Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: HAqez3nxWoyP7/liHPKeIEt4i+2fwDpmOEq65Z9oJiI=
Subject key identifier: 84:9C:A6:28:2D:2C:90:7E:50:6C:CC:C1:9D:37:21:EC:0A:09:B7:5A
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019E303BD361AD9F661E1A3C85939A72E458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 10:01:27 +0000
Manifest this update: Sat 16 May 2026 10:01:27 +0000
Manifest next update: Sun 17 May 2026 10:01:27 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: DuORO+rWXyw+P9LX36XqNDbkfjbDBw2D+bZs+L0opto=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:d3:61:ad:9f:66:1e:1a:3c:85:93:9a:72:e4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: May 16 10:01:27 2026 GMT
Not After : May 17 10:01:27 2026 GMT
Subject: CN=849ca6282d2c907e506cccc19d3721ec0a09b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:26:5b:95:7b:a1:24:41:9e:fc:e8:70:41:
c2:eb:ac:d9:91:f8:b1:f1:2f:08:7c:19:e6:85:86:
88:1a:97:79:47:70:8d:2a:a0:4d:de:b7:f4:8a:6b:
83:1f:58:ce:7b:ec:31:93:14:10:d8:a8:e9:e3:bb:
7e:82:79:0c:0a:f9:fe:9b:7a:32:bc:59:0e:d6:28:
33:d2:53:ba:4c:71:a7:65:39:35:33:57:68:37:c4:
17:4c:30:33:f7:d4:63:92:40:2d:41:6f:86:f4:f3:
bc:a3:e4:9d:d0:21:90:1f:71:3d:4b:ba:1c:ba:31:
49:83:85:34:d2:c2:b5:ab:a1:ab:60:44:f6:e4:bd:
29:26:37:e0:32:db:08:c1:dd:06:a0:bf:1d:48:dd:
43:f6:35:0f:48:95:99:20:22:3e:56:4b:85:4a:70:
30:79:d0:ce:03:ad:c0:3b:76:b5:cc:97:82:2e:d9:
10:2e:c0:a9:5e:f4:e1:08:d6:fb:5b:99:3c:04:65:
87:e4:0f:69:88:29:1c:c1:b4:d6:00:88:5e:31:20:
6c:05:ea:22:dd:c8:f4:c6:ff:7e:62:4e:b3:e9:27:
3b:45:fd:6f:0f:e4:15:dd:a0:42:23:aa:89:e5:1c:
7b:43:51:cb:e4:33:bf:59:08:48:9f:ea:cd:e1:1b:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:A6:28:2D:2C:90:7E:50:6C:CC:C1:9D:37:21:EC:0A:09:B7:5A
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:47:a4:14:81:e4:71:13:30:be:6f:fc:49:50:ea:bb:6d:
74:66:b8:15:f5:bd:f3:21:6b:5d:5c:64:49:13:7e:be:b0:be:
9d:32:32:3c:06:a8:04:59:07:46:27:74:e4:54:9d:da:59:9d:
eb:c9:d1:d7:99:63:ab:78:9c:8d:4c:c0:42:ab:be:0e:99:b7:
c7:1c:ec:2d:fb:65:d8:a8:32:f7:58:80:12:53:0a:e5:a8:1d:
83:93:9a:ca:55:4f:f8:89:e6:1c:db:7c:65:16:96:5d:8a:6b:
4c:a4:05:c3:73:7d:a0:d9:24:d6:4e:aa:97:8b:29:0c:97:97:
d2:c6:15:5c:80:6e:46:5a:73:07:12:07:ef:61:17:a0:e4:d4:
3a:14:36:af:42:eb:8c:ce:81:0d:75:ec:69:3c:60:24:45:35:
00:c3:37:42:7c:36:eb:2e:b1:71:e1:f1:8f:f7:c3:97:a6:66:
5f:1c:c6:70:cf:e8:63:95:c1:cf:67:fe:cc:36:f7:7c:b3:08:
86:06:52:92:d5:7a:8b:66:d9:a2:a9:c3:54:4e:ec:fa:4a:47:
b1:13:c4:54:7d:ec:2a:7d:4b:57:c6:1a:37:11:75:12:ea:23:
30:68:26:86:f3:da:13:e4:21:1d:60:1b:4e:a9:f8:fa:44:1e:
c9:49:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:24 2026 by rpki-client