Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: eo+Bn3U7swcVGTArWRfxdlqFkT07k1jh1+jsnz/43OE=
Subject key identifier: 9B:38:AB:86:05:B1:17:DE:2A:9A:C2:F6:CE:10:64:EF:8A:82:E1:BE
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019D99990917C1E0D0FA764C6FCB78F0119A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: raQVnoius5YaUhSDrS6viXefRI7WFQjhfoOuaRVKb8g=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:09:17:c1:e0:d0:fa:76:4c:6f:cb:78:f0:11:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=9b38ab8605b117de2a9ac2f6ce1064ef8a82e1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:6c:bc:6b:6f:f7:4b:99:f4:32:43:0d:fe:
27:0b:55:a0:99:e5:f5:bb:21:d8:5e:06:9d:79:0d:
98:6d:91:7e:2f:a3:5d:0a:d6:d9:b2:ce:a0:17:bb:
d4:2f:c3:5d:46:df:4b:ff:fd:3d:82:f8:bd:36:8f:
7a:2a:82:69:ed:f1:c8:21:c1:9a:15:66:00:ba:6e:
82:db:a8:d3:2f:23:22:8f:d4:87:c6:96:dc:c5:e4:
08:cd:c2:c5:a0:d9:56:5a:22:e7:68:b0:d2:25:f6:
61:90:f3:fa:47:04:0b:9d:02:0b:60:51:18:9e:f0:
f8:65:76:b5:df:fd:8b:7a:0e:0d:06:fd:f5:69:b2:
59:42:b5:ab:c5:7d:04:2e:b1:e3:8f:fe:cd:08:dc:
14:c3:b4:be:a5:9e:2c:48:98:70:55:4d:c2:61:88:
1f:6c:30:22:8a:29:12:04:fb:a0:64:95:73:85:cd:
d6:3d:d9:fc:e2:ef:e2:ec:cb:bb:86:81:5d:d5:d5:
2b:30:63:be:66:32:58:01:ed:18:31:21:0d:5e:fc:
bb:fb:61:e6:66:16:c3:4a:6a:8d:7a:3a:09:f9:04:
26:20:f2:fc:9d:5a:17:f4:b8:17:53:b4:b4:6f:1e:
94:5f:a5:05:5a:4f:c5:2e:3a:06:73:66:0a:27:33:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:38:AB:86:05:B1:17:DE:2A:9A:C2:F6:CE:10:64:EF:8A:82:E1:BE
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d3:2b:57:ae:0b:93:eb:a8:c2:19:f1:62:26:6c:5f:ba:87:
82:7d:24:9f:ee:9b:85:17:c6:ce:12:81:5b:19:9b:73:39:57:
5d:de:eb:42:20:d3:fe:c1:5a:f6:0a:98:a5:e0:6c:fa:87:de:
84:d2:df:ac:60:60:70:da:3c:e9:3d:58:f0:fd:ee:0d:76:f5:
a6:86:82:bf:fd:b1:03:5f:08:38:9e:5b:bf:ce:7d:1e:df:e5:
2e:8f:69:3d:df:5f:67:14:1c:c4:da:38:cb:dc:19:23:1f:f8:
46:07:43:34:44:bd:6e:ea:61:c4:7a:4d:5e:f1:25:4b:c3:93:
a0:ee:06:91:eb:00:34:5e:a6:4e:87:8a:06:5f:1e:e9:32:22:
16:21:40:8b:e5:cd:07:db:df:3f:70:6e:58:f8:fd:d1:ec:04:
46:58:64:0c:6a:7a:cf:83:30:82:bd:1b:79:68:f9:97:2b:58:
1e:4b:ac:c6:c9:f1:3f:3b:f4:95:68:08:d9:27:27:99:22:34:
e8:76:5b:60:38:db:19:e2:01:59:cb:66:ab:48:49:64:47:a4:
f8:a0:32:e7:4c:83:50:b8:d7:01:27:a2:39:cc:97:f8:2a:0f:
e7:41:ae:61:15:e8:f6:d0:19:ea:dd:ae:8b:5d:a2:99:60:ff:
ca:59:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:44 2026 by rpki-client