Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: Q8JKgndIvzQ9VWL238kXp2su/AzfG+DFeGqqB9CvVpw=
Subject key identifier: 3F:F3:54:3A:C9:A4:AD:BF:16:02:35:78:A1:E9:6E:F2:E6:9C:33:A3
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019EBE7F0651F66D0245F1D845521355D138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 06AB
Signing time: Sat 13 Jun 2026 01:00:56 +0000
Manifest this update: Sat 13 Jun 2026 01:00:56 +0000
Manifest next update: Sun 14 Jun 2026 01:00:56 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: mOBFROG5HbjoKkIFfVrb9GrJ4t9VTP0Ak0YTYtafuZI=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:06:51:f6:6d:02:45:f1:d8:45:52:13:55:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jun 13 01:00:56 2026 GMT
Not After : Jun 14 01:00:56 2026 GMT
Subject: CN=3ff3543ac9a4adbf16023578a1e96ef2e69c33a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:1c:5f:c5:0b:de:d2:f7:74:86:ef:be:08:
8b:da:e0:a5:6d:79:0c:4b:38:a0:3c:cb:db:fa:22:
e7:f3:6e:0f:a5:aa:35:c5:43:08:49:f6:32:6e:dc:
e1:12:c7:d5:6b:80:4e:98:56:4a:47:75:ef:0a:a3:
46:a2:0e:84:46:21:c8:48:a7:1b:9b:00:3e:30:33:
e0:5f:1d:1c:39:40:9e:fd:7d:91:70:97:b8:24:1b:
d3:48:35:ec:e2:db:a1:be:ea:4f:67:6b:ba:e8:d2:
5d:51:8d:c0:84:47:91:0f:6b:55:00:a3:06:6c:67:
74:24:fc:09:05:97:9b:20:bd:98:05:f3:2e:1b:2d:
8f:75:af:4a:30:b3:76:79:f7:6a:c4:ff:65:ce:47:
93:b0:75:d7:ce:67:6b:23:be:55:52:ee:f7:e6:b1:
e5:8c:c5:41:ab:e2:26:f7:1e:85:fa:1c:9c:05:31:
b6:3f:58:8f:a8:26:da:45:64:46:4a:7c:c6:d7:34:
b5:fb:20:46:f6:7d:8e:6c:e3:d7:a0:4d:e6:9c:9c:
51:10:50:db:ec:ab:a6:53:07:98:89:1d:b6:3c:8c:
e8:9f:39:d7:f5:b5:10:39:d9:1b:a4:b8:32:20:a8:
02:4d:ad:b3:e7:40:d8:6e:6d:2a:af:d4:ca:2f:4a:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:54:3A:C9:A4:AD:BF:16:02:35:78:A1:E9:6E:F2:E6:9C:33:A3
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5a:e9:0a:69:bd:93:dd:a3:94:10:26:df:6a:d7:19:26:f6:
c1:35:42:fa:d7:83:c1:bc:fc:61:df:27:aa:db:77:bd:fd:4e:
09:15:d6:e8:e0:f2:7d:a2:c2:01:45:ed:a0:60:11:97:c5:da:
59:ab:2a:46:1e:3e:c8:c2:d2:22:60:08:a3:49:a6:aa:a1:66:
90:0d:83:92:13:e3:f3:0f:17:08:5d:f8:5d:1f:87:7d:66:a2:
73:d3:aa:fb:6b:56:f8:e4:7b:d7:57:c8:8d:6e:e8:ee:3f:b1:
13:b8:57:30:d0:b3:67:bc:03:f2:25:32:a6:9b:f8:04:c3:e8:
59:c1:97:f5:83:cb:2c:2b:d3:8d:1e:27:4f:8a:76:8e:c1:6f:
61:ed:e2:9f:6f:94:f2:de:1e:c6:e1:88:00:0e:bb:30:ff:79:
c3:25:73:90:75:55:57:30:9e:f2:ce:4a:33:4c:57:7c:be:93:
6c:56:45:b7:2b:7d:c7:66:20:f5:96:be:11:9d:d6:47:5c:e5:
71:dc:06:f4:47:4b:94:7f:b2:cc:9c:a9:e3:ec:86:e0:20:df:
80:79:73:2e:0c:78:ce:3f:b3:e8:4b:fd:17:f9:ef:6a:3c:41:
9e:d4:2c:cc:38:ea:97:fc:9d:ae:ab:83:03:ae:e7:9e:38:f3:
b1:33:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:14 2026 by rpki-client