Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: jmbrJafPkN04tIOPXzYRBqPTHsm5FsL6+RIVdqGXaoc=
Subject key identifier: CE:4C:03:41:B6:72:E7:AD:50:06:68:DD:0E:C4:53:F0:B4:7B:AD:08
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019D99D09F4B074BE188D91206ACB5255E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0973
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: 2uGsVH092KjUmqPxxgAO4+xApqUQDDr3gZtSki8RHnY=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9f:4b:07:4b:e1:88:d9:12:06:ac:b5:25:5e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=ce4c0341b672e7ad500668dd0ec453f0b47bad08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:72:3b:e8:75:36:37:21:36:29:dd:be:2f:
07:63:ca:6e:f0:88:75:75:7c:af:fb:d1:ea:6c:1c:
fa:8c:18:42:02:fc:a3:46:12:28:25:3a:ac:97:52:
94:35:f5:86:6c:5e:2c:de:d6:c0:3e:ea:5e:a1:6f:
83:79:5d:69:85:cb:85:c0:cf:c1:09:6c:4f:4a:68:
58:4f:f3:25:ff:fc:3e:7c:9b:e5:93:d3:63:03:1b:
15:43:8e:73:41:7b:53:b9:a5:4f:4f:59:da:d1:3e:
eb:32:08:b9:c4:41:89:f9:b7:d2:1b:55:6f:26:de:
c7:d9:aa:4d:0e:ae:86:24:9e:1c:a8:65:e7:fe:fa:
c6:32:c6:a5:c4:33:16:a5:e8:b8:3a:7d:ad:37:60:
df:7d:13:8e:92:aa:1a:c5:eb:65:d7:fe:99:bf:d2:
0e:4c:63:2f:20:44:09:cf:66:f7:f9:1b:96:3c:8b:
d2:ef:ae:c4:ae:f6:08:1a:b4:f7:38:73:d1:88:9e:
fd:a3:14:d8:03:b8:0c:e6:c8:7b:a5:89:c8:8d:eb:
96:b7:9c:d3:20:da:11:69:a9:30:5b:9a:d4:4b:66:
f9:b6:6b:e4:f5:1e:05:8f:1a:f2:5e:93:e3:6a:25:
88:e1:13:7c:35:cf:a8:b1:18:40:40:ed:8f:a2:ef:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:03:41:B6:72:E7:AD:50:06:68:DD:0E:C4:53:F0:B4:7B:AD:08
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c5:5f:e5:e2:d2:2e:ad:c9:c3:dd:fd:b9:a9:57:a1:68:f2:
d2:cb:d9:db:0d:72:3d:61:5a:b0:d9:92:73:70:b8:72:52:49:
9d:7a:7d:a0:01:31:c7:a1:46:4b:32:90:ea:81:43:d0:b3:92:
53:9e:b8:50:90:95:ef:c5:b2:85:1e:5d:ad:01:4d:f4:37:0d:
74:4a:0e:ea:89:da:bf:6e:10:66:be:9a:28:07:01:29:8e:e2:
6d:90:69:3a:1b:60:1e:18:d9:26:65:88:68:a6:89:38:b0:5f:
5e:3a:d0:17:6a:ae:4d:2e:6f:ac:00:a1:1c:00:12:5a:a0:32:
f2:42:05:e8:22:8b:54:70:46:db:dc:b4:d5:28:e1:ba:2a:c9:
09:90:fd:d9:00:e1:6e:34:27:7f:9e:67:ea:60:0d:5f:24:d6:
34:60:e6:38:09:3e:69:c7:1a:fd:c0:0c:3c:31:eb:c8:d8:9f:
90:d6:b3:91:14:78:11:97:5c:68:7a:6f:b0:ff:7c:0a:4e:25:
18:13:1f:47:5a:a9:4e:f1:86:a3:7e:d5:76:d7:cd:69:bd:59:
49:dd:02:ec:08:6f:2b:50:dd:9a:4c:a4:16:1c:06:da:4f:05:
5d:e1:46:14:df:a5:08:e9:e8:46:2b:d3:af:82:eb:50:23:0a:
d3:f4:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:14 2026 by rpki-client