Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier: r/4nlKhm4gS7iXpBk3BX7SIkQaBJW8W8bVqW4aPdzRg=
Subject key identifier: 9E:F2:FF:24:1F:0A:22:4F:49:31:C7:F8:3E:EA:05:75:0E:D6:67:1D
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 019E31BC28EE044B410DA6758A9D48C961DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number: FA
Signing time: Sat 16 May 2026 17:01:15 +0000
Manifest this update: Sat 16 May 2026 17:01:15 +0000
Manifest next update: Sun 17 May 2026 17:01:15 +0000
Files and hashes: 1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: BLDXyGlptAvnHspI2kDWzLyBTlkFYrHlUfD4iyn/tlk=)
2: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:28:ee:04:4b:41:0d:a6:75:8a:9d:48:c9:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: May 16 17:01:15 2026 GMT
Not After : May 17 17:01:15 2026 GMT
Subject: CN=9ef2ff241f0a224f4931c7f83eea05750ed6671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:e4:c3:df:fa:76:79:36:24:80:24:8d:f3:
ae:70:3c:1d:f8:d9:d3:a9:2f:9e:66:9c:e3:81:b2:
0d:79:32:b8:4a:54:2c:32:bb:74:1c:94:e0:50:ac:
43:f8:7b:02:fb:05:82:ef:cd:1d:02:32:3e:6a:31:
f0:9f:2a:e5:a9:95:25:a7:f2:c3:7a:f3:d0:d9:d9:
e2:fd:a7:ca:64:67:d9:c2:51:42:24:b3:f0:47:f6:
a8:47:d1:32:2c:91:27:83:21:1a:40:32:3a:d9:53:
6b:44:07:6d:60:cf:87:20:fb:c0:96:c7:ca:41:7c:
d1:a0:8e:3f:68:a4:e6:54:7a:0f:f8:fa:8f:ff:c9:
f5:69:21:5a:53:20:50:21:18:8c:7c:1a:29:90:95:
1a:5c:12:a0:40:bc:62:37:b2:39:85:5c:4e:3e:c2:
45:60:93:71:c4:58:da:a9:1b:13:75:79:37:a7:5f:
9b:23:de:1e:5c:61:64:10:86:29:b5:d3:d2:5f:63:
51:9f:1f:ab:34:85:ee:d3:c8:b0:c7:78:54:31:63:
0c:5d:0f:92:04:85:da:f5:df:a8:ee:9d:f6:f8:0e:
07:cd:de:5b:8a:6c:5f:18:30:cf:98:d8:82:8d:c6:
d4:37:25:fe:6b:49:25:f5:fe:97:a9:f7:ed:6d:9d:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:FF:24:1F:0A:22:4F:49:31:C7:F8:3E:EA:05:75:0E:D6:67:1D
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2a:e5:8a:6e:5a:98:a3:ff:48:3f:82:39:90:9c:7c:ab:1e:
90:00:4a:aa:57:b0:b8:18:45:71:76:14:93:fb:ca:62:d9:30:
0b:42:8c:3a:7c:d8:57:29:30:25:eb:73:1e:c3:75:47:59:b4:
cd:c5:a7:00:6b:43:97:e7:12:36:f6:9b:a1:30:b6:c1:b4:f6:
9f:27:ba:f9:3f:23:a0:f3:6e:dc:2f:f1:58:68:40:ae:a8:30:
bf:37:68:6f:7a:4b:fa:d9:5c:20:07:41:35:6c:1e:cb:ad:ea:
fa:fe:0a:67:f7:ef:cc:e5:e9:fb:b6:13:98:1b:e2:ce:36:14:
be:00:50:91:3f:2e:2f:91:c6:89:bd:da:f3:58:8f:7b:8f:ae:
a7:95:5c:e9:b7:c5:b7:0b:fc:6a:bc:e4:6b:77:6d:a8:75:18:
1b:77:b0:50:a0:c7:a3:41:75:7f:cd:35:52:12:c5:68:d8:98:
81:77:73:67:cd:ed:1d:f0:ee:78:e9:69:aa:c7:de:f9:cc:d9:
e6:23:40:f8:45:a0:15:39:0e:c0:f3:f3:7c:c4:03:0f:b6:d1:
1c:64:e0:84:af:46:85:fb:ce:b4:b6:09:4c:83:17:b2:e7:f0:
9c:b4:a9:47:cc:92:ed:51:98:04:b2:24:16:8f:0a:a8:b6:db:
83:c0:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:13:27 2026 by rpki-client