Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: vX3+HubCwWtFwaSQbUptAfgpjvcOw8kvxV3tOIv6R98=
Subject key identifier: 2B:D6:9B:33:84:F3:A5:88:EF:37:CA:FC:23:3E:7C:4A:56:79:8A:45
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019EC2929C231414A869FE7319802DB5874C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 0211
Signing time: Sat 13 Jun 2026 20:00:48 +0000
Manifest this update: Sat 13 Jun 2026 20:00:48 +0000
Manifest next update: Sun 14 Jun 2026 20:00:48 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: gUDVMFgVaMo0gGiM4PbfJ8P5IeiCxBXuWs0ZsvSvyfo=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:9c:23:14:14:a8:69:fe:73:19:80:2d:b5:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Jun 13 20:00:48 2026 GMT
Not After : Jun 14 20:00:48 2026 GMT
Subject: CN=2bd69b3384f3a588ef37cafc233e7c4a56798a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:9a:b2:94:a5:ec:0c:23:ac:e6:ec:5f:d3:
0b:e6:69:3c:f5:96:7f:89:45:5e:15:d3:e8:f3:6a:
62:34:00:10:cb:f6:03:66:e3:8d:69:8f:5e:83:48:
82:10:02:e6:0a:59:38:51:8e:a1:53:b2:53:e8:72:
73:1b:92:8d:3e:db:28:24:f0:37:12:b5:a7:12:b3:
e2:5d:d1:ae:5b:52:2b:8e:f6:71:d2:79:2f:ac:8d:
61:cb:81:29:13:0b:60:87:6c:94:78:22:be:b8:05:
79:ef:d3:a8:8d:43:43:6d:da:fb:e3:04:4c:63:52:
4b:0a:37:9d:40:ea:0c:61:98:4f:73:2d:98:26:84:
9e:32:f1:54:49:88:a5:12:99:27:45:9c:df:d1:97:
2d:65:7c:46:2b:36:58:42:08:55:ed:da:3e:9e:09:
d3:96:0a:9c:12:56:1a:28:99:bc:08:05:d8:d2:60:
d3:ad:db:ff:4d:97:f4:93:4d:68:12:35:bf:ab:fd:
c4:1c:c2:20:11:6a:9b:f9:cb:ee:5f:8f:86:c3:0a:
08:5a:91:ef:14:62:12:10:74:ef:11:a7:97:89:c0:
22:2d:93:b8:52:5f:f5:ba:3b:25:70:2c:17:38:f0:
ea:8b:24:c3:0c:48:22:45:55:06:13:ae:82:25:2d:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:9B:33:84:F3:A5:88:EF:37:CA:FC:23:3E:7C:4A:56:79:8A:45
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f0:01:58:41:a7:c0:5c:30:ef:bb:4f:55:d5:c2:88:d8:7b:
67:a1:d4:26:55:0f:e1:97:99:44:5f:49:5f:be:a8:be:d8:bf:
0b:9e:d1:6b:b7:f6:c1:b9:6b:1f:33:dc:6a:16:ce:a3:ae:82:
b3:9b:89:39:c0:98:78:f9:2c:c3:d0:c8:a7:fc:79:b0:d7:4b:
27:3e:00:92:0f:01:96:c3:8c:7a:71:22:88:e1:ee:e3:a1:fb:
2c:c4:77:02:03:6c:5d:25:0b:b7:25:9d:46:ab:eb:9c:4e:62:
e3:cf:82:a3:c8:21:0c:f5:90:be:de:2c:2a:f1:8f:87:cd:06:
07:11:c2:71:03:70:e6:a0:b5:43:36:3d:07:9d:af:d2:a7:b3:
89:87:cc:90:c0:d3:17:c6:f0:88:1a:56:2e:c7:5c:29:b8:30:
bd:0f:33:ab:bc:b5:ac:fe:d9:83:bd:0d:b5:d4:fd:a1:24:5c:
3f:81:89:45:b4:71:dd:eb:fd:71:80:e5:c5:6b:de:49:b7:67:
1d:21:85:86:2a:66:10:69:ae:86:b2:25:ab:84:d7:76:0b:7b:
b6:ad:8d:31:89:b1:91:06:af:58:7c:58:5c:d9:6a:1c:a0:da:
23:9a:d8:a5:c4:5c:ea:98:b4:2a:57:0f:05:bc:a6:75:f0:a8:
25:86:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:19 2026 by rpki-client