
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: Dp406Yfh6433Nyv/Vkj2ve5T31ydtoLMcGfdTj/ICR8=
Subject key identifier: E6:C9:AA:13:A8:C5:53:F8:C4:DE:38:5D:62:16:4F:9D:CE:40:5C:BD
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019F1377BBA8D13D5E46EDAAE91B24B1B5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 13:00:41 +0000
Manifest this update: Mon 29 Jun 2026 13:00:41 +0000
Manifest next update: Tue 30 Jun 2026 13:00:41 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: wJhhuMtN0SQtZg4PnF/CZgOEq01jLKtZqc0bfPFCUeg=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:77:bb:a8:d1:3d:5e:46:ed:aa:e9:1b:24:b1:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jun 29 13:00:41 2026 GMT
Not After : Jun 30 13:00:41 2026 GMT
Subject: CN=e6c9aa13a8c553f8c4de385d62164f9dce405cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:ee:5d:8f:2a:c2:7c:75:e2:19:81:fb:94:
7c:51:9a:c7:6e:e2:91:d1:de:b8:4f:1b:eb:b4:95:
1b:db:14:f6:0f:25:98:7c:82:01:e3:56:bd:91:84:
17:29:40:d2:0b:9b:02:f0:c7:ff:10:9c:f9:e3:d0:
35:a7:d6:b9:75:bf:fb:94:0b:f1:cd:14:e1:4d:27:
53:d0:43:10:4d:66:c0:78:e3:89:46:43:fc:df:dc:
a6:78:bb:60:03:7e:3d:60:76:b9:61:97:13:fe:b1:
cb:8a:1f:1f:cc:a4:f5:a2:3a:8f:2f:f1:fa:3e:54:
77:81:fa:88:02:7a:e4:28:5d:c3:20:74:24:ed:a8:
c0:b9:7b:4c:d2:8c:88:7b:9a:f7:f6:6a:83:98:25:
ef:7d:34:df:4f:a4:a8:e7:f1:83:30:72:22:69:e9:
d3:f7:02:94:b2:94:32:a8:ac:be:3b:e1:50:09:ee:
d9:01:26:37:32:0d:37:d4:1e:b8:62:69:0c:30:16:
e2:b1:b2:7c:2d:7f:d0:03:51:29:1a:de:3c:8e:87:
01:0a:c0:04:3b:8d:fc:5c:c8:18:c7:c5:54:e9:9d:
74:a5:25:a3:1d:9b:cc:8c:b8:10:56:36:1d:d7:fe:
23:4c:cf:54:7f:da:83:4a:96:69:2a:bb:be:4c:e8:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:AA:13:A8:C5:53:F8:C4:DE:38:5D:62:16:4F:9D:CE:40:5C:BD
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:9c:8c:9a:b6:43:c7:4b:89:83:da:cd:bd:77:a9:b9:2b:
ab:96:ae:ee:89:dd:9c:df:2d:11:86:f0:c7:39:3f:2f:63:f0:
0c:2b:2a:8a:2f:84:9e:1a:ec:47:96:7d:13:1a:7a:b7:c8:17:
ff:d3:7e:37:fb:5b:1f:d1:55:12:46:01:7c:90:e9:e2:4f:3b:
c2:10:3c:1c:92:21:ef:f8:37:a6:43:cf:8b:25:c2:63:b2:de:
db:42:d5:bd:96:e8:0a:e9:03:a4:f1:87:5d:73:e9:04:ef:ca:
b3:b2:43:fb:3b:e2:08:33:12:c9:33:7d:0a:57:fb:67:ad:05:
b8:df:68:7d:40:aa:85:35:26:9d:3d:8e:69:ae:1e:92:0f:5b:
3a:a8:82:18:da:c9:63:13:04:7e:b4:a5:32:86:a7:ef:93:f2:
6d:47:9c:c9:e1:7a:e4:b4:3e:75:53:76:6a:06:1f:3e:91:cd:
21:11:f4:3c:78:75:e1:ef:09:96:87:8c:ff:74:92:dc:6f:1b:
55:b9:c1:48:23:91:f5:a4:5a:ce:fc:d2:07:21:5d:f2:48:28:
f6:f3:c2:41:ba:33:8c:dc:92:e4:85:7a:5e:68:68:34:c7:96:
15:61:82:27:2d:f4:0d:e8:ed:73:98:56:8e:7d:8a:2e:7c:b6:
98:53:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:40:27 2026 by rpki-client