Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
File: 2unfRXblxlT_VX2fm-ox8rZ3hgg.mft (raw, json)
Hash identifier: qveCCI25N0jSsdDkhoEWEBC5stmgsSAuzX/hnEWYIo4=
Subject key identifier: 92:36:CB:69:1D:5C:DC:98:98:43:F0:42:A0:0B:02:40:5E:A8:46:EB
Authority key identifier: DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
Certificate issuer: /CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Certificate serial: 019F8F7F08EAACA6BD4C08175D9A5EEF964E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
Manifest number: A8
Signing time: Thu 23 Jul 2026 15:01:34 +0000
Manifest this update: Thu 23 Jul 2026 15:01:34 +0000
Manifest next update: Fri 24 Jul 2026 15:01:34 +0000
Files and hashes: 1: 2unfRXblxlT_VX2fm-ox8rZ3hgg.crl (hash: Jr9Cc7rLS5BFpVraE/8siGa7mU3nzyqJ5Kz78RGfniM=)
2: TGOOYRcNmV295qXxS4iLaJusiBo.roa (hash: oqdkVui8+d5XgQplzUQ+/bNjoHy7U9CmnNlp4TiyCZ0=)
3: TaFHcEVpHBuOtmOo9bfUHF86wA8.roa (hash: W6pJRD0Lz0NwRk9iK9nsLKMeEmNlAixYW23qwf2NLk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:08:ea:ac:a6:bd:4c:08:17:5d:9a:5e:ef:96:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae9df4576e5c654ff557d9f9bea31f2b6778608
Validity
Not Before: Jul 23 15:01:34 2026 GMT
Not After : Jul 24 15:01:34 2026 GMT
Subject: CN=9236cb691d5cdc989843f042a00b02405ea846eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:47:1e:19:29:33:fa:d7:7c:2b:2a:e8:fa:
29:2f:f4:69:91:5a:ad:a9:6d:26:81:48:6d:70:38:
51:a1:ed:92:d7:12:1d:64:bd:55:fb:f3:f0:27:ca:
1f:f1:8e:c5:f7:bc:41:01:22:b6:8f:ee:f7:fe:10:
72:c9:12:cc:48:a4:30:23:0b:b9:cf:e8:1f:f4:9a:
24:5e:99:81:e4:ae:d3:81:42:4e:6a:be:28:b3:38:
08:a9:1d:63:fd:8b:78:84:40:e3:fd:41:2f:2d:2b:
c5:aa:2a:09:ba:0a:c2:20:39:e2:42:bc:16:95:b6:
4c:26:11:cf:b7:80:c3:76:e1:ac:3d:b2:ee:ce:1d:
39:62:27:45:ec:f7:75:87:3e:83:f1:8d:9c:48:f7:
d3:cd:f5:46:33:38:16:d0:6f:e1:3f:ac:0a:ec:3e:
62:25:07:33:86:7e:6b:b7:15:8c:62:c5:d3:a6:8a:
f7:54:51:c7:0f:21:85:72:30:66:bc:04:fd:94:32:
7d:df:b6:8e:09:6f:eb:5f:a6:6a:ba:c1:0c:8d:16:
fe:17:5d:d2:93:77:a3:4d:1a:a7:63:34:c5:00:c9:
35:88:e7:45:ba:08:6e:26:ed:ea:cd:00:ae:f8:2e:
c6:d0:c9:c4:5d:0d:78:a3:04:99:6d:a0:95:77:b3:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:CB:69:1D:5C:DC:98:98:43:F0:42:A0:0B:02:40:5E:A8:46:EB
X509v3 Authority Key Identifier:
keyid:DA:E9:DF:45:76:E5:C6:54:FF:55:7D:9F:9B:EA:31:F2:B6:77:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2unfRXblxlT_VX2fm-ox8rZ3hgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/1028e7-fe04-4ad7-9ebe-b7f72815df7c/1/2unfRXblxlT_VX2fm-ox8rZ3hgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:11:31:f9:52:ea:70:9a:e7:c6:76:f7:88:f9:6e:96:4f:
c5:8d:f9:9e:67:7a:48:ef:2f:16:71:b3:88:77:0f:d8:29:b8:
f2:f6:fd:06:f3:d4:63:5a:95:f5:e9:05:d5:40:d8:a6:89:6d:
98:12:42:2c:83:bf:87:42:8b:c9:21:ca:cc:5e:06:18:ec:d0:
7f:76:50:16:e9:f9:bd:04:ff:d3:29:06:19:05:ec:e3:f0:3e:
67:8a:b2:14:92:46:e1:f3:34:3f:b7:e1:6d:d0:59:51:03:4b:
eb:06:1f:68:fe:d8:07:a2:2d:ba:45:99:c8:67:a8:77:17:86:
c2:19:3e:a3:8c:11:d1:5f:42:38:d0:da:f8:87:59:81:a2:c5:
bd:ea:25:ab:be:60:37:28:52:b5:46:1e:9e:14:33:ea:7c:33:
28:47:0f:a1:c1:92:00:9b:84:33:2b:24:58:a3:77:93:60:72:
b2:0d:6d:28:9a:e9:18:7c:d6:bd:a9:04:72:0a:41:29:88:be:
af:0b:55:73:8b:00:c0:5f:8b:94:7f:a3:db:9f:d1:81:bb:02:
7f:b3:78:fd:bc:fd:ff:a2:76:31:a0:57:29:cc:00:de:b1:ff:
2b:73:6e:10:19:31:ee:4c:01:51:49:78:f2:ec:14:be:b8:b1:
7c:16:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:44 2026 by rpki-client