
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: 7NFXfj+OHOna06w9w2XAGor9GP3ER5qIpxA9UwsVc5s=
Subject key identifier: 6F:BA:63:04:21:77:75:FF:C5:2A:95:2C:C0:6B:0E:45:77:CB:BC:C2
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019EBE477A4DE4B57DB54D2A436D651FA4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 10A0
Signing time: Sat 13 Jun 2026 00:00:15 +0000
Manifest this update: Sat 13 Jun 2026 00:00:15 +0000
Manifest next update: Sun 14 Jun 2026 00:00:15 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: MgocwzU2TGDnZM6B+eyDqkcvIQzIB70uwQ/RDHUclTo=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:7a:4d:e4:b5:7d:b5:4d:2a:43:6d:65:1f:a4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jun 13 00:00:15 2026 GMT
Not After : Jun 14 00:00:15 2026 GMT
Subject: CN=6fba6304217775ffc52a952cc06b0e4577cbbcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:f8:92:bc:c3:43:c2:a6:52:02:ea:15:d5:
b5:92:4b:e4:41:b3:2e:30:59:62:0e:98:e3:9d:aa:
55:a0:87:a7:1c:a8:46:f7:fa:fc:20:2f:c4:77:fc:
01:34:90:de:77:51:32:30:0a:b1:c5:a8:6e:dc:fc:
b7:74:c1:cf:de:b5:2f:18:3d:b8:93:75:fb:62:b8:
85:f0:7a:d5:13:d6:5f:ff:4a:c9:a4:5a:60:ea:10:
51:f5:de:2f:56:82:7f:2f:90:e5:90:17:fe:f7:fd:
04:c6:47:1b:b8:fe:20:bd:bd:ef:e2:bf:a1:7e:04:
3a:88:69:04:5b:6e:f1:53:a1:5c:68:69:98:6a:5b:
15:3e:c8:12:98:91:9d:7e:81:3e:07:ec:43:c1:6b:
da:91:ab:8d:75:d4:01:6b:db:8a:e0:db:8a:fa:3d:
b3:4a:71:85:ff:f3:22:79:81:4a:b1:d2:47:aa:7d:
9d:aa:88:4d:3c:83:9a:7d:e3:3f:6b:7e:f4:e0:3a:
bb:04:89:36:ac:b8:b8:59:32:fb:41:89:b9:fd:22:
2d:03:a8:d1:e6:20:2c:13:d7:ac:d7:69:2f:37:64:
d7:f6:94:db:8a:16:88:b8:cc:6d:d5:50:56:ec:5e:
e4:86:d1:cc:9a:b1:14:6c:15:18:37:e5:2b:16:f7:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:63:04:21:77:75:FF:C5:2A:95:2C:C0:6B:0E:45:77:CB:BC:C2
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:05:12:17:7e:2a:31:c3:43:97:2f:6b:b1:d3:75:3a:0f:
5c:85:54:9f:e1:63:92:03:71:72:0e:24:28:cf:cc:91:4d:42:
1d:d9:f8:a2:d3:55:b1:8f:06:02:1b:3c:14:c7:a0:03:f5:29:
ec:2b:86:de:33:28:bf:b9:21:59:0d:fd:2c:9a:07:a0:e4:91:
2f:bb:da:fc:17:37:ef:92:b6:c1:59:0c:f8:0a:f4:ed:8f:a3:
da:81:5b:ec:08:be:d0:3c:d0:82:40:1d:98:23:21:b7:10:25:
9e:53:0c:ac:bd:4e:0d:df:8d:50:ca:5b:28:f9:52:67:e1:39:
d5:4b:e5:3b:8b:39:11:b8:ee:07:8c:3a:fe:5c:fe:fb:53:e7:
31:15:e3:02:8b:89:01:c1:9a:3c:c0:d4:3f:95:b0:00:ea:9c:
27:e6:3c:7e:c3:cd:b7:18:fc:34:27:3d:9e:7d:a7:fd:e0:7b:
c7:6f:bc:fd:98:ff:81:c6:fe:88:af:ff:f3:07:5c:57:c9:56:
de:a6:13:d2:e5:41:4b:69:8e:1b:77:e5:c4:d2:04:cd:d4:3a:
f2:51:d3:99:ef:78:70:01:e3:24:39:81:2a:e0:ad:6c:ca:a3:
2c:80:0e:e7:fa:3c:c2:5c:2d:65:f3:71:04:86:7c:06:42:21:
58:79:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:15 2026 by rpki-client