Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: ocTHKXWxVGZUHyF1ZWU84wnxRTStkghxGprarUy2kWI=
Subject key identifier: 12:CB:A7:9B:88:4F:CB:29:C8:35:27:FE:90:2F:39:61:56:F3:5E:BF
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019E3073267CD152177B4051D990F1D8C7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 0535
Signing time: Sat 16 May 2026 11:01:53 +0000
Manifest this update: Sat 16 May 2026 11:01:53 +0000
Manifest next update: Sun 17 May 2026 11:01:53 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: AinuU/CQVX3Qa3OOmP9lQm3UJMu5ItvHWhz6Mkdqfnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:26:7c:d1:52:17:7b:40:51:d9:90:f1:d8:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: May 16 11:01:53 2026 GMT
Not After : May 17 11:01:53 2026 GMT
Subject: CN=12cba79b884fcb29c83527fe902f396156f35ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:55:b0:a5:e3:ac:09:21:1d:c5:5f:10:09:
d4:f5:7f:eb:27:15:2a:cf:e6:21:ea:35:84:f5:3f:
01:60:cb:56:0c:bb:dd:af:1a:6a:0a:1e:0f:49:96:
ee:d4:ba:7f:bc:8a:3b:68:44:02:99:0d:60:06:9f:
26:c1:f0:aa:4a:cc:5e:27:87:0c:23:4b:74:6f:50:
14:ee:72:6b:98:38:f5:dc:fc:28:3d:9f:c6:13:be:
77:95:6e:41:5e:a7:66:4a:0c:20:95:8b:d8:c4:25:
9d:f2:3c:06:9f:4c:04:39:38:6c:ee:df:8f:59:35:
92:15:f7:04:e4:8f:2d:ec:18:57:16:5e:0c:da:d9:
c2:81:a4:e3:85:83:17:b0:88:2b:df:59:55:62:85:
f0:38:e9:21:2f:45:15:13:fb:55:df:bb:ec:fd:37:
98:4e:59:e5:2f:70:01:7b:dc:e4:60:25:19:92:35:
03:70:e7:02:42:88:f8:1a:8c:71:1b:79:b5:b7:ca:
90:1e:9d:49:db:a7:60:9f:ea:25:60:04:3a:92:fe:
2e:54:35:91:88:11:43:b2:2f:34:ca:33:50:a4:4b:
7f:6d:83:85:b7:8d:06:ca:75:a4:3c:49:13:bb:42:
e7:24:43:aa:25:33:a6:51:13:e0:fa:da:fe:a2:a2:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:A7:9B:88:4F:CB:29:C8:35:27:FE:90:2F:39:61:56:F3:5E:BF
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:d2:9e:dd:c4:83:d6:2b:de:1c:f3:80:23:b9:62:35:fd:
d0:ae:8b:fa:fe:dc:3c:4b:2d:41:63:b0:8d:7f:a5:aa:cb:97:
bf:63:0e:1a:65:a5:a7:ce:f8:c6:0a:a2:2d:3b:f8:b2:73:b0:
7b:ff:b4:69:ab:31:a2:e0:bf:be:1f:da:c9:1e:7f:82:e6:93:
f9:f7:78:c8:d9:e6:00:ce:d6:4a:f1:eb:28:d9:92:dc:9f:7e:
75:57:c3:6d:87:58:ee:e5:91:c4:36:cb:8b:0f:59:32:39:4c:
71:dc:f8:29:ac:aa:f8:b6:a1:d8:4b:51:b1:6b:21:cf:a6:10:
12:59:f2:2e:b7:43:e3:3d:3a:d0:4a:fa:dd:7f:fa:4c:a1:a5:
45:e8:94:f2:9d:52:d3:cc:2d:d2:90:e1:c3:f9:2b:64:0b:a7:
7e:07:e5:f3:39:d6:fb:b9:d2:cb:d5:87:d9:96:ee:73:ad:e6:
b5:aa:e1:15:8a:96:b5:ab:3d:a3:95:12:20:ea:6f:d6:c2:4a:
96:8d:97:ab:52:90:8c:9a:9b:fe:57:34:85:d9:6e:d2:d7:28:
bf:8a:29:b4:b3:14:53:56:85:ca:e1:38:5c:1a:80:5c:d0:4c:
1c:46:7d:03:fb:d4:54:75:ea:ba:e0:8e:1d:b4:11:89:58:da:
08:33:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:03 2026 by rpki-client