Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: UF7Mqrrfl8bspuKuwiKjY7UbPGCB+t9S3myAKQqOytc=
Subject key identifier: E9:68:05:9D:12:A7:DB:D0:6F:F6:72:93:1C:86:45:35:68:7D:13:CD
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019EC06DB5CF8B50DA3CAB5053455FA7F8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 109E
Signing time: Sat 13 Jun 2026 10:01:15 +0000
Manifest this update: Sat 13 Jun 2026 10:01:15 +0000
Manifest next update: Sun 14 Jun 2026 10:01:15 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: c9QtNoeGlxFjKRaCWNIidB1H59IjKMuyZm8N48GWSf8=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
3: kdld6jPS4h7qCb7yETrdIyonX4I.roa (hash: TsAE5GMjgX+T1Uu8DxhOV4EuhDXdBpOqPFL5SGq4GAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:b5:cf:8b:50:da:3c:ab:50:53:45:5f:a7:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jun 13 10:01:15 2026 GMT
Not After : Jun 14 10:01:15 2026 GMT
Subject: CN=e968059d12a7dbd06ff672931c864535687d13cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:87:97:63:00:40:1a:25:b7:e0:c1:8f:33:
e0:de:bf:bd:1f:66:87:48:24:4b:42:e6:2a:07:5c:
67:3f:99:6f:ff:21:2a:87:6c:7a:bf:40:29:34:56:
7b:6e:b8:b2:4f:51:24:ed:d3:d5:05:7f:0d:26:7f:
c3:16:f1:bd:9e:e7:44:d3:d2:de:f0:12:4d:3d:b8:
6c:e6:60:dd:71:f8:98:5d:e9:64:2e:a9:b0:7e:c3:
36:b4:62:c0:a9:43:db:90:d1:54:cc:7c:3d:03:52:
3e:bd:82:b6:5f:8e:95:f8:5c:c4:a7:43:15:c7:20:
65:fa:02:48:85:17:ed:ef:11:86:9c:38:db:ff:df:
35:5e:93:13:c3:03:7e:17:b0:95:e8:a6:80:3d:ce:
1a:eb:0f:1e:02:aa:50:27:7e:8c:ba:d7:21:93:d8:
de:65:ae:4b:af:d7:5e:1b:95:af:be:d3:55:00:1b:
1a:80:1b:82:f8:ea:3b:f1:e0:d3:1c:72:34:c6:f0:
c0:f0:5e:d2:02:54:d9:df:70:d6:25:2e:0f:3e:f0:
91:4d:f7:e3:7d:f0:91:91:5c:29:78:8c:f0:73:e6:
97:70:ef:7f:f3:00:9c:0d:7d:2e:85:c8:c1:58:2e:
7a:4a:60:80:a8:21:7a:37:4c:b0:e5:2a:d1:d6:41:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:05:9D:12:A7:DB:D0:6F:F6:72:93:1C:86:45:35:68:7D:13:CD
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d2:c4:c8:2e:81:4d:77:ed:b3:6d:63:dc:70:ea:06:a2:7c:
ad:67:99:92:3f:79:15:b5:74:99:fa:40:ea:70:93:33:0b:3a:
1e:a9:02:e2:2e:78:1e:3a:c8:94:b7:61:bb:16:4b:f2:50:e0:
0e:bb:9a:12:01:17:8d:8b:35:71:9b:9d:e4:0e:4f:43:cc:36:
85:89:96:20:d5:15:47:4b:53:36:90:5e:ef:5b:c4:07:3f:c6:
0c:68:50:1f:ee:88:f2:5c:bc:70:48:2d:8a:ea:99:e7:a3:34:
e9:bd:d7:11:f1:fb:07:6d:78:84:f2:3a:7a:d4:f4:f0:cd:16:
e6:76:41:c8:be:45:82:0b:e0:b7:40:7a:27:70:ac:e9:91:96:
5a:5c:2a:ca:d8:0e:33:17:51:b5:4b:c5:fe:f8:ce:d3:33:fd:
8a:46:94:bc:4b:6b:96:a4:66:92:e2:e6:68:8d:5c:93:5b:e6:
66:bc:18:74:39:f0:7d:64:03:e4:16:d0:9b:07:ab:c4:0d:7f:
66:6e:16:74:73:97:d2:54:e6:fa:03:22:9b:2e:aa:06:cb:33:
7f:3b:54:6c:4f:23:e5:db:ae:f1:95:40:b5:ce:0b:47:5d:e4:
27:c8:e4:cb:e5:dd:45:16:4f:98:12:2a:b2:e8:f6:40:f8:78:
9a:75:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:21 2026 by rpki-client