Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: UeagdOaFRUCzxQoJzdwVD4JI5iA8XLpFO4lrQiWucCc=
Subject key identifier: 38:37:AF:B5:54:10:2C:28:60:98:9A:2C:9C:20:55:AA:26:36:CA:6F
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 019F189DFEE49C2AEFF3CB1446DAFC66E7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 1872
Signing time: Tue 30 Jun 2026 13:00:35 +0000
Manifest this update: Tue 30 Jun 2026 13:00:35 +0000
Manifest next update: Wed 01 Jul 2026 13:00:35 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: Dwdc9stwnDwgzsNo7vL1ewa4YHo6ukosPZ0hTsEsn4M=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:fe:e4:9c:2a:ef:f3:cb:14:46:da:fc:66:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Jun 30 13:00:35 2026 GMT
Not After : Jul 1 13:00:35 2026 GMT
Subject: CN=3837afb554102c2860989a2c9c2055aa2636ca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:40:49:fe:a4:ec:bc:6d:ae:7c:7c:0d:b6:
87:99:88:d0:8d:57:20:08:17:1e:8e:b1:66:15:60:
6e:cb:fc:58:87:43:db:77:9c:f2:89:7d:ac:bd:6f:
51:0b:f5:b3:de:c9:1c:c6:99:e6:92:1e:0f:4b:e7:
1e:4f:e8:2b:d3:b5:8f:3b:98:8a:83:e1:f7:cb:f3:
20:21:57:d5:e8:9e:3d:c6:32:20:3e:2b:17:94:a0:
e6:42:60:21:b3:3b:83:c7:1f:b3:c0:df:e2:9b:26:
8f:79:bb:9a:0a:8a:39:34:42:db:4d:8e:1b:ab:93:
cc:93:39:74:6d:e2:75:ba:db:be:6f:2f:82:d4:62:
ba:10:89:cb:6b:92:77:79:4b:79:b8:bb:67:dd:d9:
b7:b7:95:19:b2:2e:07:b3:bf:d3:f6:f0:30:ce:e2:
61:53:2e:b2:91:22:cd:f0:34:8e:28:87:04:19:91:
c2:78:20:7b:54:d4:2e:ac:69:ab:a1:30:ec:ab:37:
fa:b9:89:c3:2d:d0:3c:a8:42:ed:bc:ea:d1:c8:ee:
51:40:64:26:24:60:b2:d9:b0:d9:4a:e0:5a:65:50:
1b:f2:de:3c:38:4e:82:dc:20:06:24:71:81:c0:91:
ea:6e:ce:4a:aa:bc:aa:77:be:7a:08:5a:ac:62:61:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:AF:B5:54:10:2C:28:60:98:9A:2C:9C:20:55:AA:26:36:CA:6F
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:db:42:79:c9:0e:55:c9:e7:61:e2:19:cf:84:73:31:73:23:
95:83:9b:4c:59:9c:dc:be:07:86:02:eb:c2:79:30:35:48:46:
c3:5e:57:1e:4e:91:90:7c:48:43:d3:e8:84:e8:12:98:47:d8:
29:a1:37:28:95:20:78:fd:58:d2:9a:07:76:6c:ee:9e:d3:c9:
da:1b:90:be:3d:d9:5b:cd:ba:27:f6:10:b9:97:66:5d:1a:e0:
36:2a:dd:4a:42:b4:28:ea:be:5b:33:e8:6c:33:47:c8:b4:70:
2d:73:56:9d:89:53:84:10:61:6d:d0:83:2a:da:67:25:2e:05:
96:fa:86:44:8a:f7:93:4d:b7:ed:f6:20:fa:f3:db:ad:fb:0d:
44:a7:43:45:d9:1f:22:dc:9d:a0:49:fb:0c:66:93:6b:f1:a3:
91:1c:17:42:3f:67:c8:d5:01:16:e0:ca:4c:7d:4a:f2:54:83:
bf:f1:1b:a4:8c:44:6e:6b:86:40:e7:ac:29:bb:6d:e9:77:e2:
8d:7b:f0:8f:b5:76:91:ac:43:3d:43:ec:b0:57:df:9d:16:38:
39:c7:e0:96:ab:33:fb:9c:a2:ef:88:39:ab:fc:35:b7:fb:e8:
33:3b:af:61:09:0b:d7:a2:0c:1e:96:7a:2e:e4:30:a1:ad:99:
a9:7c:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:50 2026 by rpki-client