Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: knDiz/T9ZKwVT5NmV019QunW0DUrMBqWPNxOZUg+Xlc=
Subject key identifier: 8F:34:C7:06:DA:A8:9A:C2:B3:90:83:34:CF:E7:8C:44:FB:30:63:F3
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019F9135E980C308D262838AC11739A8B5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 14A3
Signing time: Thu 23 Jul 2026 23:00:57 +0000
Manifest this update: Thu 23 Jul 2026 23:00:57 +0000
Manifest next update: Fri 24 Jul 2026 23:00:57 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: HWztNYtseWdvrV6ItwKgmKKCAimbgZj9okcixckXfBA=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:e9:80:c3:08:d2:62:83:8a:c1:17:39:a8:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Jul 23 23:00:57 2026 GMT
Not After : Jul 24 23:00:57 2026 GMT
Subject: CN=8f34c706daa89ac2b3908334cfe78c44fb3063f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:e0:d3:28:db:b1:59:4d:8c:f2:55:9e:e0:
d2:63:bb:5e:62:8f:70:51:08:08:f3:82:f2:80:1e:
94:c1:79:ad:bd:4b:33:17:e9:38:15:61:aa:b9:45:
9e:96:fd:66:d0:4d:5c:23:cd:8b:9f:a7:be:9d:cb:
7d:a4:00:a6:1c:05:28:82:31:92:ad:2c:2f:62:80:
d6:39:3b:a9:ba:87:2a:13:54:89:70:00:3d:93:ed:
ac:b7:2b:d5:8d:70:27:36:95:1d:c6:df:b8:17:86:
0f:46:69:26:e5:68:c3:24:30:a4:ab:19:51:f3:d0:
4e:4d:83:7c:2c:b9:d0:e0:67:7c:99:1e:4d:94:61:
77:1a:ee:ba:f6:72:0d:4a:13:76:4e:c0:16:ae:83:
4e:58:52:5d:52:ec:21:ec:28:fa:9b:84:16:77:8b:
7f:07:ed:a3:f1:ec:22:3c:9e:31:db:31:19:a0:28:
c6:2d:d4:86:e8:85:2a:0d:bb:ef:c6:4c:08:60:9f:
f2:48:d7:83:d4:bf:ec:83:93:50:9d:df:1c:92:cd:
78:5c:d3:cf:f6:36:52:68:c6:c0:b7:84:2f:31:0b:
6c:a6:2d:45:52:76:7e:4d:fb:43:8a:12:9a:1f:d8:
22:9c:7e:c5:46:42:7e:f2:db:6f:44:ef:2b:bb:bf:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:34:C7:06:DA:A8:9A:C2:B3:90:83:34:CF:E7:8C:44:FB:30:63:F3
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c1:bb:28:1c:85:e1:88:3c:f8:71:5a:c8:ac:90:be:2d:ab:
bb:03:8d:c0:f2:9d:71:98:b2:21:62:93:f2:62:75:6c:0e:e1:
d0:34:92:93:10:00:0e:78:ee:51:ef:23:20:c9:a2:3b:68:d4:
5b:6b:85:02:aa:d3:4e:83:af:56:07:80:0d:61:64:7e:75:a7:
5d:ef:51:ee:57:56:57:45:9a:9b:33:b3:cc:cd:e5:d1:e9:f4:
9c:5d:51:ea:15:34:31:a7:5b:5e:86:7c:da:ca:d4:b8:50:ab:
ca:69:f9:a8:e5:85:cc:4c:38:6c:d5:fd:df:88:51:07:bc:5d:
21:e8:08:c4:53:bc:4f:1b:89:96:79:c1:35:0a:0c:77:a9:17:
db:4a:19:c2:96:c8:db:8c:d3:af:d6:d5:b7:33:3d:22:5b:17:
37:9c:d9:20:6e:b3:7e:fb:f4:19:10:29:d6:53:cd:d5:28:9d:
d1:28:0d:22:5b:aa:c6:eb:4a:2d:b1:19:7e:0a:9f:9e:81:29:
b7:94:78:32:bd:22:48:9b:49:6b:d6:97:c7:04:7e:2b:9c:23:
da:a7:16:f3:25:8b:39:00:11:66:fb:ef:fd:c7:c9:4b:7a:8d:
b9:ac:71:69:42:d0:29:40:e7:45:96:9c:0a:f0:6c:e6:7a:5d:
d0:09:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:54 2026 by rpki-client