Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: mlWgaTbWgOGZs2/QYRcnHYrjpRwuD8GYzTjRq76TROI=
Subject key identifier: 43:42:01:72:A9:F3:1E:1D:01:EF:9C:75:3F:7F:88:59:87:E5:CB:94
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019EBF5A8232859ACE910B7C56E2D8360038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0A0B
Signing time: Sat 13 Jun 2026 05:00:40 +0000
Manifest this update: Sat 13 Jun 2026 05:00:40 +0000
Manifest next update: Sun 14 Jun 2026 05:00:40 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: JkW1ehszn3gdSzivz6AGwt2FxQdmKxFr4cyphg9HIes=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:82:32:85:9a:ce:91:0b:7c:56:e2:d8:36:00:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jun 13 05:00:40 2026 GMT
Not After : Jun 14 05:00:40 2026 GMT
Subject: CN=43420172a9f31e1d01ef9c753f7f885987e5cb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:66:27:49:ff:57:bf:50:45:01:a4:4b:f9:
4b:8e:36:f7:33:2c:cc:a0:cd:26:55:bb:4b:da:22:
fb:2d:e4:9b:ec:39:ba:a9:6c:f1:86:03:9c:55:3f:
8a:e1:e1:fe:15:ab:f9:0e:96:e4:9d:94:b2:60:e9:
f8:f4:3a:af:28:89:7e:47:97:c7:85:c8:0a:2d:d4:
43:23:ee:cd:1a:13:fd:18:86:89:f5:a4:3c:c0:bb:
e1:ae:1a:5b:9f:a2:0d:15:69:98:d8:9c:b8:d3:75:
a4:8e:87:99:a1:ba:91:73:61:e6:3d:9c:27:a2:42:
b3:f4:97:6e:43:aa:36:f9:18:84:9d:09:12:ad:9b:
c7:93:aa:22:2f:e3:ca:d1:d4:63:02:82:96:d8:56:
03:14:30:02:ef:33:b3:3e:24:f3:ee:3f:f7:74:23:
b0:dd:57:2d:1c:b6:31:e2:3d:f4:42:db:47:ba:89:
e4:ce:e4:b3:96:00:ad:a1:61:cc:45:f6:1c:6d:c4:
15:b5:ea:ad:82:32:dc:cc:16:21:a6:02:8c:8d:28:
07:65:b4:b3:6a:8a:75:59:c6:f2:0f:8d:30:89:94:
21:f3:1d:8a:9b:84:0a:33:d6:ca:10:6c:7a:26:85:
16:e8:19:35:7c:ca:e3:86:63:38:b8:89:e2:2b:2e:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:01:72:A9:F3:1E:1D:01:EF:9C:75:3F:7F:88:59:87:E5:CB:94
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4c:b4:df:73:14:c5:8b:14:f1:79:e6:fc:e6:e7:67:dd:cb:
19:dd:b9:47:25:a1:64:c7:7d:a1:8d:cd:a4:0a:2c:a0:d0:b5:
d7:18:a8:2f:84:d0:4d:b7:64:ef:9a:03:d9:ad:41:65:b4:2c:
59:c5:96:96:fb:1d:94:65:36:ac:cc:cf:54:4f:6b:b3:3d:ea:
0e:c5:14:eb:97:13:4d:c9:04:fe:45:17:d0:9f:9a:a7:8c:7d:
02:da:b3:40:b6:d4:2b:9e:12:c6:e1:41:a5:66:16:95:0e:c7:
3e:06:51:92:22:70:dd:79:8e:76:01:44:30:77:de:60:7d:90:
cb:f1:8f:c3:50:99:37:4d:1b:c3:8e:9a:4f:e2:d3:7e:73:1b:
73:de:0d:84:70:c3:9f:aa:22:9d:f9:30:d1:a6:80:72:d8:c2:
72:e5:03:f0:75:89:5b:4a:93:ea:92:10:e0:80:1c:b1:49:3e:
21:8a:62:42:52:a7:fd:6a:e8:a0:ae:19:c2:d0:d0:1f:65:3f:
97:b8:2b:74:8a:2b:97:65:3f:f7:fd:f4:54:02:0d:55:62:bc:
32:a3:7a:d2:90:37:b6:2d:d9:c8:a5:61:15:a5:d0:53:9e:36:
0b:f6:fe:3c:9a:d8:06:b1:8b:fc:06:ea:79:3e:0f:f7:40:b2:
a9:66:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:07 2026 by rpki-client