Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: UNS+Dpq+YMvwi/2cr92MXwZJjO8W2QWshqDdzF7yd5g=
Subject key identifier: 17:49:22:4D:D8:06:1D:1E:55:10:02:4A:67:1A:CE:E4:F9:4A:27:8F
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019D9962F8A68BE0F1D774E04D8B3FD85097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 0BEF
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: VWRcxScqAaSFEytWt92o0EviHhQmAuf2M3P3wokoQrw=)
2: TuF1yyTgBJhW6oC5dwAW2GS084g.roa (hash: TcfD3AosMJkeleoYgBuUrwlWZpCWe+Rbnmh9egzYaWg=)
3: _PXhlZCjQvwPQ3-H5--9ECU2Un8.roa (hash: +OxXVp7CCvXwGvmdylv8hYCUGBTiCJtYUdC1nBHjCGU=)
4: _pYuHGnsXKSnuT_0ZwV2iiEMi1E.roa (hash: ny8lfBvrkBHpb1XCyCXenoAPEghxPUTrkFH2Hz37dHc=)
5: fTPd9h70qbE4IDomqVhRl5Z6tXY.roa (hash: kJtRZt0jq1rkxlKv4aSYJNr1yYR0AREk7KSe3ox5v1s=)
6: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (hash: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=)
7: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
8: sblOD2Vnvdytv3EIv9Vs60T4k3I.roa (hash: U7h62eJV7fkX1a8W7lVZLKsNdCq8SUyqds6Fc3ndSXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f8:a6:8b:e0:f1:d7:74:e0:4d:8b:3f:d8:50:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=1749224dd8061d1e5510024a671acee4f94a278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:9c:f8:a2:1b:57:3f:8f:14:0a:00:10:c3:
22:f7:42:0e:a9:95:ad:3b:e5:a8:63:51:8a:c2:5f:
f1:3d:cc:86:db:7d:3f:5a:a9:b6:50:ae:30:29:ba:
d4:be:d8:32:cf:27:0c:11:92:e9:5d:98:6a:5d:88:
75:e7:a1:9a:07:50:da:ae:96:64:0a:ad:51:c0:39:
1e:5a:db:8a:6d:ed:dc:84:b3:03:5f:e4:ae:cb:aa:
ac:f2:37:3f:81:55:fb:f5:a2:26:ca:03:fe:b0:a6:
88:78:d7:3d:a9:a6:ce:e4:12:01:74:2f:a5:69:c8:
c1:4d:bb:2d:d5:63:86:4e:cf:75:fe:8f:4f:3a:9b:
c8:18:e0:b5:49:75:4f:d6:7a:68:0f:96:22:ac:d9:
98:3b:06:1a:97:68:d8:40:1c:3b:24:d6:4a:b4:d1:
10:38:44:8a:15:8a:90:80:0f:88:d8:6a:8b:c0:61:
3c:bc:3c:d0:29:c7:d0:02:f8:d5:32:99:36:c2:3d:
8a:cd:97:43:e4:57:be:af:36:77:e6:15:40:47:e9:
eb:cf:2e:03:e9:bf:18:56:09:7c:e6:28:e4:9b:96:
e5:04:2e:53:0d:2e:13:b9:71:7c:1b:4d:15:dd:6a:
42:ba:d6:41:3f:ae:b5:17:59:b3:6b:fb:cb:15:14:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:22:4D:D8:06:1D:1E:55:10:02:4A:67:1A:CE:E4:F9:4A:27:8F
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c6:7c:f6:ef:08:45:08:a0:75:d3:8e:19:d1:4f:39:7c:97:
38:1d:22:22:79:43:46:95:ee:6e:5e:16:c9:26:14:99:cb:db:
ae:0b:00:5e:74:62:79:37:8f:cd:4d:63:d1:df:cc:6b:e2:8a:
9d:ef:35:9b:ed:ed:fc:85:fd:10:de:48:ca:03:cb:6a:7f:67:
e1:65:ec:c0:b4:e9:95:37:25:59:dc:db:a3:b3:96:51:17:35:
b5:ac:32:29:bb:64:43:1a:2a:a8:20:93:a8:5f:45:bd:c9:1d:
85:b8:7d:ec:04:12:6f:4f:33:88:7f:62:bb:37:6e:05:c8:d3:
03:59:de:76:88:c3:1e:df:ae:73:78:2a:d8:84:03:93:c3:33:
0b:52:84:6d:88:91:28:53:f0:0c:fc:e1:30:07:be:02:31:f5:
db:6a:87:10:09:20:79:33:1c:45:8d:52:61:dc:af:96:2b:50:
d4:fe:a6:43:6c:ab:c1:37:7c:4e:0d:84:dd:64:07:e8:64:0a:
84:2e:27:3e:db:c3:a5:27:9e:87:5d:21:bc:12:7c:15:62:48:
6f:bc:e3:2b:fa:91:3f:81:e6:5e:14:a1:e2:d2:7f:d1:0e:52:
20:01:93:80:d2:42:4c:c7:b2:45:b3:c6:95:da:8e:0a:82:bb:
ff:fc:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:09 2026 by rpki-client