Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: 34Ue7jIdge+vl2kqPN1oR/SQzchAnLyRQc9K6ApCVYk=
Subject key identifier: BE:82:4A:A0:47:1E:A8:81:EA:6E:39:60:69:B3:F3:3A:90:92:EF:C8
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019F17F9DDBB577AD90D7098E6E6D4D32E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 10:01:18 +0000
Manifest this update: Tue 30 Jun 2026 10:01:18 +0000
Manifest next update: Wed 01 Jul 2026 10:01:18 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: N0J5yySQI/YL1Vf6tZuRh7kGKWnkOBY8OLAJ0kYZweI=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:dd:bb:57:7a:d9:0d:70:98:e6:e6:d4:d3:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jun 30 10:01:18 2026 GMT
Not After : Jul 1 10:01:18 2026 GMT
Subject: CN=be824aa0471ea881ea6e396069b3f33a9092efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:ae:ff:e6:e8:cf:37:1d:94:ea:8c:fe:0c:
cf:53:04:8d:89:8e:7e:b5:1d:7f:eb:05:f8:e0:a3:
91:08:a2:c1:26:20:36:fb:45:d1:ee:4c:4c:58:ba:
70:a5:25:4e:82:a5:5a:f9:c3:49:8d:5d:f1:27:75:
6a:8a:da:7f:45:1e:3b:b2:0a:d8:8a:1a:7c:1b:06:
47:5b:7a:d0:82:91:df:83:ae:c2:1f:47:38:96:72:
5c:c2:00:b0:9e:86:6c:13:31:73:48:e9:26:84:ad:
2f:05:0b:f0:34:e3:24:1b:9c:3a:fd:4f:b3:62:54:
0c:53:7d:2f:9d:19:bd:11:96:e8:34:4a:a1:db:68:
80:b5:e5:75:a1:2a:d9:a6:00:2e:94:87:ee:5c:e8:
b8:54:a9:cb:48:32:42:62:76:ce:cb:7b:06:e9:f3:
63:da:dc:65:0d:18:a5:5f:f4:13:cc:fd:e1:c6:5e:
9c:b0:c4:e3:b0:3c:90:96:31:41:39:66:5c:8d:a9:
d2:91:3d:a5:82:7e:c7:c1:14:02:bd:bf:08:04:91:
9c:cb:0f:a2:30:40:6c:cc:ee:24:08:04:07:e9:84:
84:ea:a1:b6:64:7a:17:9b:38:e0:76:6a:58:85:ab:
63:16:4e:cc:33:70:86:3a:9f:97:56:05:9b:71:67:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:4A:A0:47:1E:A8:81:EA:6E:39:60:69:B3:F3:3A:90:92:EF:C8
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:0a:d9:1f:a3:dc:5f:61:9d:fa:ef:33:f2:f4:a7:4a:4b:
65:8a:86:54:3d:4d:60:bb:d1:32:fc:0c:6f:30:70:21:e8:48:
e8:02:2f:a7:5b:fa:1c:9b:bb:ed:fb:a3:f1:65:2e:30:c7:7f:
23:4c:2a:13:be:cc:00:5f:f2:73:e5:6e:3f:2f:08:7c:75:d7:
3a:27:7e:57:82:31:7a:c2:a0:59:63:0f:5f:86:bc:c6:20:10:
32:02:55:f8:fc:73:23:16:fc:16:01:79:1b:a9:d5:24:58:bb:
fa:b9:b4:3a:a8:e8:a3:dc:b6:ae:d0:5b:9c:4b:5b:19:1d:f4:
ff:c0:77:f8:29:46:8d:a5:fd:eb:6b:cd:da:b7:4b:61:c8:3a:
33:fa:d3:62:d2:9d:28:18:63:3d:38:71:f9:6f:04:72:12:85:
3b:18:5f:9f:5b:16:ca:97:d2:93:1e:84:8b:1d:bb:c5:a4:a3:
e1:d6:14:d5:3a:a6:f7:28:c7:c9:dd:9d:91:00:e8:77:eb:eb:
ed:ec:4d:aa:e2:99:59:fc:70:4a:ef:e4:75:3b:d9:08:62:a0:
09:c2:1f:5e:f7:63:31:1c:c9:ba:99:41:ac:0e:44:a8:59:d6:
37:c1:80:05:af:5d:58:9a:d2:cf:5f:bf:76:6d:dd:6c:2d:f7:
97:2d:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:01 2026 by rpki-client