Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: osLyVspi+k57Et/QXzKazooFnBwhYykZWZLE5x+Rt7U=
Subject key identifier: 4C:E7:9B:07:58:35:24:38:54:A3:15:09:9C:EC:3E:43:71:90:1A:7E
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019E9AA91A168AD17DF5ACCF79D95C6E3E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 0136
Signing time: Sat 06 Jun 2026 02:00:33 +0000
Manifest this update: Sat 06 Jun 2026 02:00:33 +0000
Manifest next update: Sun 07 Jun 2026 02:00:33 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: SBlu2vDsnv3EAQds+m/NfZ37eXqdNpO7P2wApNhoAyo=)
2: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:1a:16:8a:d1:7d:f5:ac:cf:79:d9:5c:6e:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Jun 6 02:00:33 2026 GMT
Not After : Jun 7 02:00:33 2026 GMT
Subject: CN=4ce79b075835243854a315099cec3e4371901a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:75:cf:5a:47:93:5d:01:bc:75:fd:3e:e3:
82:bd:42:2b:04:42:d2:6c:5b:b5:69:91:c8:17:17:
a7:7a:b6:11:a3:3b:51:a7:37:2e:a1:ea:d5:b3:e0:
43:15:f4:45:b8:5b:30:20:c2:8c:b9:78:0a:65:0c:
a2:67:16:0e:11:9e:9e:91:49:70:62:87:62:a7:09:
5e:84:03:4f:83:37:7f:95:f3:51:c2:e8:f5:c2:d9:
86:f2:9c:b8:76:c7:40:89:53:98:50:d1:4f:e5:48:
bf:89:ba:29:e9:7c:19:bd:a5:1a:66:a9:87:63:47:
2a:f7:88:90:7d:c9:df:ca:6f:c8:a3:52:4d:d6:2e:
be:ad:a6:82:16:6d:45:82:f8:66:80:cf:83:bd:a4:
68:8b:ce:5e:9a:7c:26:4f:74:b9:2e:c2:c3:52:46:
ec:da:4f:0d:39:04:1e:d6:ae:25:36:52:a1:e4:cb:
90:a5:9a:ea:34:84:24:1d:e7:c7:24:c1:b7:3c:12:
ee:d5:cd:12:d0:c6:a0:36:73:5f:8d:a5:ac:2d:87:
9a:dc:87:ec:7b:b4:3d:35:4c:c8:a6:7f:c1:93:c7:
44:8b:0d:4a:09:d9:c6:1f:73:3d:92:5c:32:8d:47:
e9:f2:8c:e5:b1:62:51:35:47:ee:28:1e:3e:c4:8d:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:9B:07:58:35:24:38:54:A3:15:09:9C:EC:3E:43:71:90:1A:7E
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:52:5f:c5:9d:24:bb:fb:91:5e:36:7c:01:d3:4a:7e:40:23:
e9:65:07:6b:6e:bf:10:31:7a:f0:26:6c:47:16:e3:15:a1:9c:
d8:c2:97:5a:a7:23:18:e7:58:fa:e5:0b:91:33:b9:0e:30:45:
bc:d3:f9:08:3d:70:04:1f:0b:9a:63:f1:ff:67:c0:53:ee:86:
c5:de:b8:08:92:98:02:6b:68:ba:5a:7c:1c:0e:96:3e:b3:08:
9d:84:9f:6a:79:73:a7:a9:91:09:80:da:0e:a3:4d:11:82:e1:
32:c6:96:b2:44:cf:63:4e:8b:e3:36:a8:5c:28:45:2c:4b:84:
de:c0:bc:32:ba:50:64:c0:2a:7c:95:a7:1b:69:f5:f6:c9:0d:
c6:a6:bc:09:b5:2a:da:ad:d5:0c:3d:5c:cf:af:ac:ed:a7:17:
49:13:59:b1:34:6a:9f:0c:da:1c:89:40:84:a6:16:78:c6:ae:
c3:60:fa:92:99:e8:b0:36:da:23:a3:a3:74:28:27:4b:49:be:
89:dc:d6:fa:66:73:cd:41:4f:03:95:73:58:1c:b9:b4:91:d6:
d7:4f:68:18:31:d5:c0:e3:e1:b2:30:d7:67:dc:15:88:85:26:
20:44:5c:b5:29:74:31:62:d2:ab:87:dd:7e:5a:ca:9c:c5:8e:
57:15:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:18:14 2026 by rpki-client