Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: cHU9uoweyeF0NUZ5Fd5fUXSIm53CmngdxSbsqyiXtd4=
Subject key identifier: FF:F8:96:F1:C7:69:2D:C4:0B:30:0A:48:C4:20:BA:48:96:54:E7:50
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019E30732C44BCD01A4DBB5EAC665ED4AA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 09C1
Signing time: Sat 16 May 2026 11:01:54 +0000
Manifest this update: Sat 16 May 2026 11:01:54 +0000
Manifest next update: Sun 17 May 2026 11:01:54 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: XSL0V4BeNqjkNHdf03ZcNIsDAeQNHY/iGusL5t7sOyQ=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:2c:44:bc:d0:1a:4d:bb:5e:ac:66:5e:d4:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: May 16 11:01:54 2026 GMT
Not After : May 17 11:01:54 2026 GMT
Subject: CN=fff896f1c7692dc40b300a48c420ba489654e750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:98:ec:af:fb:70:ea:f8:54:fd:d8:c5:f0:
69:f4:d0:0d:fc:db:02:c5:73:07:bb:57:3b:02:2b:
eb:eb:6a:f6:1c:bb:c2:d7:b5:09:07:01:bb:c5:23:
98:8c:40:31:0f:8e:35:a1:28:f5:78:fb:21:50:4d:
ac:4a:a0:d1:a5:0d:b3:5c:90:96:6c:09:0e:d7:41:
2e:50:74:b0:7a:59:d5:71:c1:70:08:c8:7a:5f:6c:
85:2d:f2:80:c8:f0:2e:e7:16:d1:63:cd:ce:28:b3:
0b:8f:d6:6c:0e:cf:e4:1b:2b:b6:ec:a9:0a:9d:05:
ac:49:76:b3:fc:62:7c:4d:a4:cf:7a:a1:46:f5:41:
90:01:7b:bd:2c:39:c3:ec:06:d9:83:5d:63:94:5a:
05:bf:5d:c0:06:77:80:91:52:cd:76:b9:7e:b0:f6:
17:a7:db:64:a9:7e:6b:65:8f:37:5a:ad:63:33:bb:
62:80:59:0b:9a:d1:16:19:30:04:88:82:ce:d0:e4:
4c:41:ca:bd:1d:06:20:47:35:4f:f0:49:cc:59:2b:
26:97:1f:18:47:9d:a4:3c:2e:bb:e7:1f:0d:04:48:
58:61:aa:cf:fa:2d:fe:75:03:fd:05:2f:50:f7:4f:
b1:1a:33:b6:de:e5:bc:ed:bd:dc:2f:82:c8:bd:2a:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:96:F1:C7:69:2D:C4:0B:30:0A:48:C4:20:BA:48:96:54:E7:50
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:3b:6a:d5:e9:4b:ca:41:01:8c:80:52:bf:25:04:40:95:
d9:69:5b:f6:3e:b1:4b:58:91:62:78:c6:06:78:e8:0e:9e:6a:
ad:67:fe:1c:cf:3a:38:7d:fe:23:d7:1d:4a:c8:f7:de:57:f2:
48:13:4e:b6:64:90:9a:c5:28:32:cb:16:8a:27:99:09:51:46:
b9:9e:f7:f9:b7:38:3b:72:7b:2b:9d:cf:87:90:24:2c:0f:0a:
f0:3f:ec:2e:97:06:a7:38:67:98:88:e6:09:09:72:05:a9:3a:
fb:76:86:46:e3:39:2a:e0:0e:4f:15:fa:e9:dc:46:a3:ff:15:
ca:cf:2d:b5:a8:64:5f:ab:07:9a:80:01:f8:c3:d5:24:d7:bb:
25:29:66:55:4f:57:e4:68:d5:b8:a7:57:1a:9e:a2:4f:ff:84:
b2:ff:a5:f3:0c:56:6a:2d:77:47:2f:2e:59:e4:11:c4:7f:98:
de:36:bc:ef:ef:48:af:78:6d:cf:82:ca:5e:4d:c5:99:11:49:
1a:4d:35:ca:67:41:d8:c9:a3:35:c7:4f:9b:e1:c7:e8:4c:ce:
1e:f1:48:8b:25:29:93:43:d1:5f:53:ef:b7:5a:e6:16:98:0b:
03:38:81:52:fc:91:8c:b9:34:81:ef:61:1f:14:1a:20:e1:62:
69:ea:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:38 2026 by rpki-client