Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: C+LqgkQsg2pndUEc4P8PVtG2N2YbaH8DNCjXfaZgMJ8=
Subject key identifier: DB:F4:48:F8:DD:B1:18:CF:42:BB:D4:1D:82:8A:7D:84:AF:94:BB:CE
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019E303B0D771EB3A76D9698622FDF223E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 10:00:36 +0000
Manifest this update: Sat 16 May 2026 10:00:36 +0000
Manifest next update: Sun 17 May 2026 10:00:36 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: nzOIYGlJOXK5Ytv+Mc6BTBP41+NrO1VmhHCC4tNz5Ew=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:0d:77:1e:b3:a7:6d:96:98:62:2f:df:22:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: May 16 10:00:36 2026 GMT
Not After : May 17 10:00:36 2026 GMT
Subject: CN=dbf448f8ddb118cf42bbd41d828a7d84af94bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:31:c2:6a:3a:e3:04:48:ae:90:ff:0e:3a:
bb:6f:11:46:04:6e:1a:da:b8:69:e2:c8:40:e5:47:
d3:8b:43:6c:fc:6d:9a:d3:20:83:6d:a6:fe:ed:25:
e8:26:de:7f:db:92:23:e2:da:6d:6b:0f:4a:07:47:
92:01:02:f8:36:cb:8a:e9:f5:2c:05:0e:85:9d:fa:
6b:62:2f:ba:f8:6e:cd:e9:a0:99:77:fb:f0:3a:0d:
ac:70:08:2b:ad:d7:98:8c:7c:2e:eb:70:ef:75:d0:
6e:67:64:ec:e2:a3:2e:3d:61:97:8f:ef:0d:16:20:
d9:23:62:8d:c1:11:68:41:4d:d9:c9:c3:17:ea:46:
aa:91:6e:0c:fc:77:1f:19:ac:d1:7a:84:e8:20:9e:
30:69:67:fe:9d:87:ea:76:21:81:e7:ee:79:a9:fa:
44:65:cb:eb:88:ce:e7:41:b8:60:12:c1:6b:e9:1b:
f2:75:86:1e:cd:2d:59:08:7f:5d:b5:89:02:06:6d:
bc:2e:e3:91:f2:7c:5d:5e:80:e7:dc:27:c4:b5:5d:
86:e1:9d:c2:0c:68:5c:b6:7b:e3:8c:52:0c:bb:d1:
55:ff:ec:55:b0:5d:46:89:80:41:f2:25:bd:5f:cb:
c8:b8:a0:12:cd:7e:95:ec:da:83:f3:cd:41:be:f7:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:48:F8:DD:B1:18:CF:42:BB:D4:1D:82:8A:7D:84:AF:94:BB:CE
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:73:db:c6:c4:1d:6f:88:55:ca:35:11:7c:73:1a:20:7b:e8:
56:d6:73:c2:03:58:cd:07:ec:79:d8:2a:f9:c1:cf:e9:f6:13:
55:5d:64:1b:d5:51:14:69:ef:18:0b:91:dc:12:8f:b8:4f:cc:
14:93:31:09:0d:6d:c2:23:c9:fa:4a:3f:b8:71:3e:3b:eb:a3:
8e:ed:cb:0c:87:31:a8:9c:f0:e5:31:b7:5d:c2:5a:a9:e6:af:
8c:94:d3:49:e0:cc:98:3e:8c:f1:a1:6f:8a:5a:b2:06:aa:30:
ba:ef:20:a5:e8:5c:3d:52:06:55:d5:2b:68:fc:4b:70:3a:ce:
8d:22:44:e4:93:e2:c1:3d:bf:a7:aa:10:37:95:21:a1:38:00:
99:df:11:9b:79:58:5a:80:96:ee:48:b0:c1:29:76:f5:d6:95:
f0:34:89:06:8c:b0:3d:7d:aa:e9:12:2e:63:3e:ee:49:33:aa:
53:ed:6d:da:f0:3a:71:c4:62:b3:e7:5f:8b:52:bb:db:70:6f:
08:fe:33:3b:2a:2a:59:bc:77:81:bd:e5:f2:cf:13:58:1d:1f:
79:6b:53:de:fd:17:85:7a:cc:25:a2:77:ea:09:75:a5:e7:29:
ed:1a:c3:6c:b4:4a:19:34:b4:bf:5d:35:39:09:4e:12:3b:ee:
06:52:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:55 2026 by rpki-client