Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: IX3O6SxWeQ+sf82rAwmUpL2sjFsLBkokW7julOpe1H4=
Subject key identifier: 68:B7:BC:8C:C1:3E:9B:17:B9:67:4A:90:BE:C7:32:2E:C8:AF:FD:B5
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 019F913560B31233CA37A0875F3E53BE694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 17EB
Signing time: Thu 23 Jul 2026 23:00:22 +0000
Manifest this update: Thu 23 Jul 2026 23:00:22 +0000
Manifest next update: Fri 24 Jul 2026 23:00:22 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: ToHG7bfHAfaPb/5e/TjiFOEQ3nRz8u85YNR4WV0peNQ=)
2: JKIhvk4nR2Yatg3LSMzcvAB5gDY.roa (hash: Wu8o0XpgB80LZ5YT5dratdi0qOmv7LG2bN4vwgSeFRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:60:b3:12:33:ca:37:a0:87:5f:3e:53:be:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Jul 23 23:00:22 2026 GMT
Not After : Jul 24 23:00:22 2026 GMT
Subject: CN=68b7bc8cc13e9b17b9674a90bec7322ec8affdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:eb:ff:d3:58:09:3d:48:1b:59:0c:5b:64:
11:cf:c8:99:0f:be:20:81:6d:6d:c5:f7:6d:81:9a:
5b:bb:d4:b8:b4:ee:d6:42:8c:ea:4d:cb:b6:23:6d:
fc:92:45:f8:ed:f8:de:63:eb:30:03:97:90:13:5d:
f7:78:24:c2:cb:00:81:98:05:1b:f2:c1:60:1d:38:
27:ce:29:fa:74:12:d7:63:41:62:5d:d5:59:57:75:
4c:3a:66:4a:87:05:e8:11:42:82:3d:17:8a:99:a7:
24:09:46:1b:7c:7c:24:00:6f:e5:96:11:8a:ad:b9:
47:7c:8f:4e:92:e1:84:2d:0f:03:4b:e1:cd:17:fb:
5e:7f:d4:1f:71:dc:a4:20:76:74:dc:2d:ff:85:4b:
5b:2b:3a:f4:b5:ac:31:79:89:bc:58:d6:de:2b:d6:
b8:a1:20:0f:d8:77:d1:48:ef:d5:71:da:5d:ab:b2:
63:b9:98:01:39:7b:be:86:f8:dc:70:84:f7:c4:df:
f4:40:01:33:35:6b:64:64:ed:28:5d:d2:d6:03:c1:
0a:8f:18:3d:10:11:63:ec:36:4e:80:50:2e:37:14:
18:58:00:23:14:e1:cb:84:2f:16:fe:fc:b8:a6:a5:
c5:9e:fc:0b:23:82:6b:c6:a2:aa:05:ab:77:8f:70:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:BC:8C:C1:3E:9B:17:B9:67:4A:90:BE:C7:32:2E:C8:AF:FD:B5
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ea:89:08:61:4b:74:9b:1a:3c:09:c1:c9:75:78:86:56:b0:
40:78:c9:5f:65:13:fc:0d:9c:9c:da:e8:15:e4:b2:12:39:55:
ec:60:4e:7b:1d:d4:a0:8d:9e:f8:94:11:86:71:07:41:d7:02:
ff:94:4e:05:49:56:ae:e6:01:54:3c:b9:28:e8:63:e6:ed:39:
d9:4a:19:18:3d:5e:27:2a:4f:99:2e:aa:23:56:96:27:60:28:
88:3d:9a:18:8c:8a:03:d4:e5:c8:29:a6:3f:64:e1:b6:6a:05:
d5:07:0c:5f:23:54:ac:6d:e4:e5:4d:f0:b6:35:94:84:3e:b8:
49:ac:ff:be:58:26:22:11:ce:52:cc:09:d4:d1:17:a8:4c:13:
cd:de:6f:a2:33:73:1d:c8:93:1e:52:2c:0e:b6:ec:c9:47:e2:
5c:1d:e3:25:19:a9:1e:46:6c:2d:56:30:ea:94:bc:1e:5c:0b:
e6:84:66:57:7c:17:30:d3:11:fe:3d:90:ba:3f:f0:6a:ff:43:
33:c0:ab:57:c4:a9:d8:5a:c9:6f:ab:35:1f:3e:ac:7b:01:e1:
b5:75:8e:f3:4e:4d:69:48:9d:32:a0:03:3a:b2:68:91:30:af:
07:e1:d7:e2:08:b1:82:ee:e9:01:5a:31:08:bb:f8:f2:30:ad:
12:12:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:25 2026 by rpki-client