Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: cUP9HopbtImwZNkr3vrnLBhc6YZWQTX9ZTvJWMGBqec=
Subject key identifier: E9:EC:31:5D:09:35:C3:87:81:56:CD:FF:70:45:F3:8A:D4:7E:56:40
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019F17F9836C09C07379B9980A7888F91E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 10:00:55 +0000
Manifest this update: Tue 30 Jun 2026 10:00:55 +0000
Manifest next update: Wed 01 Jul 2026 10:00:55 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: aAE9I4ejPteQjN2fyRmL1Gq+dYQ65OJ9LcO+NdK8UE8=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:83:6c:09:c0:73:79:b9:98:0a:78:88:f9:1e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Jun 30 10:00:55 2026 GMT
Not After : Jul 1 10:00:55 2026 GMT
Subject: CN=e9ec315d0935c3878156cdff7045f38ad47e5640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:79:3e:06:8b:f4:f8:5c:bd:2f:3f:0c:bf:
82:42:c5:23:14:db:f6:c1:63:d6:bd:c5:64:bb:1a:
b1:57:4c:b4:50:1c:18:38:da:b3:d5:ce:4f:17:a5:
c2:d5:e6:3d:f7:cb:37:16:2d:fc:b2:1d:53:f6:c3:
3a:f9:f9:e0:62:40:1d:2d:c4:29:51:b8:3d:ff:c5:
58:3f:66:30:c2:75:89:f0:b9:45:b6:bc:dc:fe:37:
d3:f2:7a:bb:ce:f4:f9:3a:c9:b6:45:90:fa:0b:67:
9f:fc:db:00:90:7b:7f:02:87:ae:44:1e:4f:48:04:
db:ff:22:38:0a:4d:20:38:25:69:f4:e2:40:e4:56:
ba:1a:d0:65:f0:ea:b6:79:40:3c:8f:d7:32:2a:b5:
11:3c:b2:a7:f5:b5:02:a5:fd:fa:fa:d5:03:61:26:
da:ac:fc:66:aa:13:d6:18:30:48:7e:5b:97:63:f3:
21:d3:c7:2a:c1:56:03:74:98:02:65:d4:9a:09:5e:
c3:14:4f:7a:8a:bf:c9:a6:f6:23:b7:a7:c7:22:d8:
12:a5:37:8d:f7:22:3c:00:17:61:e8:87:57:66:5f:
86:58:c1:1d:27:a4:9b:d4:0e:ad:8d:79:cc:21:22:
35:89:c4:80:0f:01:63:5d:4e:39:f1:e1:60:88:7a:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:31:5D:09:35:C3:87:81:56:CD:FF:70:45:F3:8A:D4:7E:56:40
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d5:bd:44:27:30:0d:49:cc:62:da:c8:58:5a:05:00:70:6c:
fc:76:62:47:1a:c6:83:33:8c:53:0f:36:ca:f2:32:95:ac:43:
3a:18:78:0a:58:03:b4:eb:a8:ec:41:d6:9f:3d:64:e1:4b:2f:
b1:4c:61:69:7d:5a:b9:34:5f:f6:65:c8:cf:2b:5b:0b:5b:b6:
bc:bc:a7:0d:5b:2b:30:00:1c:2a:c3:70:5b:5e:a2:50:64:b7:
41:72:30:2c:0e:13:20:59:a7:a2:73:a0:59:30:9a:d4:51:88:
4f:50:e3:e5:66:98:e8:3e:7b:a4:64:d1:b5:7f:7e:d3:a3:6e:
5a:26:e9:7d:63:54:0e:d0:2a:0b:a4:76:ca:7f:3d:10:c9:eb:
a2:5c:f8:75:12:98:4e:96:62:39:ef:3c:33:dd:82:9e:aa:2d:
59:03:26:1b:66:10:f6:0e:03:9e:2e:b1:ac:0e:dd:23:89:82:
12:c3:c5:ad:2f:4c:77:d6:a3:38:c1:c0:fb:9a:7c:a4:3c:dd:
46:f2:32:64:4b:2d:0e:6e:71:15:43:1e:a6:71:40:1c:ea:fd:
d4:5e:95:7a:14:6f:94:bd:2d:6f:3d:e6:94:77:14:d8:fd:1a:
ed:b2:f0:63:70:69:5b:39:e8:65:04:71:38:39:0e:c2:20:8d:
b1:da:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:49 2026 by rpki-client