Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: 6EwbA2gzbmVECjG/RVx6YiOuO/bVK6COiywl7c5DyRc=
Subject key identifier: 2C:B0:82:49:76:6A:78:5A:EB:4A:E8:D6:3A:DB:62:42:AA:F7:84:21
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019E8EA4DEB1494DE36C709EDD2C187E9DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1945
Signing time: Wed 03 Jun 2026 18:00:30 +0000
Manifest this update: Wed 03 Jun 2026 18:00:30 +0000
Manifest next update: Thu 04 Jun 2026 18:00:30 +0000
Files and hashes: 1: N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa (hash: a7GxJ/DHXtzeo/5dQNp0athcwGWDpOFXNyta+KLkn5s=)
2: j0djN2P0pP4FekmDXul4LqL8vFc.roa (hash: Imh4k/3T8J0ucRVeJognqvvIOllYc40mbdeDTMcQJto=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: Xq5PVcIyTge2mWl5ibeYgyQ63hXdu87cWQ0zTobMtfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a4:de:b1:49:4d:e3:6c:70:9e:dd:2c:18:7e:9d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jun 3 18:00:30 2026 GMT
Not After : Jun 4 18:00:30 2026 GMT
Subject: CN=2cb08249766a785aeb4ae8d63adb6242aaf78421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:23:72:45:29:e5:95:ff:60:f1:7c:34:78:
ad:e3:75:e5:17:68:e6:69:f6:12:77:f3:66:15:ac:
55:00:06:03:33:3b:04:7b:b4:aa:44:5b:4b:19:de:
b4:e2:53:48:14:f0:56:51:26:cd:f3:f0:b6:70:b2:
0f:ad:c3:53:52:45:8c:27:e6:bc:00:c1:1a:d0:e6:
63:f4:3a:81:36:fa:01:76:ab:95:10:6a:5e:8b:69:
ad:fb:01:74:90:1d:c0:45:a4:e5:f8:4b:8f:bf:b8:
62:4f:d1:d3:95:ea:38:c6:9c:ed:c9:09:8b:cc:b9:
32:15:18:7a:ab:4e:40:c6:d9:de:6f:d8:2f:00:51:
63:d2:cd:f0:71:df:3c:3d:bf:2d:f4:33:f1:b2:2e:
67:c3:2f:2f:de:a7:2d:4c:7e:91:70:b9:1a:cc:c9:
39:e7:74:20:44:49:56:aa:b1:f7:40:2f:b1:0a:53:
37:cf:da:6f:7d:48:52:00:1c:99:b1:60:b1:7c:e1:
27:26:26:aa:e2:c0:b6:bd:4f:a5:22:d2:cc:03:ad:
73:bd:31:b1:d2:70:8f:a3:ea:86:4c:9e:81:af:11:
f7:6c:eb:37:fc:a2:e8:53:ac:ec:c3:6a:9b:68:92:
3f:47:ca:40:f3:b9:2e:47:81:f5:93:39:c3:67:62:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:82:49:76:6A:78:5A:EB:4A:E8:D6:3A:DB:62:42:AA:F7:84:21
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:85:81:65:9d:29:89:b2:ed:49:ce:ec:a1:17:e0:13:0b:
54:fe:9e:ba:7a:d9:47:81:0d:a9:55:04:10:92:c6:7c:c8:08:
ed:3c:0a:5f:7b:d2:7a:54:2c:10:9f:d7:4e:a9:30:bf:7e:a5:
82:60:d1:75:b4:62:b9:98:2e:bd:bc:b5:31:29:06:a6:5b:a6:
df:ef:9b:18:4e:d2:91:24:67:f7:cd:4f:20:94:dc:2e:30:81:
2d:3c:36:5b:7c:a9:ee:ef:9d:bd:b3:7f:42:36:87:61:69:d3:
e2:92:ca:02:42:38:e9:a2:ea:10:50:ae:b4:7c:61:02:83:7e:
fb:1d:ac:f3:6d:e8:dd:38:18:d8:03:25:ef:51:78:49:e9:64:
51:92:32:5c:ac:94:c9:e0:2c:ef:46:bf:e4:84:15:95:3b:76:
2d:c9:89:12:40:db:80:4d:9b:44:3f:bc:b6:14:82:c7:0b:48:
8b:87:db:40:0a:89:3d:04:7c:a0:f0:a5:c8:24:1b:16:57:da:
df:00:59:96:a5:ed:51:4c:d8:2d:0a:a9:5f:04:8a:18:77:b9:
3f:96:bd:ba:0c:6b:fc:ca:9c:4c:a7:2c:78:8b:18:a0:27:31:
4b:68:e5:11:0c:97:6f:2b:68:3c:82:97:0d:77:ea:43:4a:a4:
7a:be:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:56:01 2026 by rpki-client