Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json)
Hash identifier: Hddnx85UIKpd9D/zIRYPjybci3KLRYVue6TA1RabYqg=
Subject key identifier: 2E:1E:5D:72:F5:9E:0C:DC:DD:BD:3F:84:AB:50:59:CB:EB:EB:ED:8E
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 019F916C32666EB9D90F317D6976423FD840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
Manifest number: 0339
Signing time: Fri 24 Jul 2026 00:00:14 +0000
Manifest this update: Fri 24 Jul 2026 00:00:14 +0000
Manifest next update: Sat 25 Jul 2026 00:00:14 +0000
Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: mlwl7glfuMBvpbs0XrSUjDj5p3oLe8CP4FvvFswLC0o=)
2: a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa (hash: b6V6y+CXqrM02r7OcRC1ExEpm/JNxjRqEeNbqYxgF44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:32:66:6e:b9:d9:0f:31:7d:69:76:42:3f:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Jul 24 00:00:14 2026 GMT
Not After : Jul 25 00:00:14 2026 GMT
Subject: CN=2e1e5d72f59e0cdcddbd3f84ab5059cbebebed8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:e8:36:6e:e4:a6:14:b1:20:0c:40:03:53:
fc:b6:13:69:23:80:ed:a7:02:19:8f:2c:fd:f9:da:
4d:63:f0:2f:bc:97:c6:1e:db:8e:b3:b2:2f:88:10:
69:5d:1e:b1:b6:41:06:64:15:f8:84:fd:2d:f6:57:
c1:2d:a4:9f:57:5d:56:a5:fb:61:0b:0a:01:ef:b0:
46:54:3c:96:fb:8e:17:a7:a9:28:5d:0e:d6:ae:6e:
13:45:74:7c:9e:e0:4e:a3:a2:28:72:f4:2f:b6:c4:
ef:e3:45:e1:4a:12:56:47:b7:47:f3:9c:46:f3:b2:
20:14:ea:82:91:a1:94:84:30:b8:c3:c8:cf:72:70:
0d:48:54:ec:c3:79:57:a3:5e:06:f6:5b:19:9a:1d:
c4:4c:83:ba:42:b2:15:1f:1a:16:48:07:65:f1:a8:
5c:13:43:c0:dc:56:df:82:8c:1b:a2:68:69:4d:b3:
b3:89:9c:15:32:26:f6:a0:aa:60:c8:33:2a:66:32:
33:22:f5:3d:83:50:e5:3e:cb:e3:7e:d1:89:e3:0b:
f9:18:b1:e5:e5:87:16:2b:01:94:27:b1:20:75:60:
6d:17:ab:e1:9b:48:a6:60:62:a6:6e:31:70:42:bc:
c7:4e:cd:d8:76:44:06:1e:21:ea:12:a9:d7:b7:1a:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:5D:72:F5:9E:0C:DC:DD:BD:3F:84:AB:50:59:CB:EB:EB:ED:8E
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1a:41:88:ea:40:f0:da:37:7b:54:e6:af:04:0c:c7:8e:4c:
07:45:65:0d:54:74:e6:4b:11:a6:28:9a:fe:18:36:78:6d:9d:
7c:8e:80:34:73:7c:8a:d2:73:cc:25:23:c5:e5:a7:e8:77:93:
bf:3e:ed:78:fa:4a:7f:11:a2:56:31:b0:12:43:d8:3f:ba:01:
bf:92:40:19:df:89:43:93:28:16:39:a4:c1:42:6b:c4:4d:92:
b9:e6:90:56:0c:58:cb:8c:cb:6b:eb:f1:18:88:9c:f8:94:14:
87:93:8e:4b:56:c7:dd:46:24:35:0c:da:79:14:53:f5:db:a1:
c8:24:60:c0:29:32:13:43:7e:e7:1b:1c:31:02:01:8c:a8:53:
e0:6d:57:02:12:33:42:ac:04:d5:09:7e:36:67:b7:c6:62:26:
6f:e9:3e:63:7c:4f:5b:77:89:90:f1:5d:19:12:be:2b:cd:e3:
39:cf:47:61:e4:1b:ec:05:9d:45:de:8d:db:98:80:2f:2a:de:
39:92:f0:c1:6e:b5:79:79:10:3c:6b:82:dc:db:21:20:71:ba:
48:10:af:dc:a3:1e:65:0e:a7:0b:41:a2:63:94:a5:db:04:0a:
aa:de:42:8c:ac:72:a2:93:a0:16:d0:36:1c:6d:0d:6d:8b:d6:
00:c4:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:57 2026 by rpki-client