Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: ukJbqHpbjVg4nAl3TXXm/ZY3pyp18I+fVdCADScpY3k=
Subject key identifier: DC:BF:05:22:DD:5A:00:6F:AD:AF:ED:2B:99:BF:54:6D:5F:1E:25:92
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 019E9A0446B3AE333D1EB019E2272E48188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 0189
Signing time: Fri 05 Jun 2026 23:00:31 +0000
Manifest this update: Fri 05 Jun 2026 23:00:31 +0000
Manifest next update: Sat 06 Jun 2026 23:00:31 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: IWaKJ7rwOA91jMsrjqBIW5fufWGL8n3msT/7PMX1/EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:04:46:b3:ae:33:3d:1e:b0:19:e2:27:2e:48:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Jun 5 23:00:31 2026 GMT
Not After : Jun 6 23:00:31 2026 GMT
Subject: CN=dcbf0522dd5a006fadafed2b99bf546d5f1e2592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:80:47:f0:f6:7a:19:f3:e7:31:46:75:c6:
ed:7a:23:6d:c4:22:77:49:4b:04:6a:69:a9:b9:62:
6e:be:98:77:11:46:fa:6a:71:c1:72:c3:3f:7e:d4:
98:17:e3:53:4e:5a:5d:b5:b1:fa:10:0f:81:b5:82:
7f:51:a0:e1:dc:a1:6e:38:fe:14:5e:8b:78:41:ee:
03:04:c2:95:2b:bf:a3:d8:d4:27:28:52:2e:fc:34:
86:30:f4:15:3f:ec:73:03:89:ed:46:c6:5f:7f:8b:
99:76:c0:84:90:ea:b8:f6:c9:c5:0c:a1:b4:1a:2e:
8d:ed:ee:2a:33:16:d2:93:35:2e:32:2f:d6:be:de:
41:af:f0:50:c1:a2:71:2e:66:2d:31:15:b5:46:aa:
8d:1f:73:55:53:69:94:2a:00:b5:50:f5:ec:87:99:
ab:9b:e9:a1:c0:8a:75:c1:1a:c1:05:21:6c:40:40:
28:73:1e:1b:e5:c3:5b:c8:5d:60:f6:4a:c3:a1:9e:
62:fc:42:b8:22:b3:09:8e:0a:46:48:1c:ee:c5:e8:
88:a1:40:e0:e1:34:2f:1c:b3:3b:b8:a3:e3:89:8e:
cd:58:f8:80:57:9a:a7:df:61:7b:43:bc:c7:c7:fb:
1b:99:7b:c7:87:52:d9:e7:29:06:ca:5b:52:49:10:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:05:22:DD:5A:00:6F:AD:AF:ED:2B:99:BF:54:6D:5F:1E:25:92
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:26:16:35:e1:12:f7:d3:7f:0e:3f:27:fe:f7:69:38:64:1a:
a0:1c:6b:ab:a6:bb:ef:b7:b3:3e:10:d6:85:97:61:90:1b:6d:
01:bf:07:b8:c4:47:5d:d0:e4:e4:0e:22:1e:18:e9:29:0f:2d:
fe:f3:bc:31:f1:e7:22:01:66:61:f3:de:94:64:54:5b:f7:b5:
9c:0f:13:c4:a8:c3:40:b2:ea:2b:f6:21:ae:e1:aa:6f:59:57:
91:c1:b1:b3:30:84:43:db:30:43:d9:62:c0:3b:25:bc:ed:c9:
f3:c9:be:7d:34:14:97:5c:77:e3:9c:df:30:ce:32:44:a3:ac:
31:c1:93:4f:95:93:6b:92:de:04:34:06:b6:71:40:75:a9:f8:
5b:b3:14:c3:b4:f3:02:7d:8f:c2:da:c1:9d:c0:07:6a:79:2d:
1a:eb:5c:89:58:4e:01:ae:a5:f5:7a:f4:76:74:cd:ce:d1:cb:
99:15:e1:f9:16:5b:b5:59:bc:7d:71:98:a9:54:bc:1b:53:79:
dc:99:0b:8c:a9:a7:9e:fe:42:35:47:43:27:c8:f4:47:8d:40:
5c:a7:b1:d0:36:b1:cb:ff:02:2b:e8:a8:4b:72:cb:55:bf:38:
90:cb:90:dc:09:74:7a:3e:14:78:50:5e:d7:61:57:8c:3b:45:
40:65:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:11:22 2026 by rpki-client