Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: vJlYjbi+FqABA8EVkDlvuDAVtLJJJ7163BJhG96P8S4=
Subject key identifier: 60:93:5E:6E:C7:5E:B4:0B:C1:81:08:2A:1F:DE:72:E7:8B:7C:F6:35
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019E9D3C664FD17282CCFED60CC2423F55C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 14:00:41 +0000
Manifest this update: Sat 06 Jun 2026 14:00:41 +0000
Manifest next update: Sun 07 Jun 2026 14:00:41 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: 2j6cH7IfXhw/vgCh8k8YTE/Rl0tUpKCg9duJ0QGKjj0=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:66:4f:d1:72:82:cc:fe:d6:0c:c2:42:3f:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jun 6 14:00:41 2026 GMT
Not After : Jun 7 14:00:41 2026 GMT
Subject: CN=60935e6ec75eb40bc181082a1fde72e78b7cf635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9a:b2:cb:49:75:20:10:0f:a4:0c:c3:d7:a4:
60:d6:32:9c:67:c9:38:2d:ce:2f:19:9b:07:e6:24:
31:1f:1d:6c:1d:97:c2:20:a1:7a:ba:ca:e6:2a:31:
df:69:31:e0:80:3f:54:e7:01:72:1d:e8:92:f8:2b:
f3:ce:3a:52:da:a9:bf:f7:2a:d1:32:b8:66:46:51:
eb:6a:3f:cf:fe:71:fb:2b:61:fa:ca:30:0f:a1:73:
68:fd:77:b8:be:92:ff:26:95:16:28:5b:b8:e9:c7:
5c:02:ca:06:a9:57:d5:ed:f0:49:7a:ff:9b:35:0b:
ef:eb:8f:d1:99:3b:94:74:a3:3c:17:da:f4:63:e7:
4a:75:82:84:33:d8:9a:e3:45:f3:d3:c2:ba:8f:98:
1b:dd:41:f4:4e:82:dd:ce:05:a4:4a:bc:f2:b5:36:
b0:a0:9a:01:5d:9f:3f:35:3b:52:d6:b2:22:f5:78:
ae:d6:59:11:88:ac:cf:ee:44:cf:f5:a1:8a:c7:b2:
ab:04:94:bf:4a:13:48:08:98:a6:58:51:f3:1b:c2:
70:48:96:c3:05:3e:04:c7:d4:8d:9d:f3:21:e8:eb:
81:37:43:a1:3e:1b:6b:34:a8:34:2e:20:c7:17:6b:
ed:9c:db:76:af:a6:c6:06:81:a6:27:bb:3f:ae:30:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:5E:6E:C7:5E:B4:0B:C1:81:08:2A:1F:DE:72:E7:8B:7C:F6:35
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6f:85:e1:35:db:76:64:3a:a9:f6:fb:a4:bb:1d:66:cd:47:
0f:16:e6:20:87:51:7c:80:57:aa:1c:87:f2:8d:02:a3:39:85:
0d:51:bb:fb:91:2e:cf:f6:55:15:e6:03:77:ab:b0:4f:36:8b:
82:91:bb:d4:61:42:81:fd:ae:6f:fa:08:31:49:13:9d:02:e7:
44:00:ee:04:3e:f7:cb:76:2b:2b:35:67:4f:b6:7c:0b:8b:e5:
fa:9e:42:75:75:29:47:7c:b5:8d:e9:f5:7a:5c:7d:b5:53:c6:
f8:34:d6:13:79:3c:38:3a:72:2b:e9:16:b4:7c:bf:90:cc:fc:
95:72:a5:7f:ff:fe:45:c7:7c:d0:c4:92:eb:fa:38:1c:1f:56:
73:ea:96:a3:af:ae:a0:79:4f:6e:5e:99:4a:d6:1a:cf:fb:7a:
68:b5:0e:2f:e1:b3:b5:d0:df:c5:ad:c6:16:05:22:96:c3:0c:
cb:1b:53:0c:c0:26:fc:db:51:b3:e6:a6:a9:06:18:89:ee:f6:
07:e3:44:86:ad:b6:e7:df:3c:71:96:d7:67:08:f4:e7:36:36:
98:8d:c9:34:75:f2:a1:5b:de:98:c0:c0:be:a5:48:e0:88:b4:
8d:1d:c9:b0:4f:4b:2c:7f:02:54:d8:b2:2b:90:dd:48:43:32:
78:a4:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:07:33 2026 by rpki-client