Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: VgkJuTO9UjfUg/hsa4cirWXrmrAHBfMin/YnVJizEh4=
Subject key identifier: 85:C5:BA:30:E0:2A:ED:26:4C:B5:13:D0:7A:1F:6B:7D:0A:EB:C8:90
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 019F90FEC713DA4F4898E774188BABC6DCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 10A7
Signing time: Thu 23 Jul 2026 22:00:43 +0000
Manifest this update: Thu 23 Jul 2026 22:00:43 +0000
Manifest next update: Fri 24 Jul 2026 22:00:43 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: kRPe901qaMxUTqpAk2dHKgEjtP/sn+l1YQplSWcw1sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:c7:13:da:4f:48:98:e7:74:18:8b:ab:c6:dc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Jul 23 22:00:43 2026 GMT
Not After : Jul 24 22:00:43 2026 GMT
Subject: CN=85c5ba30e02aed264cb513d07a1f6b7d0aebc890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:c9:a8:41:89:8b:d4:1e:34:b4:46:39:ac:
e5:8e:cf:29:2d:fc:b6:c7:d7:10:b9:60:cb:fa:eb:
37:d0:9a:f6:d4:f7:29:ef:b1:90:c8:1f:d5:66:a7:
a6:02:73:d1:81:aa:98:db:dd:9c:66:23:cb:43:bf:
3c:e4:e1:12:98:9e:1b:5a:ee:12:18:25:a3:da:a8:
19:88:fb:45:f2:3e:83:b3:d6:e6:09:bf:d1:e9:2f:
e9:df:d1:9f:0a:40:cf:e0:d6:2f:d5:27:ca:82:24:
98:f3:3c:c4:d0:bd:f7:31:d4:bc:7e:0b:c5:0b:5a:
31:e7:d1:86:d2:ef:24:8e:8a:53:c7:d6:94:1e:f0:
6d:c1:01:59:5e:e8:c5:7f:13:4c:25:dc:da:00:f7:
ab:72:74:a1:d9:05:93:74:ca:d1:8a:70:06:20:68:
7b:75:dd:0b:78:b7:40:ec:dc:05:0d:c0:95:6e:d9:
8e:98:8b:43:ef:36:8d:0a:9e:03:91:1a:df:85:49:
23:b4:f8:3a:67:e5:53:4f:18:c0:48:38:da:56:86:
e6:09:b0:4c:e4:4b:f3:8e:d9:5c:5e:e4:17:32:9b:
10:30:0b:dd:21:a8:43:ef:da:f4:93:22:6b:cd:83:
c6:6e:38:2b:57:13:95:e3:4f:71:1d:43:d7:84:51:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:BA:30:E0:2A:ED:26:4C:B5:13:D0:7A:1F:6B:7D:0A:EB:C8:90
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:29:2a:4e:d4:a0:16:b1:1e:8a:1b:13:5d:d6:d2:be:d5:
5c:a8:67:4b:e1:5b:38:a8:7b:c6:3b:07:3a:2f:04:a3:1a:34:
fd:5d:00:6d:b4:87:a9:65:28:97:43:cf:06:e1:2a:98:64:3e:
8e:09:e3:f2:60:e6:27:47:35:77:99:53:7c:d7:62:f5:23:ac:
75:8e:a5:f4:19:f0:3e:9e:16:88:c5:e6:96:32:1d:e1:a4:07:
b0:80:1f:ce:78:3e:69:a3:6d:35:18:3d:23:28:ee:e0:f5:b0:
d7:4f:12:dd:33:07:cf:db:73:ea:47:29:b5:a9:53:58:73:6a:
c8:b9:a0:54:75:c0:47:48:5e:c0:2c:ea:2a:33:1d:10:a5:b8:
0d:aa:b1:5b:55:53:21:1c:f4:42:ac:bf:fb:ca:3e:24:b1:17:
51:2a:f4:22:1d:15:7f:fc:50:d0:d8:20:f1:66:43:6b:d1:d4:
a1:cc:1c:dc:a9:d2:d5:c8:71:8a:dc:f7:55:fe:66:c2:0f:40:
ff:d3:6a:1c:75:ee:4f:d7:a2:6f:60:04:0b:62:d5:11:29:1e:
b5:b6:0e:d6:93:cd:5f:58:96:c7:73:60:16:20:dd:e2:4a:bd:
c2:f5:05:a3:b5:e4:7f:e5:c5:a8:65:59:90:6c:30:69:ef:5f:
c6:05:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:40 2026 by rpki-client