Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier: 1LpOgMWZd87QhhFLInhwWXnfBk621W02f7BQ6pKWS/Y=
Subject key identifier: 1A:A9:E9:DA:37:43:78:02:BE:61:98:CA:34:90:7F:0C:B1:11:12:D0
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 019D99993F37E59A0E2D39576B01AA08B479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number: 0E90
Signing time: Fri 17 Apr 2026 04:00:50 +0000
Manifest this update: Fri 17 Apr 2026 04:00:50 +0000
Manifest next update: Sat 18 Apr 2026 04:00:50 +0000
Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: oJz6fAtqiiJdnfvOwHlf4Vv348ekzSz3RTzfPzmdRcs=)
2: 4FYy4IVc0E0edu7Aspaqd269s3k.roa (hash: AewBAICqPk/AoyYo2Nui0QpeK5+BqYlSJNp/7pYYLxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3f:37:e5:9a:0e:2d:39:57:6b:01:aa:08:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Apr 17 04:00:50 2026 GMT
Not After : Apr 18 04:00:50 2026 GMT
Subject: CN=1aa9e9da37437802be6198ca34907f0cb11112d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:30:84:e5:07:0b:91:72:fa:85:a2:8e:a3:
ca:e8:64:b6:0c:b9:04:1c:24:c3:4b:93:34:69:ba:
0c:c5:64:d2:de:22:23:e2:a9:c4:f3:15:55:70:be:
6c:e9:04:35:2c:39:99:b7:41:b7:6a:5a:a4:1f:24:
39:8a:34:82:fb:c1:e9:ea:91:14:73:33:df:27:2a:
d3:5a:df:30:fb:56:74:8b:62:ed:44:af:1c:0c:db:
9b:f0:56:19:0d:a7:35:c9:a5:1d:d7:40:ad:10:c7:
c6:bc:92:38:73:3c:8d:16:eb:f2:66:27:c1:7b:f6:
96:d0:3b:59:5b:97:a1:f4:c0:ba:8f:d7:25:8d:81:
87:6e:51:fc:fc:50:4f:41:d0:79:08:c6:c4:f9:1f:
2c:9a:7e:39:7d:8b:bd:12:fe:d0:1f:cc:a8:4f:f1:
1a:71:73:5a:38:55:3e:8a:aa:d0:0d:a4:84:60:46:
0e:aa:8c:2f:59:2e:5f:3c:c4:9c:6f:b5:65:ac:ee:
c6:92:a3:be:43:19:e2:ad:ff:06:8d:10:c3:e5:46:
87:7c:e7:29:fb:f7:86:bc:46:01:e3:34:88:ff:62:
95:56:54:5f:bd:ff:c8:6f:ee:01:66:f5:5c:59:5c:
3c:68:ba:a8:1b:b7:18:e9:30:2c:cf:15:75:d9:4c:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:E9:DA:37:43:78:02:BE:61:98:CA:34:90:7F:0C:B1:11:12:D0
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0e:10:48:c9:99:24:c1:e7:e2:01:79:e9:90:e2:55:7e:4e:
7d:f9:3e:d4:0a:79:e6:20:34:d7:84:41:0b:a5:c0:7e:fe:bd:
cc:b6:2a:37:b9:3b:86:1c:d5:63:43:74:04:a8:9f:eb:e2:65:
cb:eb:50:9b:ca:87:2b:74:63:d3:b2:98:4f:14:31:e4:30:df:
c8:56:79:06:ae:af:53:a3:c4:2d:79:eb:6f:2a:9d:c4:1c:62:
1c:74:30:e5:4f:89:f4:35:c4:c2:38:cd:41:56:70:ae:7f:3f:
ca:31:59:da:fc:09:3f:47:b3:9d:fb:9d:38:42:cb:72:c9:e9:
94:87:9f:68:ca:56:67:eb:dd:5f:dd:93:aa:4c:da:ac:2f:0a:
d4:08:34:96:9d:8d:74:be:d7:af:63:c4:ef:ed:9b:53:85:01:
6e:cf:b9:1a:15:59:4c:d8:e6:f3:de:ef:89:c4:97:b5:b9:c8:
7a:55:14:1b:08:a5:9f:9e:62:d3:f6:3a:23:41:15:98:30:39:
f4:2c:02:3c:b8:43:dc:c6:14:5c:8f:d3:f4:57:75:ad:8a:95:
dd:c4:64:2a:6f:02:f7:c4:e0:2b:ea:b0:32:d7:99:92:e2:4e:
c5:68:49:b3:cc:9d:7e:d7:89:72:fc:da:b3:14:23:ce:55:de:
ea:98:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:06 2026 by rpki-client