Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: hYk2niXwxbkyaW3SYugbhusv3kIOUUTNOugTVUUozrY=
Subject key identifier: 84:AA:7B:56:32:5A:81:FD:BD:70:19:0D:50:0D:79:E9:42:56:01:26
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 019F8FEC114ADE3F0C0E64E495EBA069F2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 0807
Signing time: Thu 23 Jul 2026 17:00:40 +0000
Manifest this update: Thu 23 Jul 2026 17:00:40 +0000
Manifest next update: Fri 24 Jul 2026 17:00:40 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: Rb0U6QlkvBgnRy8ceRKxC66PXwTfJDsYK0M+3xRtGCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:11:4a:de:3f:0c:0e:64:e4:95:eb:a0:69:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Jul 23 17:00:40 2026 GMT
Not After : Jul 24 17:00:40 2026 GMT
Subject: CN=84aa7b56325a81fdbd70190d500d79e942560126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:b6:2a:07:94:ee:f9:54:95:9f:49:63:31:
0f:4e:4f:57:1f:8e:1d:84:be:36:78:fb:a6:59:1b:
b7:32:67:9f:c6:30:69:e0:5b:1f:d9:d9:e9:77:a8:
0f:cc:55:d1:f6:c5:bf:6b:0d:45:90:cf:b3:1c:76:
20:0f:60:d8:d8:cc:5f:46:9d:0e:ed:df:60:ec:d0:
90:b3:d8:43:fb:6f:a4:68:8f:54:e1:ce:3b:19:34:
1f:33:fb:be:4b:c9:ee:fa:da:95:5e:6f:d9:40:29:
f0:f2:fd:d3:b7:10:42:65:49:28:30:27:68:9c:08:
c9:12:ad:97:11:d7:c2:48:12:91:4b:2a:93:ef:c0:
6a:cc:be:4b:16:7b:02:cd:28:de:be:15:22:9e:34:
28:ad:d4:45:4d:f6:51:f8:d1:5c:bb:13:0f:fb:69:
cd:3d:2f:5f:7b:9d:79:a5:59:55:78:14:60:0f:6c:
0c:f8:05:ea:4a:75:15:64:e3:b3:97:a7:9d:0c:1b:
3f:c0:4c:f5:61:bd:df:3d:ea:de:7f:f4:43:b6:d1:
1f:bd:18:26:5e:14:a7:fc:a2:aa:81:3d:77:ac:b8:
ad:50:f9:b6:a1:9f:9c:29:23:7b:9f:29:0a:57:44:
e3:03:7f:2e:f8:18:bd:cf:00:ab:2d:36:cd:04:e6:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:7B:56:32:5A:81:FD:BD:70:19:0D:50:0D:79:E9:42:56:01:26
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:67:a4:41:7b:f5:e5:7c:e9:0e:e1:be:1f:32:2b:32:b4:
3c:32:76:f8:e8:d5:79:78:60:cd:42:96:8f:1f:1b:54:40:63:
87:da:20:0d:bd:fa:06:34:4f:70:76:25:97:eb:28:f1:0d:27:
66:72:3b:40:fd:02:fe:e7:d5:d7:f1:96:e5:e0:89:36:2c:d4:
30:bc:f6:3e:c1:ec:03:ce:fb:f5:aa:6d:59:eb:9c:ff:23:a3:
f7:dc:41:fe:dd:92:77:bb:2a:a1:4c:0d:2e:46:78:de:4a:54:
11:bb:d7:40:e2:b7:34:82:d3:c5:d7:a3:16:c6:9e:b5:e5:85:
ac:cc:c9:5f:bb:d7:68:fd:65:01:35:91:2b:f9:60:4f:2a:c6:
10:0d:5c:d6:23:b7:20:f0:7f:0a:6e:d7:5e:d3:27:1a:8b:12:
0a:b0:ce:e5:c5:e7:89:36:cd:68:65:b4:8e:33:30:55:07:fb:
69:90:e7:79:c4:dc:45:e6:7c:70:c5:2f:29:c5:55:16:2a:b2:
2d:7e:03:9a:28:a7:89:ff:2b:d1:e4:c2:40:bb:0a:72:ac:cd:
77:8a:3f:eb:4b:17:1c:4c:ca:59:5e:4c:8f:fa:85:06:ab:98:
e3:0a:d5:fa:ab:c1:da:25:13:20:2c:32:09:06:bc:1b:85:f2:
0b:07:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:05 2026 by rpki-client