Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: HTxt6rNIZgbW/Za2khMQup/83nWsUecLoAWeLFxGeCE=
Subject key identifier: F4:AB:0C:EF:08:E0:F4:14:29:83:1B:69:B5:20:02:EA:15:18:4C:E0
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019EB8EAD4129C62233F2E79DBBE0A36AD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 042F
Signing time: Thu 11 Jun 2026 23:00:57 +0000
Manifest this update: Thu 11 Jun 2026 23:00:57 +0000
Manifest next update: Fri 12 Jun 2026 23:00:57 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: e5l6//21YkPcnUAB2KYJE5ZgqAzgkb9aBXkNU+L2vY0=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:d4:12:9c:62:23:3f:2e:79:db:be:0a:36:ad:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Jun 11 23:00:57 2026 GMT
Not After : Jun 12 23:00:57 2026 GMT
Subject: CN=f4ab0cef08e0f41429831b69b52002ea15184ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:23:fe:bb:d5:cf:b7:dd:62:f9:9e:1a:50:
3f:cd:38:ad:c4:80:3b:e8:e6:5e:aa:ca:c6:06:c0:
10:a0:f5:04:0b:7a:df:37:a9:26:fa:61:a0:b8:14:
f1:9f:4c:bd:8f:59:09:ba:e4:41:00:eb:80:bc:9c:
41:26:0f:cb:d5:ac:7e:fc:49:d0:4b:74:91:ec:07:
ad:a0:26:d7:16:8c:28:1d:a6:f0:bf:e8:78:b8:d6:
f5:45:f9:c7:12:ba:cf:1f:93:83:d8:e7:b6:cd:86:
17:00:8e:55:c8:be:9e:7b:6f:1d:ba:75:17:02:d6:
15:4a:3f:a4:a0:7b:8e:23:e9:fb:d7:ab:56:9f:29:
4d:59:6f:c1:4c:c4:a5:3f:37:4e:e7:e1:bc:16:ac:
57:e5:0f:00:c3:28:89:a7:1f:14:cd:66:2c:ae:82:
a3:06:4c:1f:c2:10:ac:3e:74:c4:3d:8e:14:3f:39:
28:54:0f:1d:bc:4f:c5:7b:a8:ba:43:b0:4a:c4:ff:
4c:6e:3c:ae:0b:dc:08:93:90:fd:94:f2:d9:3d:3a:
7d:34:9c:55:df:76:2b:08:ef:8f:c8:26:31:cb:21:
9f:e3:e1:4c:48:c2:71:16:3f:f2:13:85:6b:d7:41:
e5:d4:01:a5:ca:47:7b:24:fb:4f:dc:21:6c:7b:ed:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:0C:EF:08:E0:F4:14:29:83:1B:69:B5:20:02:EA:15:18:4C:E0
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:26:33:e5:f0:be:a6:93:7b:11:18:6d:8d:47:b0:a1:45:bb:
c3:58:19:ba:86:dd:72:13:f6:5c:15:2f:2d:bb:b6:38:ff:7a:
4c:35:bc:eb:1b:2c:39:0d:55:62:35:50:fc:9d:78:c3:7c:60:
fb:6b:47:00:d1:03:c6:ca:ae:06:3f:e7:6d:bb:ed:10:3a:d7:
54:ed:5c:14:57:35:e4:4a:19:7d:d5:a9:8a:a1:f8:83:ff:cd:
a4:37:5e:22:d6:04:95:84:3a:f0:92:ae:0e:28:b3:09:15:87:
fa:e6:ea:d8:82:bd:0e:31:19:5a:06:a8:18:5d:58:5b:d9:e1:
3a:a5:6b:fb:34:15:68:94:ae:b9:58:5c:60:b8:c4:54:c0:c7:
51:05:c8:42:ad:11:a9:4b:bb:4a:bd:d8:92:ea:dd:5e:c8:ad:
8c:41:a2:a7:ae:71:93:0c:8b:79:5e:62:10:f8:16:c9:3d:9b:
05:f1:41:d6:29:09:89:4e:de:37:05:44:58:23:35:f0:f5:a1:
77:fd:bc:81:0f:78:6b:88:a1:ff:6e:9b:f3:5c:3c:3e:1d:26:
02:e4:5d:bd:9b:9d:06:7b:13:93:cc:0b:93:d3:8f:13:dd:53:
f2:45:75:88:0f:46:41:bf:e7:5d:32:2f:8d:9f:2a:19:f1:53:
96:16:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:38:16 2026 by rpki-client