Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
File: 2j9sNTSiCwTriKpxWOVqSqdTeog.mft (raw, json)
Hash identifier: IXM7UmvIN6nd8FsdCIjuI9u6DKpbB4FE6wzhjeTKopo=
Subject key identifier: 9E:5D:B2:89:7D:27:49:97:9B:D5:DF:23:30:2A:86:79:AB:D9:8A:8B
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 019FCD4BD8C957EA211DEA929C6413D53E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
Manifest number: 5F
Signing time: Tue 04 Aug 2026 15:02:07 +0000
Manifest this update: Tue 04 Aug 2026 15:02:07 +0000
Manifest next update: Wed 05 Aug 2026 15:02:07 +0000
Files and hashes: 1: 2j9sNTSiCwTriKpxWOVqSqdTeog.crl (hash: sPcw8XvpqREynJVnx2z8yKksP0fbu3cgu67obg3CrWk=)
2: b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa (hash: MHlb8AOUqnzkLRPY36W3fQ2GLEGyR8Wv/G1vui2alzc=)
3: x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa (hash: GPNAfFQEjLKrrucTFOdHZ7Ip0tuQh5HgYW5wL908rIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:4b:d8:c9:57:ea:21:1d:ea:92:9c:64:13:d5:3e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Aug 4 15:02:07 2026 GMT
Not After : Aug 5 15:02:07 2026 GMT
Subject: CN=9e5db2897d2749979bd5df23302a8679abd98a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:48:35:a4:bf:a8:da:4a:28:77:83:da:26:
0f:67:f0:15:b8:20:41:1f:ac:02:60:66:04:e9:6f:
83:6b:bc:45:dc:86:bd:f4:a3:82:95:c2:87:dc:8d:
16:41:ef:82:bd:d9:a7:3c:56:de:41:33:7c:dd:c2:
b4:ed:1c:93:89:3f:b3:74:b2:5e:5f:3b:08:c0:bf:
72:ac:41:90:35:af:c8:f0:0c:29:37:fb:2f:1e:11:
1c:85:66:ae:f8:b3:d3:a0:07:95:27:c6:e6:92:ef:
54:0e:ed:ec:a3:32:57:16:5a:f8:75:b7:fc:b2:3f:
39:d9:73:66:9e:65:e9:93:7d:6e:83:b9:10:66:99:
a6:12:0f:08:be:40:2a:1f:e2:d8:98:2c:17:50:5f:
89:15:50:37:ac:27:0c:73:dc:d5:bb:78:a4:6a:a5:
79:7f:93:80:06:fc:0b:63:9c:33:b1:3f:83:1b:ef:
d3:ee:7c:78:f5:2a:d8:50:0d:06:a3:97:25:11:b4:
9d:e0:38:b3:c8:9e:99:4c:19:89:c3:ee:9d:2c:a5:
17:4f:1f:11:54:67:31:10:73:dd:31:a2:04:86:c2:
04:ba:77:4e:8b:28:e0:96:c4:16:35:b9:8b:77:a5:
1b:92:b0:f4:96:81:77:9b:9c:07:ed:da:42:8e:e1:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:B2:89:7D:27:49:97:9B:D5:DF:23:30:2A:86:79:AB:D9:8A:8B
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:35:17:69:77:83:54:93:ef:6c:b7:9d:48:68:34:93:15:47:
bd:da:e2:98:d5:83:dd:c2:b7:2c:6e:b5:e7:1d:15:bb:3c:b3:
08:e2:84:d9:30:ca:75:76:59:b2:04:80:d1:9f:34:ef:04:fd:
d6:aa:cc:fb:35:25:33:49:7a:a3:ec:cd:ec:53:47:ea:13:c6:
24:9a:23:3a:df:bf:ce:59:b9:7d:f2:cf:4b:76:2c:85:d1:25:
53:72:eb:59:b6:90:55:96:58:f6:5d:a7:c5:c7:59:24:ad:2c:
5b:18:17:3c:49:b0:42:b1:65:3f:09:c5:6c:f0:06:82:57:90:
34:77:49:c8:de:a5:4d:cf:bd:91:d1:1a:25:a2:dc:f9:c6:23:
05:be:a2:f9:9e:5b:40:9e:2c:2f:0d:bb:60:92:f6:41:5a:ef:
b6:d5:d7:79:9b:27:aa:e6:91:3a:a8:52:58:0f:4c:14:25:6d:
f8:af:db:c6:61:b7:0c:98:1d:58:aa:8b:46:6e:4c:e4:2a:67:
4c:53:4c:c5:43:0e:d2:ef:8f:06:9d:16:96:ab:01:a4:9b:02:
e9:46:2d:5f:44:b6:88:ee:61:4d:00:21:0e:d7:53:c0:8a:62:
24:dd:3f:b1:4c:bc:35:34:40:e7:ff:7e:b7:d6:48:e7:15:ff:
4c:dd:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:11:25 2026 by rpki-client