Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: x6FGN5cVABBjc58mJNgfsvEZfli/FxXhuKDB7I99lV4=
Subject key identifier: 17:20:E1:6B:F6:51:1C:62:89:DC:19:98:DC:E8:44:B6:0B:A8:FC:23
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 019EB9219F0A4EDA5CE6D7F508E655F7A73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0B5C
Signing time: Fri 12 Jun 2026 00:00:48 +0000
Manifest this update: Fri 12 Jun 2026 00:00:48 +0000
Manifest next update: Sat 13 Jun 2026 00:00:48 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: mkUyey5BQzsDZg1usGLT37erJHa3GtWaZykWmG8d+3s=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:9f:0a:4e:da:5c:e6:d7:f5:08:e6:55:f7:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Jun 12 00:00:48 2026 GMT
Not After : Jun 13 00:00:48 2026 GMT
Subject: CN=1720e16bf6511c6289dc1998dce844b60ba8fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:1e:5a:fc:db:52:0a:0a:80:c5:c3:ff:56:
cf:96:63:7e:90:a4:c2:0b:d2:56:33:43:5d:75:0c:
96:18:ba:8c:0e:c1:5a:98:1a:7b:22:a2:77:0a:f1:
53:57:7b:98:1d:10:da:93:52:10:ab:93:c1:b0:0d:
0b:2a:8b:34:e4:b9:3a:f2:c3:e7:5f:b3:f7:a8:bf:
1b:72:23:bc:3c:55:68:54:c6:a3:2d:c9:32:73:14:
d6:0c:c5:bd:76:a9:a0:9c:35:f6:bd:02:83:5c:25:
36:71:24:74:a3:73:a5:66:42:df:b8:51:57:97:c6:
2f:3f:8d:d7:78:de:fc:4a:78:37:94:93:df:45:7f:
e7:72:0b:14:9d:20:4b:b6:66:3a:39:38:e8:bf:fd:
14:91:f9:5b:4b:81:16:40:cd:d7:f2:51:2c:8c:34:
af:ee:7a:c3:8c:7b:fe:8a:25:61:df:3a:62:b4:65:
43:b7:24:88:31:2d:ca:b1:f5:7b:bf:e2:d5:a9:17:
c4:a3:27:02:3a:37:7d:2e:81:a2:56:44:fb:df:9f:
72:d3:53:56:4b:fa:4e:f4:0f:5f:eb:6e:86:51:8b:
de:33:93:de:e9:8a:bf:f8:cd:d9:9d:d7:dd:0f:c8:
65:89:ba:25:4b:1e:ee:e4:51:11:53:d1:1e:3c:60:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:E1:6B:F6:51:1C:62:89:DC:19:98:DC:E8:44:B6:0B:A8:FC:23
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:be:3a:6a:ac:ad:e3:e2:a2:1e:a5:09:fa:d0:40:c0:dc:25:
cf:e0:57:9c:24:d4:12:39:f0:11:4a:db:5d:98:10:c6:d1:58:
22:54:c1:46:78:60:d3:7a:88:34:a4:29:d9:f1:98:ff:9c:69:
89:65:cb:fe:b6:1a:e3:7f:39:d5:ed:4a:4c:74:99:10:4b:d4:
3b:2d:4b:cd:52:d8:e2:6b:96:ca:ea:27:98:28:b3:b1:fe:a5:
35:e2:ff:48:05:ad:dd:d1:1d:52:bd:00:3e:a8:ee:53:8c:6b:
79:d9:fc:fd:e3:c4:bf:ae:c7:32:b9:f1:9e:19:13:f1:13:b4:
78:c9:0c:3a:e9:68:85:9a:06:f7:2a:d7:01:68:38:8d:a7:28:
65:d3:b3:86:01:79:f7:43:fa:87:18:85:9b:f3:e4:4a:6e:fe:
7b:f0:ab:e7:c4:ce:14:be:c3:14:7a:be:d0:00:b5:12:41:0d:
0c:3e:ba:7d:04:a3:1f:68:97:cd:9d:7a:8e:01:bd:89:68:53:
e2:cf:e7:bb:50:c4:7a:94:fe:94:35:91:40:24:84:20:94:7b:
a7:76:55:fa:57:1a:a6:b2:ae:c1:de:82:87:ca:6c:e7:4b:9d:
e4:82:fe:8f:36:cd:65:a8:6e:c5:07:1e:d2:4d:dc:28:55:00:
e9:87:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:17:18 2026 by rpki-client