Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: fkvVmiRaFv/7WUdzpIRZ+DS3q6dyUAWQuYxyHr+YKts=
Subject key identifier: 51:D0:D9:C9:30:D7:83:76:E4:97:51:47:16:4A:5A:6C:96:FA:AE:DB
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019F8ED95CB8FF37F2BF12B9290D677D15D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 12:00:37 +0000
Manifest this update: Thu 23 Jul 2026 12:00:37 +0000
Manifest next update: Fri 24 Jul 2026 12:00:37 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: wj/PJ3euQ1etXbNjElJIaeAEYRDx2S8bKUuaNS8KXYI=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:5c:b8:ff:37:f2:bf:12:b9:29:0d:67:7d:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jul 23 12:00:37 2026 GMT
Not After : Jul 24 12:00:37 2026 GMT
Subject: CN=51d0d9c930d78376e4975147164a5a6c96faaedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:a4:6d:d7:6e:0c:c5:cf:97:fa:6a:c7:15:
8f:df:3b:5d:6d:60:da:5a:6f:24:70:db:0f:1e:a4:
7e:95:c2:36:ea:d9:c9:c2:e3:0c:be:59:27:53:7e:
f0:fe:77:01:e3:7b:48:7f:ca:af:94:0a:e3:36:4d:
60:ab:6c:26:7d:9b:ed:66:57:76:5a:5e:85:17:9b:
ee:f5:cc:4a:44:87:6a:b8:86:ff:f4:05:b8:08:fb:
6c:11:12:67:d0:d6:fb:98:5d:79:1e:9d:d8:89:e6:
33:e2:fc:a2:2b:16:e8:ba:9c:60:4b:f9:c4:54:d6:
09:04:b1:2f:e7:79:78:18:16:b1:af:c9:6d:b9:c3:
01:55:27:1a:4e:c8:c4:47:74:56:b2:19:9e:ce:55:
25:76:2f:d5:ab:21:70:c6:04:57:96:ab:b7:07:51:
2a:90:8f:36:f2:bc:f4:f8:60:5b:2c:45:e3:f8:25:
d9:39:ee:0b:54:d8:d4:35:6b:dc:08:3f:f1:09:d9:
0b:be:c4:7e:da:20:df:15:ca:fc:4b:1d:c0:bf:da:
5d:7e:b3:52:de:2f:88:3d:b7:f1:dc:74:9e:61:c9:
3a:af:5c:f2:9d:77:f8:bc:02:ee:65:b6:c2:15:f1:
e4:c0:91:22:b0:96:c9:70:2d:99:0f:5f:2d:c6:9c:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D0:D9:C9:30:D7:83:76:E4:97:51:47:16:4A:5A:6C:96:FA:AE:DB
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:2a:c8:d5:2c:b2:6c:79:76:7c:bf:fc:d5:6e:71:78:8a:
d8:f3:88:b4:3c:75:b2:40:be:97:bb:9f:60:85:ce:5d:48:60:
6d:ea:4d:af:59:67:7f:4e:44:2c:7d:ef:e5:d6:6f:56:72:dc:
00:44:80:9e:63:6c:c8:4d:ca:cc:d6:b6:1e:c3:28:54:99:c4:
81:cd:6c:4d:de:8e:22:27:3c:f2:f9:55:d8:ce:64:db:31:cc:
46:c2:2c:64:40:87:9e:e3:1e:64:28:c5:ca:a2:c2:42:bf:a9:
1d:13:34:f3:fc:71:b9:79:ac:47:3d:fa:1f:76:c2:e2:1f:f0:
3e:11:23:5b:95:bc:3d:57:90:3b:e1:da:61:f8:c4:a5:54:ed:
6c:21:a6:be:52:a8:8d:e6:23:2b:c3:ee:1d:70:0c:8b:af:aa:
68:6f:fd:29:da:40:2e:75:17:ae:07:33:20:31:b0:46:4b:a3:
c4:cb:42:39:76:3b:1d:93:03:47:02:d9:07:81:2a:89:dc:56:
b0:a9:f4:d2:e2:6b:b8:2a:55:fe:1c:cb:52:d2:01:bd:48:a4:
0e:0f:8c:bd:3a:3f:59:10:2a:3c:e5:d5:e6:5f:5b:c9:61:e9:
92:f0:9a:51:7e:8f:e1:aa:e8:0c:64:36:4a:01:8e:5a:30:98:
e4:61:de:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:51 2026 by rpki-client