Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: 6iV15x2KcTJ2gdKU+VCJDSSwT2oUcMszWXoSDK0VJPk=
Subject key identifier: BB:60:79:CE:1D:55:13:53:30:1F:1B:3B:E8:21:1A:7A:34:FB:74:41
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 019EB95811ECF2E1C9F9E78383314B029680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 01:00:17 +0000
Manifest this update: Fri 12 Jun 2026 01:00:17 +0000
Manifest next update: Sat 13 Jun 2026 01:00:17 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: JUStu1BSoXYtTEaO7RhDM+v5U74n8bWVkbghNHTxlUI=)
2: maZq56SMgB7nWqqF5eeF3G-X-7A.roa (hash: xVS8tTvs0Q9QEIgJ9B2IqY6QH4qt+wpz/OCltyOVeVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:11:ec:f2:e1:c9:f9:e7:83:83:31:4b:02:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Jun 12 01:00:17 2026 GMT
Not After : Jun 13 01:00:17 2026 GMT
Subject: CN=bb6079ce1d551353301f1b3be8211a7a34fb7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:97:b9:9a:ff:5d:dd:b5:70:18:a1:ad:be:
84:55:8a:2d:86:9d:cc:73:09:9f:10:dc:fc:f2:04:
14:d2:fa:dd:fc:11:02:01:78:9b:53:c8:92:fc:3f:
f9:05:a9:55:c3:0d:c0:53:4b:ab:4a:df:db:6e:c8:
f1:0c:48:6c:8e:13:37:da:a6:95:f9:03:97:a2:97:
92:03:f4:fe:93:e7:6c:e5:40:64:7b:91:37:30:ab:
55:0e:0e:a0:6c:b5:40:bf:70:40:67:a7:b3:06:af:
2b:a1:d7:35:d4:21:d7:0f:e8:5a:53:38:45:72:21:
f9:69:27:fe:f8:79:0f:d2:99:4d:b8:d7:da:d0:c4:
23:29:b9:90:12:c0:7e:b7:da:6c:93:aa:92:7c:69:
4f:e3:5a:aa:f5:2a:9d:df:de:48:90:23:02:2b:cc:
b1:8f:15:ab:5e:07:b5:d2:55:48:a7:20:f8:37:79:
82:5d:fc:13:0f:ff:de:8d:ab:06:a9:7c:20:1e:ab:
93:71:4d:c4:61:60:ca:30:d4:d0:00:3e:fb:06:1d:
56:f0:35:50:a8:b0:8e:96:56:db:a3:4b:fb:e2:84:
8b:1f:cd:fa:66:c7:22:bd:12:95:05:65:64:bb:e3:
cf:df:35:33:06:a9:20:c9:6b:24:17:63:e6:cd:a5:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:79:CE:1D:55:13:53:30:1F:1B:3B:E8:21:1A:7A:34:FB:74:41
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:74:55:85:2b:b4:a5:2e:88:ef:e0:e9:8b:a1:7c:34:18:45:
71:8b:0a:fe:fa:d2:7d:39:a6:f7:58:52:04:07:1f:0b:ef:12:
b9:81:d8:3a:3d:c6:f0:98:a3:76:4a:c8:c0:64:c5:84:35:22:
b8:12:e2:bd:5b:43:0b:f4:f7:36:83:f4:f8:3a:2b:32:96:38:
70:09:73:11:51:00:5a:8f:cb:2e:cb:84:4e:37:75:6d:7a:19:
2d:63:85:29:32:9a:92:ab:a3:a8:c3:96:27:1e:ca:42:84:b4:
5f:a3:fb:2b:82:88:84:9c:cd:29:fd:40:24:74:42:43:5d:14:
e1:03:5e:5d:83:7a:33:0e:6e:b1:e8:53:50:3c:57:c7:26:d6:
ac:ab:c5:f5:b5:a6:f2:63:57:12:64:0b:7c:fc:ce:58:93:75:
17:e2:c8:e1:7f:d8:d1:bb:0e:7d:14:57:92:ad:f3:a7:7b:3f:
0f:c4:ba:7e:81:1a:a4:6d:c5:14:7d:74:5e:f8:62:d7:76:fd:
f9:00:8b:03:21:30:77:f7:16:7a:64:b1:2f:44:04:44:5e:09:
8a:6f:e3:ce:56:57:f1:79:5b:50:0f:db:c7:00:04:64:8a:bf:
ef:21:0c:07:9e:53:8c:07:45:bc:62:e5:c0:22:cd:24:d3:4a:
cf:67:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:33 2026 by rpki-client