Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: 8ILcAxW2wiXQRvNKfpiQy0/El7x4vYEPc7YPhuAoitE=
Subject key identifier: CE:D5:03:5E:78:30:58:09:6B:9E:27:39:D9:05:3D:26:15:9B:BE:58
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019F9090E8381E9DD1343A36E1471AF1CC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 20:00:43 +0000
Manifest this update: Thu 23 Jul 2026 20:00:43 +0000
Manifest next update: Fri 24 Jul 2026 20:00:43 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: xp5E+tyNgdOI/Qi4zHhsLl6LSYrC0NIzEhNcHfyMIlY=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e8:38:1e:9d:d1:34:3a:36:e1:47:1a:f1:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jul 23 20:00:43 2026 GMT
Not After : Jul 24 20:00:43 2026 GMT
Subject: CN=ced5035e783058096b9e2739d9053d26159bbe58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:a4:50:7e:6f:22:8b:61:1b:ff:44:34:fa:
cb:c9:58:68:8c:00:9e:91:c5:17:db:d7:34:8b:a0:
1a:c2:14:ee:0b:8d:9b:62:10:36:1d:09:cf:75:e0:
bb:33:b9:70:4c:f9:4b:fa:6d:5b:5b:94:f4:5c:b7:
13:27:c9:08:52:69:88:1b:73:e5:67:b2:74:4a:41:
46:0b:21:d8:36:3d:5d:ca:fe:7a:5d:4d:4a:6c:ca:
68:7f:2d:9e:64:78:35:0a:43:a8:f3:c9:dd:cb:0c:
a9:82:a2:d9:8c:01:c6:c5:9d:25:fc:b9:78:43:8f:
f1:dd:81:5d:35:7c:e2:dd:29:4f:88:d1:da:8f:b7:
e7:01:2a:b2:6e:46:8a:58:60:50:9f:03:e2:bf:f7:
d9:f4:6a:0e:f8:ec:fa:c9:42:ee:b3:d1:64:9f:17:
83:0f:d9:bd:a6:90:10:57:d2:d1:8c:e4:25:91:52:
be:e4:26:3b:5f:cb:99:0e:a1:0e:d7:3a:c3:ba:cd:
48:0a:fc:83:b2:88:dc:d2:c6:11:aa:af:3c:af:87:
21:e8:34:4b:c9:78:ad:a9:42:4d:8b:2c:f2:a3:10:
8e:06:5d:ca:e0:36:63:04:e7:63:b1:42:ff:fb:d3:
58:d6:05:89:33:11:b5:a1:a7:e2:b2:a8:e4:f8:d7:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:03:5E:78:30:58:09:6B:9E:27:39:D9:05:3D:26:15:9B:BE:58
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:f9:aa:5c:47:61:e2:81:87:01:54:1e:b4:e0:b9:c6:aa:
c7:7c:ee:a1:b6:74:aa:f7:98:cc:81:e1:51:ac:18:9a:85:d0:
db:2e:9e:56:ff:d8:22:c0:21:7e:6b:68:2e:da:e5:c5:6f:f1:
4f:75:7e:6f:ae:bd:ff:c1:17:fd:22:de:84:5b:7d:cd:a9:1e:
e6:32:97:fd:f0:ab:ef:f6:87:b4:b2:bc:ce:38:91:67:2a:92:
55:6a:39:39:e2:b3:4e:d7:cd:fb:ac:97:ae:3d:9f:d0:fc:ed:
46:69:eb:3b:cf:d1:df:aa:e2:63:e2:b9:7a:0f:e9:f4:da:41:
1a:b5:b7:aa:e3:ba:76:ad:6e:ef:18:6a:4f:f5:09:dd:79:1c:
20:94:24:dd:b5:38:1b:13:40:50:7e:5f:96:08:b5:2c:1c:b5:
10:26:4b:4f:4c:fe:13:9f:3e:7d:bf:97:b8:cd:c5:68:97:f7:
ce:d7:a0:7c:a0:4b:bb:9c:c4:0a:65:cf:10:ca:f3:74:0c:d3:
d1:00:66:23:45:74:7d:6e:e1:93:4b:cf:11:ff:fa:60:ec:24:
b0:6d:06:cc:65:f7:90:c2:76:e9:67:de:52:9f:4b:42:01:e0:
ae:7e:a2:55:16:33:7e:f9:17:72:e7:63:3f:f7:c5:b1:88:f4:
fa:54:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:27 2026 by rpki-client