Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
File: 2EPxqgSY2E95UyPB_2uuOvQCBtE.mft (raw, json)
Hash identifier: fLx2pwdqOXHdAqXwcv96VjjgYfVmC1wSJ7jiP5dTAnw=
Subject key identifier: DD:C3:FE:B7:33:CA:6D:9B:9F:60:84:01:2F:03:C8:01:26:53:F2:AE
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Certificate issuer: /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial: 019F92B6322A7C3244FAFBB2B5F8C3ED855B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:41 +0000
Manifest this update: Fri 24 Jul 2026 06:00:41 +0000
Manifest next update: Sat 25 Jul 2026 06:00:41 +0000
Files and hashes: 1: 1-BTuYEiDE2mEIP2dyXdE1PSMv3c.roa (hash: tBxS565NzZV2f/vbdXm3F39V84JJovJ6zXMOf+itJ6Q=)
2: 2EPxqgSY2E95UyPB_2uuOvQCBtE.crl (hash: CAEO75F2BKsItd6uTbZvgdTABwFj0BERQM3YZa1b5y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:32:2a:7c:32:44:fa:fb:b2:b5:f8:c3:ed:85:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Validity
Not Before: Jul 24 06:00:41 2026 GMT
Not After : Jul 25 06:00:41 2026 GMT
Subject: CN=ddc3feb733ca6d9b9f6084012f03c8012653f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:6d:45:36:1c:ec:26:14:85:9d:b9:6b:9a:
3c:0b:08:96:8d:77:e6:d6:b7:90:1c:99:a3:de:ef:
10:4f:58:e4:80:8f:f4:4e:f9:6a:9e:80:ab:0f:b1:
6d:46:66:b4:d8:ae:ac:77:11:78:b6:de:92:4d:c9:
af:0b:59:b2:2e:14:db:77:e9:a3:2e:24:50:dc:e1:
ff:88:2b:86:6b:35:71:ee:78:5d:50:a9:3d:6e:1e:
9d:85:7d:2b:f3:7f:d1:a1:53:47:11:eb:f2:10:b0:
b5:fb:de:d6:55:b8:af:b4:de:82:c3:2c:8a:5c:4c:
c5:42:5a:ed:f4:64:3d:ca:b8:cc:a8:d2:d1:99:c4:
81:63:3a:8e:7b:f4:83:56:70:54:c2:af:db:b4:f0:
eb:90:a5:24:df:93:fe:0c:82:f9:91:3f:fe:8b:be:
91:f8:46:91:33:9f:b2:6d:0d:ef:87:23:d6:98:7a:
c3:2d:88:b9:11:17:a0:b6:fe:f4:40:07:01:d7:cb:
f8:8a:90:0b:0e:39:dd:ab:b5:2f:31:f5:31:e7:f7:
72:b3:48:c9:ab:a4:3c:18:45:b1:a2:34:a4:20:e3:
33:34:1a:39:0b:ba:2e:85:c8:96:d0:4a:f6:53:11:
fe:20:b3:af:8a:16:4d:e2:cb:9f:d9:c0:c8:81:5a:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C3:FE:B7:33:CA:6D:9B:9F:60:84:01:2F:03:C8:01:26:53:F2:AE
X509v3 Authority Key Identifier:
keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:21:ea:e7:ae:1a:d4:61:dd:2a:e6:68:1a:b3:ca:0b:6b:ea:
fd:67:e5:c1:7b:c9:68:09:28:88:6d:75:e4:d4:b1:e2:6b:51:
c6:5f:a5:70:1e:33:1c:e5:cb:a6:6c:cd:11:0b:97:71:ce:b6:
1a:4f:59:d5:c5:b9:2c:81:3c:52:43:d1:78:b9:ff:cf:5e:27:
a3:55:fd:ba:18:32:a8:27:37:76:d3:29:b2:a1:61:f2:7f:42:
f2:17:a7:a5:d6:42:ae:8a:35:94:29:96:8a:3b:0c:24:b2:95:
f6:5d:20:a7:61:7a:6c:e6:d4:79:a3:4b:a6:1f:24:bb:22:ab:
22:bd:8e:f7:cd:79:6c:75:0c:f9:43:d3:8b:ea:93:84:76:a4:
12:04:b7:fe:5d:a9:71:74:ff:09:44:04:2e:69:5b:da:9b:26:
fa:02:78:04:52:cf:05:44:e7:68:22:94:e2:f5:03:1b:9c:e3:
5f:be:bf:fa:d7:8e:51:7d:42:8f:c0:a6:8a:56:9e:97:a1:a2:
f2:08:92:6d:2a:3c:f9:b8:71:b0:ad:0c:9d:28:47:c8:d8:3c:
b0:5e:02:f0:44:5b:05:58:f1:b6:c8:7d:5e:ae:48:d4:f6:7d:
23:68:3e:46:0c:82:65:c5:91:1b:40:84:4c:54:d6:ea:81:77:
bd:08:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:40 2026 by rpki-client