Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: KLCEmGpdM1nkZ4YD706u/KmkQbTpDWIA4EJ2BGdvNlk=
Subject key identifier: 2C:C8:C6:48:E9:24:DA:8C:A3:58:2C:63:0E:01:D7:61:2E:4F:92:A5
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019E3117594AE442F10FFF116B6B21F5BA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0DA3
Signing time: Sat 16 May 2026 14:01:14 +0000
Manifest this update: Sat 16 May 2026 14:01:14 +0000
Manifest next update: Sun 17 May 2026 14:01:14 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: a/12ZLJmPhoyAoxEyyPh0r3RW53gT/ad9cpJI9D7x3o=)
2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=)
3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:59:4a:e4:42:f1:0f:ff:11:6b:6b:21:f5:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: May 16 14:01:14 2026 GMT
Not After : May 17 14:01:14 2026 GMT
Subject: CN=2cc8c648e924da8ca3582c630e01d7612e4f92a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:41:db:cb:04:35:bd:c9:33:88:53:ab:a5:
97:57:40:cb:b6:a7:f2:9d:0a:a6:bd:be:2c:1b:d9:
66:9a:b2:a2:bd:ae:57:cd:bd:a9:fb:b1:66:af:2c:
34:69:12:d1:21:95:3e:22:59:61:61:24:e8:69:4e:
c3:f0:e8:7e:2d:d0:04:37:70:cf:35:82:72:0c:58:
72:66:20:15:b2:9f:28:e4:06:ff:62:12:fd:84:6c:
df:b3:dc:ea:4b:6f:02:d6:fa:b4:3f:c6:7a:cc:93:
30:43:03:21:2b:c2:30:4e:66:53:a7:12:e5:93:7a:
b7:b9:36:1b:2a:dc:58:f5:34:30:f4:9e:56:7b:fb:
11:90:f4:6b:9e:b6:b9:4c:98:38:fa:3b:41:7d:6e:
ef:8d:ac:99:b7:95:3f:ad:3c:03:15:ed:d9:e2:af:
a6:81:64:3e:dc:f1:e2:12:77:c9:a9:17:a2:3a:aa:
97:03:8d:f1:d3:e3:4a:96:ae:84:89:de:53:50:df:
63:b7:3b:29:de:a4:fe:0a:08:42:ea:fe:c4:66:66:
5c:05:90:a7:77:39:59:6a:17:b8:87:50:db:cc:66:
db:6f:8f:e9:96:cf:91:2a:c7:3d:99:3b:48:db:69:
5e:93:4b:0e:fd:e9:bb:0c:4c:cb:ba:45:a7:6d:a8:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:C6:48:E9:24:DA:8C:A3:58:2C:63:0E:01:D7:61:2E:4F:92:A5
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e9:66:e1:8d:73:85:8b:d7:ce:b9:f0:7b:b2:17:bc:96:6b:
ec:45:59:6e:89:82:da:75:f4:c7:45:e9:0a:7e:63:4a:e3:d6:
cf:67:46:d5:92:61:b4:90:1c:a7:34:87:cd:f8:82:7a:0b:f8:
2c:9b:91:1b:92:8c:dc:18:cc:b4:b7:f3:de:26:0e:79:7e:bd:
e6:b6:42:e4:dd:63:a8:54:d4:ee:42:04:aa:76:7b:ba:71:b2:
0f:5d:29:19:70:ab:a5:00:7d:58:8d:94:04:a4:a1:72:cd:f0:
d7:d1:14:46:35:d0:89:dd:a9:de:46:d4:25:c2:97:06:ae:2e:
b1:1d:88:7b:73:2d:fe:28:62:5e:c8:dc:aa:d9:f5:af:32:73:
e2:e0:c7:ec:08:b9:b5:f7:4b:69:26:b7:b1:16:c9:67:37:00:
80:3c:ab:0f:2b:fa:f8:99:65:43:bc:94:ad:f9:81:29:2e:67:
80:26:d4:38:62:87:28:d5:05:5d:c1:76:69:5c:1c:08:22:34:
9c:e7:f4:97:dd:36:33:90:dd:5c:8a:09:31:c8:e2:0a:1b:89:
94:92:b7:e2:06:c6:13:da:67:13:72:fd:b6:48:60:e6:af:a2:
d2:3d:d5:23:16:92:35:68:f0:92:e3:db:29:8d:f1:83:23:14:
b9:9c:2d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:47 2026 by rpki-client