Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: 5GmfmuTsJL4yeTHuwEb+gHqUuD0AGlG2XLYzF29/LmM=
Subject key identifier: C8:94:EC:62:5F:D9:0A:59:65:73:76:9B:F4:EA:75:91:0D:87:C3:6F
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019EBE7ED77D7D5B5EF0C00FD0EBD385B9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 01:00:44 +0000
Manifest this update: Sat 13 Jun 2026 01:00:44 +0000
Manifest next update: Sun 14 Jun 2026 01:00:44 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: rsmQpj7SKcypXzaO8esf/1vy9Y9PtHeQDbiY9naW9KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:d7:7d:7d:5b:5e:f0:c0:0f:d0:eb:d3:85:b9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Jun 13 01:00:44 2026 GMT
Not After : Jun 14 01:00:44 2026 GMT
Subject: CN=c894ec625fd90a596573769bf4ea75910d87c36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:24:bc:98:5e:1d:94:8a:22:7e:9d:90:0e:
0e:7b:a8:84:46:da:35:87:3d:83:00:6d:0d:4f:b5:
43:14:71:fa:eb:42:4f:a9:b9:19:c7:3d:88:62:dd:
29:03:b3:e5:37:c0:1c:af:48:aa:a6:f4:77:5b:1a:
b2:73:71:99:1a:68:31:12:3c:7e:5b:07:2b:9b:dd:
a1:e9:3c:16:c8:b9:3c:bf:17:35:79:b3:58:cf:8b:
42:df:2a:f1:a2:e2:68:58:88:76:10:51:ae:f0:88:
a7:62:a1:84:99:9a:be:26:14:1b:f1:35:cd:88:9f:
bb:90:52:d0:1a:37:e8:80:8e:36:44:4a:bf:e5:95:
04:d3:84:c4:84:fe:b5:e3:e1:13:b7:d5:34:66:92:
13:7d:70:68:74:10:2e:0a:d3:b6:29:93:b9:dc:17:
d7:fb:41:16:b5:ff:53:49:59:88:40:b8:ed:a0:16:
a5:7d:c4:37:87:da:3d:6f:67:b8:89:a7:81:39:92:
15:72:6d:65:7d:b2:a4:46:34:67:11:d3:f0:a3:f8:
ac:90:ad:4e:97:89:33:a0:aa:61:d8:dc:e1:85:59:
a0:f7:c5:50:3d:62:65:d3:dc:aa:41:6a:b5:7c:67:
59:bd:84:ec:13:08:c6:bf:55:26:f7:ae:9a:9b:52:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:EC:62:5F:D9:0A:59:65:73:76:9B:F4:EA:75:91:0D:87:C3:6F
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:07:fb:c0:b5:ef:ab:cd:74:1e:5b:25:04:c8:6b:c6:41:
c3:81:a7:76:dd:40:db:d7:a5:f2:39:42:44:30:f0:86:56:6b:
6a:d0:81:54:ef:e8:0f:6a:22:87:0f:65:fe:f7:2f:03:81:e7:
2a:9b:91:1a:d2:04:bd:5d:1e:0c:b1:27:26:4d:6c:84:9f:a7:
a8:61:f2:15:a3:c3:90:19:1e:ab:e1:88:d9:f4:9e:0e:3b:dd:
dc:5c:1f:40:86:44:1f:11:09:e8:81:af:4a:de:14:35:4a:9a:
6d:92:e7:de:b8:13:da:85:a9:8a:39:e0:0b:86:0f:22:51:18:
8a:88:53:c8:19:fb:d5:0e:ae:ff:0a:a1:62:19:e6:1d:7d:10:
77:6e:9c:bb:d4:31:4f:0e:f6:69:2e:68:64:f0:87:47:75:bf:
8f:7e:0b:a3:35:1d:1f:0f:cd:8b:93:70:16:d2:c8:bf:54:78:
82:fc:3e:e0:9b:c5:a4:60:e3:c2:33:99:aa:de:dc:cf:29:bd:
f3:16:7f:0a:05:c1:f4:c3:79:7a:46:63:bd:0f:2d:0e:62:11:
b0:1d:ff:f8:23:0f:59:3f:9f:76:8a:71:3b:2f:a0:3c:6c:2e:
74:ed:8a:1c:1c:e3:b6:c4:13:c8:78:90:b7:7b:ea:b4:6a:eb:
b1:78:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:49:06 2026 by rpki-client