Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: 3iei+UncXs9J2VyYf/UUNb9BXH7sOJjmGVAFyNLMUH8=
Subject key identifier: 87:3E:12:E0:DE:F3:52:D2:01:E3:95:C2:B6:0B:1B:2E:BD:DB:78:48
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019DB1A16C40476DFE488D44E48284B00523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 18CF
Signing time: Tue 21 Apr 2026 20:00:39 +0000
Manifest this update: Tue 21 Apr 2026 20:00:39 +0000
Manifest next update: Wed 22 Apr 2026 20:00:39 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: xa26v7mrMod2O5gZxBVWSRxoT9E/smjssOkdA2hmyhI=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:6c:40:47:6d:fe:48:8d:44:e4:82:84:b0:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Apr 21 20:00:39 2026 GMT
Not After : Apr 22 20:00:39 2026 GMT
Subject: CN=873e12e0def352d201e395c2b60b1b2ebddb7848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:c6:ca:e1:e9:60:d7:80:87:08:80:07:90:
12:11:0b:c4:d6:46:28:a2:93:cf:21:e0:a8:fc:d8:
0e:5b:c4:af:f0:d4:e7:2c:02:fb:25:8d:bc:81:f6:
0e:cb:57:1d:e7:43:2c:43:d9:57:6a:5b:75:53:6a:
ba:75:31:1d:4a:28:c2:59:ea:4e:b1:c9:d3:9e:88:
aa:82:96:71:7b:43:36:fc:e7:cf:8c:f8:0f:3b:ba:
14:05:87:b4:c8:38:c1:62:e1:7b:61:37:cb:7a:b2:
4a:0e:c4:dd:c5:7c:a0:4c:1a:49:8a:87:72:61:6d:
b9:d2:50:5f:c5:99:57:50:4f:a7:fd:5d:b0:28:9b:
5a:12:6f:2f:83:f9:66:d8:8e:1d:99:8b:21:5a:02:
16:61:1d:e0:26:d0:e9:c4:0d:70:2e:00:ef:a2:30:
34:12:00:9c:67:27:db:86:29:a8:f4:c5:69:81:e8:
cf:7e:e4:3c:81:a9:8e:77:cc:9f:3f:a3:bc:e7:57:
eb:9a:e7:75:e0:00:a4:c8:bf:2a:d3:04:a5:bf:af:
59:20:cf:1c:fa:22:ac:99:5b:7b:af:59:a2:af:94:
3c:f0:17:48:fe:0f:c4:67:ac:72:de:6f:a5:fc:67:
44:3d:57:69:7e:49:3a:56:ab:42:8e:1a:6c:b1:15:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:12:E0:DE:F3:52:D2:01:E3:95:C2:B6:0B:1B:2E:BD:DB:78:48
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a1:b7:78:cf:58:0a:7c:c1:1f:d4:30:b6:06:c5:2c:3c:c3:
13:d0:11:42:89:bc:a6:10:de:04:e4:f7:eb:5f:8a:d0:25:75:
48:41:55:30:76:07:95:21:f2:8f:16:37:0b:c0:d8:8f:da:9a:
d0:ff:98:2f:fa:a2:4f:c9:aa:9a:ce:25:15:59:20:ae:c0:ec:
95:fe:c7:82:36:7f:f5:2a:61:e7:dd:c7:8c:be:fd:36:9f:d4:
c9:7d:d1:f7:1f:b1:50:73:aa:37:c6:03:28:29:82:80:e0:ea:
f9:da:3c:48:f7:b8:81:8b:90:f1:10:d4:a5:56:e7:ed:64:e7:
57:de:67:05:37:6c:8a:3a:9a:06:94:b4:25:5d:b4:ac:30:f4:
15:95:ec:e9:e7:25:5e:e2:f5:04:da:ff:0d:66:2c:39:60:d7:
79:6d:b5:f4:e2:3c:46:19:13:9e:40:b0:60:78:bc:7f:ae:10:
b7:24:5a:4c:86:25:2c:9d:13:f8:5b:dc:48:87:a0:ea:cd:9e:
28:af:46:05:e6:78:cf:1a:44:de:93:b9:99:1f:c5:cb:99:2f:
7b:8c:de:40:9f:14:fd:10:60:24:b8:04:ff:ca:85:38:e9:b1:
f2:58:c9:6c:f0:68:d0:86:c3:71:24:1a:15:ba:4b:40:8d:c5:
2c:74:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:13:51 2026 by rpki-client