Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: JlMxpEwXe3spgrjMqS8YmvHwNvoPs/FiDmn5A11WYzo=
Subject key identifier: 16:A8:0F:BB:47:B1:B2:99:63:59:84:5C:04:FA:9E:44:39:94:85:6B
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019F1265E79C1E88219322227752A687202F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 1329
Signing time: Mon 29 Jun 2026 08:01:35 +0000
Manifest this update: Mon 29 Jun 2026 08:01:35 +0000
Manifest next update: Tue 30 Jun 2026 08:01:35 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: W1dtBNNCSO92KCb3JxDgvoBzk5IRVgXYWY4xh6CK/TM=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:e7:9c:1e:88:21:93:22:22:77:52:a6:87:20:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jun 29 08:01:35 2026 GMT
Not After : Jun 30 08:01:35 2026 GMT
Subject: CN=16a80fbb47b1b2996359845c04fa9e443994856b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:49:a1:83:8b:2d:97:54:98:80:72:28:4b:
4c:f4:0f:97:8c:ca:20:23:f4:26:5b:36:17:25:a5:
ed:46:07:66:4c:41:23:c5:da:45:16:a7:7f:6e:67:
fd:15:f2:cd:c2:5d:4c:c2:e6:12:fa:ff:d9:eb:e3:
6b:e3:25:bf:41:c6:a1:15:ea:41:98:ad:6f:52:a9:
ac:57:82:4c:bb:b5:97:e3:9b:91:a2:f2:35:cf:cf:
53:91:85:a9:22:c7:99:f2:63:ec:a2:f4:ba:b5:2c:
c6:e6:bd:9a:3e:9e:9d:28:64:26:e6:41:04:37:ce:
0c:ac:9f:7f:41:8f:4f:14:a0:b5:70:d7:87:76:61:
25:cc:22:cc:c7:ba:88:d2:60:1b:74:9e:7a:42:9b:
86:39:54:5f:0d:aa:be:3b:ba:fe:07:ec:7d:89:cf:
14:67:80:7a:71:bd:71:2a:fe:f5:cf:b5:65:84:fb:
64:c8:d9:22:76:ee:e7:89:23:71:91:75:97:81:3b:
0a:e3:cd:33:b4:67:87:14:b6:51:f8:3d:ae:c2:9c:
0b:a5:a4:c2:64:e9:ea:4e:ff:15:a2:93:8c:16:30:
bb:37:66:36:48:70:8c:61:08:4b:a5:a5:a4:08:48:
1e:42:87:a1:43:c1:ac:8f:67:f9:cf:3b:05:e4:11:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:0F:BB:47:B1:B2:99:63:59:84:5C:04:FA:9E:44:39:94:85:6B
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e4:c2:f2:c2:07:6f:02:54:00:0f:88:d4:c1:5c:21:fb:2d:
8b:5b:76:e1:94:f2:dd:7f:b4:a4:be:ad:56:bf:ce:ab:65:a3:
7d:7f:c1:ae:01:c1:1b:29:01:f0:97:2a:c9:45:e0:43:11:d9:
14:09:3c:8b:01:91:e0:05:6d:6f:ca:fb:0d:ad:1f:ad:88:51:
95:6a:f0:54:31:b8:73:56:ad:b9:46:00:ea:5f:d1:77:00:ac:
c4:35:57:29:78:d4:3c:4d:01:10:e3:e1:ea:ff:92:d4:6b:ab:
ca:45:9c:f6:e1:3b:05:f9:a7:92:1c:aa:14:23:73:73:42:c8:
f6:77:e0:fa:23:76:fa:57:e9:c0:d8:93:df:a6:46:f8:6b:43:
6b:d8:0e:fd:c0:41:a7:c2:db:01:76:fb:0d:1d:da:95:74:ff:
28:79:ae:b1:bd:19:c7:6a:f9:0a:89:ed:a8:2b:0c:14:38:40:
5a:d1:01:67:d2:92:0c:ca:ad:e1:f1:04:34:4c:b7:6a:ba:ab:
ce:fc:81:06:89:40:bb:78:e2:94:ab:a3:c2:8f:68:dd:7c:23:
28:3a:dc:78:f4:8d:2a:68:e6:05:24:99:3f:3c:0e:4e:9a:09:
53:40:43:c7:ec:b7:8c:6e:c1:22:2d:ef:93:6d:e2:11:3d:11:
0c:05:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:47:03 2026 by rpki-client