Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: OoTJx+kY0E0Vg4UxubaX3NT8jJIR6OI5unT968LTAFY=
Subject key identifier: 99:54:59:B7:A5:0D:12:58:65:09:57:71:82:59:B4:A9:5E:B6:A5:22
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019D98BD55BF18DD417185B0B51D57559516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 1008
Signing time: Fri 17 Apr 2026 00:00:38 +0000
Manifest this update: Fri 17 Apr 2026 00:00:38 +0000
Manifest next update: Sat 18 Apr 2026 00:00:38 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: IMOjHr+zI/VkoFRuVxUBWA6yH1hSFmAj0I7uX4ytBZ4=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:55:bf:18:dd:41:71:85:b0:b5:1d:57:55:95:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Apr 17 00:00:38 2026 GMT
Not After : Apr 18 00:00:38 2026 GMT
Subject: CN=995459b7a50d1258650957718259b4a95eb6a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:c3:fb:a2:d4:c6:42:37:80:59:36:64:74:
1f:8f:28:19:0f:50:ab:4f:39:e3:54:28:c6:64:6b:
4b:fc:fc:a9:83:db:65:d6:2f:e5:55:ac:57:7f:d0:
5b:8b:9e:8d:e5:af:0d:98:3a:c5:da:e5:74:41:1b:
4f:ec:b8:ca:95:60:24:29:b0:5e:64:a6:b6:4d:d7:
f1:ad:16:34:7e:f1:72:f9:52:65:08:68:c9:11:c8:
43:8e:9d:41:ec:f4:12:d6:46:8d:16:60:86:19:87:
6e:f2:07:f8:50:d0:81:b6:a3:40:87:b6:cb:e1:fe:
da:a9:90:2c:49:4b:da:1d:e7:cb:f7:bb:75:b8:7f:
00:cb:e3:e6:eb:16:ac:8c:e8:de:9b:25:e3:57:42:
31:a3:a8:2e:e3:4f:7d:1c:76:60:b6:a8:33:18:72:
dd:9d:4c:53:60:a6:65:5c:1d:be:0d:d0:1a:48:49:
cf:ae:1a:e2:e7:b6:18:6d:e9:32:6f:5d:cb:9a:13:
c5:38:b3:65:3d:75:1d:d7:20:ec:a0:e0:a0:e1:f0:
85:93:6e:72:a5:e3:b4:55:68:0a:1c:01:a3:9b:de:
e7:24:e6:28:7f:e8:7a:16:b5:f1:27:7b:9f:ff:58:
c2:97:1f:d9:a0:df:39:59:48:9c:38:5a:12:64:37:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:59:B7:A5:0D:12:58:65:09:57:71:82:59:B4:A9:5E:B6:A5:22
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6a:cd:80:d3:cd:d8:85:5a:79:6a:28:82:b1:b8:d4:83:b1:
fb:c9:90:d2:7d:a7:fe:78:10:a3:59:af:29:09:82:dc:9e:c9:
b8:87:db:da:cd:a4:15:17:f9:39:8f:d8:e5:39:b7:7a:96:6c:
44:59:f5:82:cc:87:c5:1d:86:cc:e2:dc:e8:c2:e3:4e:a7:14:
ae:e4:1a:8e:4c:ed:6d:44:ae:9f:eb:a9:1a:bf:76:8e:b3:71:
86:cd:d6:1c:35:ee:30:fc:30:2e:a2:70:60:31:b7:48:15:1e:
30:a9:ec:61:56:35:1c:26:34:89:43:60:54:bd:76:e6:ff:68:
61:bc:a1:cf:78:d2:7c:64:d0:49:9a:e5:0b:d4:fa:13:b2:a1:
f8:b7:65:aa:e5:3a:80:63:15:37:be:3e:d5:a4:33:be:9f:ed:
b4:a5:a3:0d:c7:dd:64:81:c0:58:38:43:1a:8c:c6:ae:0c:f9:
18:47:91:8e:00:40:5e:01:fd:f0:48:72:0f:18:3e:af:a6:5c:
f6:7b:21:69:bd:76:41:55:b8:9b:98:5b:39:92:fd:82:71:91:
cb:ea:5d:bc:50:87:f6:dd:62:b5:3d:03:79:3c:37:89:a2:46:
68:53:80:fb:b6:c2:55:00:ad:32:4d:58:14:0d:e4:33:99:f6:
8f:2c:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:54 2026 by rpki-client