Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: oR8JfQziTdI55HOnXOc1/xlkwIF8YHn8wpz+7jgSdEM=
Subject key identifier: C1:F9:D8:D7:62:1E:1B:6C:CD:96:73:B9:6B:47:A3:42:45:2C:E4:CB
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 019E30727F11E605EF10F607831A886E335C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 11:01:10 +0000
Manifest this update: Sat 16 May 2026 11:01:10 +0000
Manifest next update: Sun 17 May 2026 11:01:10 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: pQ5phnKurUL2mMs/a/EREi1RD2xTs7la+fbEV2Oq/FE=)
2: YgBe7NidCuhBJDoY20do8_9nElw.roa (hash: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:7f:11:e6:05:ef:10:f6:07:83:1a:88:6e:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: May 16 11:01:10 2026 GMT
Not After : May 17 11:01:10 2026 GMT
Subject: CN=c1f9d8d7621e1b6ccd9673b96b47a342452ce4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:99:88:82:75:c8:1a:5d:f4:19:c4:1c:f3:
4f:a4:6f:21:b1:46:0c:95:f7:0e:99:f4:05:89:e1:
bd:3b:ea:5f:fd:32:ce:1c:3c:4e:b6:17:54:a8:25:
b2:65:33:0c:fc:ae:59:fa:d4:1b:0a:76:78:fa:1a:
15:d4:b5:c4:33:5a:46:2a:9b:ab:ab:6a:88:9e:1e:
14:62:c9:c6:c4:49:20:a2:30:dc:e7:0a:5f:79:ff:
74:6d:51:1a:34:ea:b9:12:50:c0:0f:1b:0c:9f:01:
97:5e:e7:05:ad:b7:d6:94:49:f0:67:61:ee:39:0f:
33:4c:f2:b3:60:6e:d0:87:6a:2b:af:4b:39:0f:59:
92:e0:dc:3c:3c:da:7c:46:84:28:d3:9b:c7:d8:ab:
9d:ec:7e:0e:dd:44:25:07:49:05:48:62:fe:9a:65:
61:60:37:d9:ce:d9:36:43:db:3b:91:48:8a:38:6d:
f3:4e:c0:39:49:6e:ed:7c:b3:bb:66:b6:dd:15:31:
4a:38:6a:11:66:07:ac:ee:34:40:6a:2a:fb:32:4d:
ff:ff:ef:6d:5f:dc:8b:8a:b4:64:34:0a:0e:a5:80:
0b:35:42:11:60:8d:30:82:95:3f:44:86:03:71:a0:
6f:d6:01:d6:e0:a8:97:67:b4:35:a8:39:ee:84:08:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:D8:D7:62:1E:1B:6C:CD:96:73:B9:6B:47:A3:42:45:2C:E4:CB
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:9e:f3:08:47:a9:16:6d:c4:73:48:17:c4:b8:2a:dc:49:
ed:ed:4f:24:0a:aa:73:35:83:64:49:61:06:61:61:8d:ba:26:
e3:87:b4:2b:a8:90:a6:45:5a:3f:71:d4:bd:e8:e1:dd:98:a1:
41:e9:67:61:c8:b1:0a:0e:15:b8:5c:80:f7:cc:da:e8:56:3b:
44:f6:6e:f5:da:ab:c4:96:43:bc:09:ad:7e:2b:b3:4d:c3:85:
a6:06:6e:df:91:39:f9:34:8e:d4:85:0e:7b:9c:d6:6d:cf:2a:
62:eb:25:ee:dc:13:c0:d1:5b:81:e8:56:31:6c:a8:0b:3d:c3:
5b:da:ea:4b:b9:70:b6:7f:f3:8b:eb:c0:8b:09:63:fd:6e:92:
a6:27:cb:ec:e9:6c:6e:6d:46:a4:91:3e:97:03:d4:71:b7:36:
eb:56:28:75:35:dd:e8:d8:b2:43:e0:13:51:d0:c4:f8:1b:bc:
fc:ec:3d:f2:d7:b1:0b:9e:02:8d:f1:5e:ea:37:95:64:53:28:
0c:9f:54:8c:e8:b7:5a:28:b2:73:10:99:42:ec:6a:48:db:5e:
10:23:6f:96:b9:b4:78:2a:7c:d9:b3:2c:2e:f9:fa:9e:9f:a4:
84:e9:d9:9e:c7:80:f4:bf:20:dd:09:81:5b:97:6c:f8:12:8d:
c8:96:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:40 2026 by rpki-client