1:16:57:bc:7b:83:
d2:cc:59:86:f5:9d:7e:6a:88:f7:bd:d3:02:9b:d3:ad:59:31:
5d:2b:d6:81:2f:f4:4b:75:cb:6b:4b:5b:4d:99:30:e2:33:4a:
1e:d9:c7:31:d6:c1:97:65:bb:97:c9:c4:59:65:32:ea:6d:af:
38:d5:a7:5d:dd:b9:80:0c:9d:3a:0c:05:c4:4a:fb:12:3c:d6:
52:48:f1:08:d3:cc:1f:0b:66:8d:01:7a:ff:c4:32:5c:73:cd:
93:39:22:70:12:e3:d6:a4:1b:70:40:8b:08:b1:11:d3:79:95:
f3:d5:6e:c9:38:20:70:87:69:f9:77:12:c9:02:c1:97:e6:b7:
aa:2c:bd:15:6e:ec:72:5d:ee:a7:ec:51:9e:1b:24:5d:50:a2:
46:8d:90:a8:d6:94:bf:a1:b3:24:7d:d4:06:1c:12:2f:d8:fd:
34:05:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:42 2026 by rpki-client