Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: aFuDXsm79/mapGcOHtdjoVRKIEeav9HT9bGayFMP+HE=
Subject key identifier: 60:D4:D2:88:33:8E:E8:9F:FD:D6:30:E1:BF:02:9E:76:F9:1F:13:D0
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019F91DA58FA33D68346125913E03B1B686C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0A78
Signing time: Fri 24 Jul 2026 02:00:33 +0000
Manifest this update: Fri 24 Jul 2026 02:00:33 +0000
Manifest next update: Sat 25 Jul 2026 02:00:33 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: l7dR6sMXkFumo9s/G5OM6kXoJ0i/ZVX3Uh+hj2tPauo=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:58:fa:33:d6:83:46:12:59:13:e0:3b:1b:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jul 24 02:00:33 2026 GMT
Not After : Jul 25 02:00:33 2026 GMT
Subject: CN=60d4d288338ee89ffdd630e1bf029e76f91f13d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:65:51:4e:f0:9c:b8:b2:25:26:b7:75:1f:
13:b4:30:f0:a6:f3:f8:27:62:1e:22:f0:34:fa:eb:
d6:bc:f2:df:0e:bf:0a:6e:c0:4c:c3:69:49:d7:27:
18:34:8d:39:a0:47:49:fb:52:48:1f:bd:49:f9:a9:
5e:87:06:e8:d3:7d:79:8b:92:e9:ef:3c:b5:70:f1:
87:5a:d5:48:2b:a3:29:7f:42:72:35:23:bf:b6:13:
56:74:97:16:2c:10:78:61:80:a5:93:a3:a1:48:37:
f7:98:cf:39:cc:b0:37:ad:9a:dd:53:66:7e:aa:0d:
1e:5c:d6:48:89:48:a5:3f:ee:c4:35:f5:2f:f6:c3:
91:a4:a7:8a:2e:c2:3a:a3:66:c2:23:0e:84:24:15:
bb:c6:db:a4:34:e7:bf:23:b4:af:45:90:12:5e:54:
c8:b1:65:72:77:b1:e0:f2:2a:b3:9a:27:15:63:1e:
59:f2:69:7a:a1:98:75:ce:b9:ed:b1:f7:b7:ff:2a:
1a:af:f5:75:44:92:02:4e:f7:38:ce:11:52:94:81:
e3:e1:9a:11:93:64:00:59:d4:5b:c0:97:f0:e4:fc:
e1:93:b5:94:24:6e:46:d4:f4:51:24:8c:27:19:33:
54:c3:8c:a1:4e:9b:a1:6a:01:1f:de:9e:d3:d0:27:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D4:D2:88:33:8E:E8:9F:FD:D6:30:E1:BF:02:9E:76:F9:1F:13:D0
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6e:ab:3f:94:e9:ee:23:c8:2e:27:b0:f7:fe:49:75:9e:40:
ad:04:1d:d2:7b:80:01:b4:10:05:04:bc:b3:12:fd:5b:20:3b:
4d:a8:9a:71:0e:97:4e:3b:ee:87:6a:71:7b:34:ef:89:b5:74:
47:03:be:68:8c:fe:2b:45:ff:a9:06:5d:a6:36:28:29:ae:de:
28:90:66:d2:81:61:bd:2b:63:5e:f5:94:12:90:e3:16:fe:b5:
2e:4d:78:d8:6c:94:6b:78:27:24:8d:f9:bf:cd:cc:2c:88:b4:
f1:7d:58:64:d7:d1:33:36:07:66:2c:9e:36:d8:e9:38:d5:f8:
0c:64:66:6d:bf:d3:db:92:3d:ec:31:cb:ec:20:99:82:42:50:
b1:4b:58:8b:31:5c:33:56:7f:22:07:74:62:e2:75:57:f4:dd:
98:a2:23:c9:70:55:09:21:aa:1e:ad:01:10:0e:b2:1b:1e:9a:
90:f3:12:79:17:1c:a8:40:24:43:84:9c:f7:29:78:79:c9:49:
f6:5c:5a:be:2a:76:3d:0c:8b:26:9d:9a:33:55:a4:65:37:0a:
67:ef:30:36:9c:40:b8:e8:f8:dd:2d:03:9c:5e:45:8a:8c:22:
6b:1b:f4:15:ab:8f:19:0f:f4:e9:26:30:9e:65:14:22:0e:e0:
46:b4:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:22 2026 by rpki-client