Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
File: 2KPKzfjzNRS-Or3FLFDshkZ16VU.mft (raw, json)
Hash identifier: D9irOJ5M3vTe69mS7QhpW62eC3Md4/hjwD++m4HojJU=
Subject key identifier: D7:C3:96:04:B9:89:2A:8D:C4:3C:06:72:73:95:26:0F:02:CC:A4:FF
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Certificate issuer: /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial: 019F9023246FBCFFA3B7E507D9E92D0CF92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
Manifest number: 0F1E
Signing time: Thu 23 Jul 2026 18:00:49 +0000
Manifest this update: Thu 23 Jul 2026 18:00:49 +0000
Manifest next update: Fri 24 Jul 2026 18:00:49 +0000
Files and hashes: 1: 2KPKzfjzNRS-Or3FLFDshkZ16VU.crl (hash: rZ/nvaK9L7FwzCnC1LGJc9Koc03kDooKq+irDXXYc1I=)
2: 55I-KJfDZCQf3-WIzaOmHLDw0UA.roa (hash: CHL8cZMB7OLAW5NGioo9AKdHll+9RPJn2SB7b3DCiOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:24:6f:bc:ff:a3:b7:e5:07:d9:e9:2d:0c:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Validity
Not Before: Jul 23 18:00:49 2026 GMT
Not After : Jul 24 18:00:49 2026 GMT
Subject: CN=d7c39604b9892a8dc43c06727395260f02cca4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:a9:ba:ed:9c:28:5c:7c:54:98:0d:33:2a:
1e:75:08:10:5a:de:f4:2a:1a:19:45:7a:63:12:2d:
68:db:b8:05:ce:c6:07:6c:f4:6a:79:36:ad:c1:e0:
1c:77:da:8a:fe:85:a9:96:e6:84:a1:d2:06:e4:59:
e5:1d:cb:c5:10:09:5c:12:a4:df:1f:b5:01:11:9d:
89:3b:8f:2c:aa:01:f6:1f:e3:71:06:ae:74:96:cf:
5c:c0:54:37:d3:0e:50:fa:40:4b:d5:67:4b:22:c3:
a5:c4:5d:71:97:a8:73:50:9e:46:73:a0:9b:b7:52:
0e:3f:f4:b5:90:1f:aa:fb:02:3e:2e:46:12:dc:71:
66:46:44:1b:e1:5a:29:ab:25:e6:b9:25:06:7c:82:
36:9e:8b:01:ab:20:e3:45:b5:2d:85:6c:82:01:4f:
ee:7d:bd:2e:c4:30:7d:3c:a6:42:fb:ac:84:66:39:
f8:b0:96:9d:01:03:2e:02:fe:74:bc:00:16:72:64:
f0:11:c3:3d:ef:9a:cd:2f:46:42:af:70:90:d6:97:
b7:08:b2:73:8a:51:01:2d:dc:20:12:9d:a0:87:9f:
87:1e:f9:11:c3:51:81:d0:96:b2:39:d2:b9:bc:7b:
d7:66:96:24:a8:a6:cd:ce:e9:e7:0e:0e:b5:27:32:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:96:04:B9:89:2A:8D:C4:3C:06:72:73:95:26:0F:02:CC:A4:FF
X509v3 Authority Key Identifier:
keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9a:90:e8:1d:f5:82:4b:0d:83:6a:c0:95:e9:0c:59:aa:0c:
a3:a8:e1:0d:39:fe:0f:70:80:0e:4d:1d:42:4d:a4:52:e6:4b:
dd:2e:8c:80:47:55:6f:01:fd:7f:6c:f8:81:17:51:cf:21:cf:
52:70:66:ee:97:2e:43:b3:91:a6:d8:a2:e5:42:16:46:73:80:
37:c1:52:dc:11:7e:81:9a:bc:7f:b4:b1:7a:55:10:c6:8c:84:
1e:f5:e2:f1:a0:7a:83:fa:1b:dc:39:4e:9a:b8:45:8c:3c:08:
d2:c3:a4:2b:3c:fe:98:ea:01:4e:21:5a:f2:90:2a:66:3d:99:
a7:02:b1:6d:60:69:c7:7d:67:43:a5:80:d4:3a:d6:bd:bf:2c:
0c:74:81:74:19:de:62:dc:0b:ba:24:d5:8e:a6:c3:c5:2e:c1:
96:68:16:1e:1a:ca:70:59:93:83:b4:9d:bf:a0:e6:9d:b8:3e:
8f:83:b5:9e:19:6b:1e:10:e1:aa:07:0c:41:5b:35:19:8d:6a:
3e:4c:f0:9d:10:54:78:a7:9a:af:fc:d9:26:c5:fe:71:4f:81:
93:60:33:8e:a9:b3:91:cf:a0:3e:59:91:21:3f:7f:84:5d:6f:
32:42:26:7a:84:47:f1:b6:1b:de:be:16:2c:f9:b4:51:2e:35:
f0:62:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:03 2026 by rpki-client