Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: 67kg/FppqrE8DzuC12ZinVLmKGa1aDokvM06quCnlwM=
Subject key identifier: 3E:FE:62:E2:25:C7:85:9B:BA:2A:6B:9F:8C:E1:B6:CB:EE:5F:FB:BF
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019F916C3DBC759958FB84A21EF035AC839A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 00:00:17 +0000
Manifest this update: Fri 24 Jul 2026 00:00:17 +0000
Manifest next update: Sat 25 Jul 2026 00:00:17 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: eKAYZX6YBojwAjg9i4h2VvVo0jOAB9SGYDswbuePlUE=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:3d:bc:75:99:58:fb:84:a2:1e:f0:35:ac:83:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jul 24 00:00:17 2026 GMT
Not After : Jul 25 00:00:17 2026 GMT
Subject: CN=3efe62e225c7859bba2a6b9f8ce1b6cbee5ffbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:f2:6b:6a:a7:ff:62:b2:69:b0:7d:fe:c4:
7d:36:cf:0f:9f:82:9d:c4:4a:b5:88:1f:80:32:da:
5c:ae:e7:d9:e4:b9:36:a6:56:1e:93:fa:1c:a4:f8:
74:ad:ff:95:6c:8d:df:6e:f3:68:fa:49:71:ad:49:
94:b1:b5:ca:22:de:da:85:88:d3:bf:cb:9c:15:4f:
f0:3d:72:26:96:50:6e:b9:4c:7e:64:47:6e:c6:35:
48:82:c1:e5:71:6b:be:80:a2:4c:97:c1:86:97:2b:
02:41:20:f1:35:77:df:59:d1:a2:ae:af:6a:b0:b3:
c0:9c:f0:81:21:f0:2d:c7:c2:53:05:f7:0f:de:e9:
df:10:65:02:d1:0d:d7:d0:1b:30:9e:09:13:d8:80:
33:e8:33:33:0f:27:33:81:eb:22:0f:02:b1:4c:a9:
f6:9c:48:33:13:7f:6d:0f:6e:c5:8c:c9:a6:74:ed:
8a:ef:a2:27:a4:54:d0:0e:29:39:0a:77:ea:d5:c6:
53:00:65:f4:3c:71:77:70:7e:d4:f8:75:b8:cc:75:
b0:c3:81:cc:51:d5:d1:39:97:74:f9:ab:fb:f7:57:
32:8b:aa:49:d0:79:d6:c6:b3:11:21:98:ee:81:12:
58:01:79:2b:32:f3:b7:5c:85:02:54:91:e9:19:b1:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:62:E2:25:C7:85:9B:BA:2A:6B:9F:8C:E1:B6:CB:EE:5F:FB:BF
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:0e:36:61:5c:e3:b4:90:8f:12:5c:da:35:a5:fb:74:f7:
6c:d0:7c:3d:2f:97:0e:90:20:65:66:4d:07:27:db:a3:2c:91:
f5:19:6e:b8:31:1d:49:15:ca:3c:6b:48:0a:83:28:4a:12:d9:
14:88:56:87:35:d2:a7:b0:3a:b4:06:27:d5:c2:07:ad:1c:80:
cf:42:ae:21:d8:59:7e:c7:c0:5a:a2:a4:63:7f:11:8f:6a:39:
18:bb:89:11:5f:66:74:1d:35:6c:17:b5:d0:47:95:89:91:65:
a2:5d:65:dd:55:46:f2:f8:33:36:5a:b7:7d:03:2d:78:65:01:
cb:e5:98:41:9f:97:69:b5:82:87:6f:2c:c3:40:bd:8e:76:50:
e3:9e:ad:5a:a2:81:70:88:f6:05:fe:0e:db:45:b8:eb:89:0e:
f3:63:c2:d4:61:de:44:8b:ea:f1:cd:9d:a9:fa:77:62:fb:23:
11:fa:d6:26:06:22:18:ab:09:fd:53:ae:ff:03:38:fc:7b:77:
0e:6f:40:6c:a6:d8:a7:9d:41:39:ec:02:9a:cc:db:7b:03:b2:
fe:79:5a:be:25:3c:1d:7a:31:d7:92:eb:67:fc:44:bd:e1:8b:
76:0d:e3:8c:7c:bf:e0:9d:0b:1a:ab:fa:84:6a:0d:ae:8d:b1:
10:d3:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:12 2026 by rpki-client