Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: UGg7nHz+ep+mtLJFaH+eU3A90sovh8liX3ANdOuQLJY=
Subject key identifier: A2:BE:82:AF:06:5C:08:08:4C:85:E8:C0:03:8F:42:B8:BF:C5:38:E4
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 019F17C2FA0980ACA8F8C98546B2745C8202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 1635
Signing time: Tue 30 Jun 2026 09:01:21 +0000
Manifest this update: Tue 30 Jun 2026 09:01:21 +0000
Manifest next update: Wed 01 Jul 2026 09:01:21 +0000
Files and hashes: 1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: +B239ySkWbIgn3lewBkv8v9qSTzjUMbmSc/Cdz+fvtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:fa:09:80:ac:a8:f8:c9:85:46:b2:74:5c:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Jun 30 09:01:21 2026 GMT
Not After : Jul 1 09:01:21 2026 GMT
Subject: CN=a2be82af065c08084c85e8c0038f42b8bfc538e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:5a:4c:be:ab:4f:48:51:18:4f:97:68:e6:
3c:cc:b4:c9:14:04:a3:94:53:96:c5:f8:d9:52:56:
5f:97:bb:53:84:01:af:c4:0b:b8:52:a5:73:8a:9b:
4d:57:ee:91:99:0d:04:b8:11:2e:0e:e3:8a:1a:98:
68:aa:ac:de:99:e8:95:03:05:ce:90:5c:61:09:8c:
83:fc:66:74:c7:cf:21:cd:1b:53:0d:8a:4a:e6:f0:
28:5f:48:e1:e1:7e:45:b8:3e:72:19:e3:e6:cf:35:
77:d5:0b:c1:14:dd:37:86:41:1c:eb:a0:16:2a:6e:
8f:b1:85:a7:e8:11:7f:6d:5a:6b:dd:e8:bd:5a:58:
4a:19:17:bb:57:7a:9f:ed:44:af:77:c8:db:ff:47:
60:e3:d1:d8:ec:cf:4d:0f:63:29:5e:f1:2f:f0:fb:
39:5e:9b:b5:d4:69:49:91:72:92:e2:53:be:ab:98:
67:e1:b8:31:28:57:35:a1:3c:b7:e8:b7:f8:74:de:
3d:75:1c:69:c4:b6:ab:5c:6b:b7:d3:6f:67:5b:4a:
a0:af:7b:a4:4c:ef:87:fb:7d:76:35:f2:a3:d4:15:
37:7c:78:85:20:da:61:d6:61:1a:62:1a:9f:23:4f:
bb:68:70:e8:11:6f:c9:3d:e9:46:6b:e4:7d:1c:2e:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:82:AF:06:5C:08:08:4C:85:E8:C0:03:8F:42:B8:BF:C5:38:E4
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:42:82:6d:28:1d:ba:9d:0c:33:c5:3e:a3:0e:5b:11:22:25:
82:29:09:9b:4f:34:97:ff:da:c2:f7:dc:74:d0:f7:e1:d7:b2:
0e:63:c0:43:7e:8e:27:8d:a1:21:18:2a:bd:62:5d:45:a1:55:
22:a6:c4:bd:3c:e2:ea:17:8b:49:ea:61:15:e3:8f:9a:84:65:
82:0e:27:18:4e:92:5b:f2:1d:a6:d4:a5:06:be:9c:48:80:93:
3c:89:a1:9a:f8:64:92:f4:ee:22:d2:e7:04:28:a6:81:f7:89:
02:d9:25:30:1f:65:3d:1f:1a:a6:58:13:a7:23:00:e9:0d:bb:
08:1b:4f:6d:30:90:52:82:a1:d8:97:a8:6d:4a:60:87:14:3e:
2d:97:3c:f9:a4:12:96:6f:fc:d2:e8:38:3d:ba:a8:9c:6e:36:
79:a8:44:2a:ad:4a:03:2e:74:e2:ce:aa:50:0e:11:76:ef:3c:
2a:05:e5:86:84:3d:97:84:1b:5b:be:33:92:5d:c0:13:c1:c7:
d7:3f:1d:92:e0:03:13:05:8b:7f:ff:fe:35:9b:e3:e5:5e:a2:
ef:61:ab:5b:bd:39:8d:9c:a3:47:39:fe:54:f1:05:1d:ee:2b:
4a:e6:5d:92:d2:b3:c9:5a:38:98:de:dc:02:a1:cd:cd:cc:09:
fd:b3:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:07 2026 by rpki-client