Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: RvKGo5zkYq9I3X3tpeBK0riTw9V5MiCn6dJdS+QcW+A=
Subject key identifier: FD:80:8B:14:E9:3E:F4:5C:7D:1B:AB:A9:E3:E9:4F:79:10:A9:0A:98
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019E28B89B1F2C18427490C7FED252A7215B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 12B0
Signing time: Thu 14 May 2026 23:00:47 +0000
Manifest this update: Thu 14 May 2026 23:00:47 +0000
Manifest next update: Fri 15 May 2026 23:00:47 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: kaC1CVzz67I8AvOH8EOrRv33HsQDH5yQTYVSlHWcJpM=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:9b:1f:2c:18:42:74:90:c7:fe:d2:52:a7:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: May 14 23:00:47 2026 GMT
Not After : May 15 23:00:47 2026 GMT
Subject: CN=fd808b14e93ef45c7d1baba9e3e94f7910a90a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:48:6c:c3:e8:c1:93:db:79:a0:71:94:ad:
d7:de:bd:0f:d6:fc:5a:13:d9:43:f4:04:3f:58:36:
7b:e3:03:ac:2d:94:67:76:09:83:96:ce:58:e6:34:
c3:e4:22:ce:58:08:df:be:4c:93:9a:51:3b:37:50:
f7:c1:6e:eb:ef:64:50:4b:b6:5f:f5:27:fe:47:96:
c4:ac:8b:08:3e:da:ea:a3:77:ed:96:3e:20:b8:34:
e8:5c:f9:45:84:a3:cb:2b:b1:4f:cc:3b:10:99:99:
b2:a9:7f:e4:3c:d2:0f:f8:d3:00:03:64:27:04:d4:
2b:ca:d8:3c:12:b4:b3:30:9e:a6:8b:19:aa:c6:bb:
bc:e3:e1:9a:fa:f0:04:bd:8b:78:0a:70:19:93:f0:
24:85:9d:e5:db:b7:f5:af:69:d4:0e:f0:ad:66:6c:
bb:7c:fc:07:56:e2:d8:9f:8f:e8:db:ff:27:1a:cd:
a6:d6:6f:4a:85:28:08:a3:6e:b0:ca:98:85:15:16:
dd:75:e0:3a:2b:bd:f1:db:90:e8:16:3f:c2:bb:72:
2e:49:d1:87:fa:54:9c:61:3e:99:01:57:0e:5f:48:
df:6b:54:3c:a8:75:80:e6:53:07:04:9e:58:41:0a:
38:68:b8:c1:0b:10:52:9b:0d:09:0a:0c:35:60:dc:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:8B:14:E9:3E:F4:5C:7D:1B:AB:A9:E3:E9:4F:79:10:A9:0A:98
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:19:fe:d4:0a:38:0b:d4:5b:f7:62:dd:c1:17:96:c8:f7:b1:
9e:ff:1c:1b:d9:db:b2:41:0e:1a:e2:cb:2b:86:b5:64:23:cb:
0c:7f:b9:63:36:6c:e5:49:26:70:12:29:48:b6:de:50:e7:64:
95:ec:9e:a6:e7:6b:1c:a2:60:d3:66:fa:6c:ee:d7:0e:6f:a0:
36:cd:90:0e:d1:c6:06:4d:e4:96:fc:f2:1e:43:df:ec:03:d9:
e5:75:a9:a8:f4:14:c3:20:89:0a:62:c2:20:93:3e:3e:6e:10:
42:98:ba:bb:61:75:26:9c:fa:09:2d:24:e4:52:ac:9b:21:ed:
34:de:52:05:b7:3f:25:5c:54:86:e4:20:c2:20:8b:04:26:2f:
df:4f:d0:1b:00:db:95:f9:35:df:38:79:1d:48:e2:d0:d6:89:
c5:29:b8:dd:ea:92:a5:30:4e:6f:77:7b:b3:14:41:33:65:8f:
ad:8e:52:82:c5:9b:20:ac:c7:31:f0:01:5f:9c:20:c7:8e:87:
4a:dc:d0:2e:a7:8e:13:fe:c4:44:4e:b7:2f:19:b2:b8:e7:e9:
77:b0:37:ae:c1:6b:b2:23:9c:15:7a:cb:1e:32:86:f4:18:f9:
e1:33:55:e2:ca:76:8a:c0:21:b7:e1:ba:fa:21:90:7e:f7:47:
b3:8e:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:37 2026 by rpki-client