Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
File: 2fGfBczyIhOYRpwL6N3ATOFOE1o.mft (raw, json)
Hash identifier: 2VRDJtxA16J2TC+9dv4RHbgH5awg88n2W19SDRtxJro=
Subject key identifier: E1:7C:F5:6E:6E:17:EE:61:B3:C7:63:B5:7C:5E:6D:1F:C1:E3:E1:81
Authority key identifier: D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
Certificate issuer: /CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Certificate serial: 019F927F69F564D361034718A7F03B7D2197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
Manifest number: 1595
Signing time: Fri 24 Jul 2026 05:00:51 +0000
Manifest this update: Fri 24 Jul 2026 05:00:51 +0000
Manifest next update: Sat 25 Jul 2026 05:00:51 +0000
Files and hashes: 1: 2fGfBczyIhOYRpwL6N3ATOFOE1o.crl (hash: vkcUFvkoUydBndhUZTMKpUaRVNyJ7brMcWBsO5kTyY8=)
2: D5r66qCGlpT6UM1S2JZDnwLEq_g.roa (hash: AsE96zhoWPvQynJOqug2jdhORzzqgKtcCYsyjnQ29Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:69:f5:64:d3:61:03:47:18:a7:f0:3b:7d:21:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Validity
Not Before: Jul 24 05:00:51 2026 GMT
Not After : Jul 25 05:00:51 2026 GMT
Subject: CN=e17cf56e6e17ee61b3c763b57c5e6d1fc1e3e181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:cd:64:6a:5c:bd:68:e5:93:f1:6f:07:76:
e1:8e:b8:5c:00:a8:a8:cc:24:a7:37:db:49:72:7a:
53:f3:ad:7f:24:ee:12:55:c7:a5:30:a2:60:0e:9e:
cf:ed:01:f5:41:3a:b3:a8:76:f3:a3:d7:e5:27:56:
2f:af:c2:e6:34:53:05:75:e7:47:f4:96:1b:a0:06:
fe:a9:d6:6e:6b:86:dd:33:27:4e:40:71:df:64:aa:
75:7f:22:33:c9:52:f6:89:cd:59:e2:11:e1:f5:e5:
af:e9:4a:3b:14:31:7f:09:0e:6b:56:84:89:70:63:
00:fe:22:d9:3a:21:01:13:49:56:79:c4:1d:9d:c1:
bd:f8:96:5d:13:d9:24:fc:6f:d0:aa:df:4f:2e:9a:
0d:cd:fb:3e:01:72:4a:51:85:86:6d:b2:ca:c4:07:
e9:fe:f7:6f:f4:f0:71:90:c7:c9:40:cf:d5:85:8f:
ab:ca:da:5a:26:05:a8:b7:54:24:54:62:79:bc:32:
db:08:48:08:13:f5:50:75:2f:0a:80:9e:0d:3d:24:
88:4d:94:75:69:99:fd:8d:47:a4:96:36:3d:02:b1:
fe:54:be:c1:37:8a:ca:3c:4b:d7:7b:7c:10:7d:2f:
77:09:e0:a7:ba:38:a2:fc:f7:05:62:23:b2:59:52:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:F5:6E:6E:17:EE:61:B3:C7:63:B5:7C:5E:6D:1F:C1:E3:E1:81
X509v3 Authority Key Identifier:
keyid:D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8c:0b:e7:4f:4a:4a:15:c6:67:0b:a3:65:23:0f:f1:29:65:
1f:4d:95:9b:89:e9:d1:e4:1c:10:8b:67:56:5d:86:9c:73:de:
80:4b:fd:46:91:72:71:7e:c8:0e:96:b6:23:77:4b:b5:4e:4c:
53:e0:04:1d:eb:44:b7:59:67:99:07:b0:89:4b:fb:eb:49:81:
be:11:ce:4f:0f:00:19:1e:6b:c2:32:2b:00:9e:d1:0f:66:05:
75:57:c0:04:b0:26:6c:2e:6f:1b:38:2e:24:3a:0c:9c:89:c1:
68:21:47:9e:e8:1f:6c:ef:7c:f5:fe:82:ff:86:8b:9b:64:e9:
8f:bf:2c:40:7a:d5:59:c9:48:4f:31:08:a8:85:99:ed:c5:c4:
94:15:73:9a:87:f3:f0:34:a3:67:6c:0e:ea:34:f8:72:b3:68:
f1:ff:b2:4a:0e:8f:c1:c3:6e:ac:be:2f:cc:70:dd:58:5d:f7:
d8:86:5e:44:e0:1c:73:bf:65:61:6f:35:d0:f9:98:d4:33:00:
24:e4:f2:41:5f:62:d7:2a:14:46:98:8a:94:1a:f5:92:2b:b9:
16:9c:a9:bc:cc:7f:03:3b:db:4f:d8:ae:cd:1c:be:ab:20:4b:
14:32:1c:6f:2e:ac:73:bd:e4:6a:5a:75:5b:10:7d:6d:2f:71:
a7:93:9b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf2n1ZNNhA0cYp/A7fSGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjE5ZjA1Y2NmMjIyMTM5ODQ2OWMwYmU4ZGRjMDRjZTE0
ZTEzNWEwHhcNMjYwNzI0MDUwMDUxWhcNMjYwNzI1MDUwMDUxWjAzMTEwLwYDVQQD
EyhlMTdjZjU2ZTZlMTdlZTYxYjNjNzYzYjU3YzVlNmQxZmMxZTNlMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy67NZGpcvWjlk/FvB3bhjrhcAKio
zCSnN9tJcnpT861/JO4SVcelMKJgDp7P7QH1QTqzqHbzo9flJ1Yvr8LmNFMFdedH
9JYboAb+qdZua4bdMydOQHHfZKp1fyIzyVL2ic1Z4hHh9eWv6Uo7FDF/CQ5rVoSJ
cGMA/iLZOiEBE0lWecQdncG9+JZdE9kk/G/Qqt9PLpoNzfs+AXJKUYWGbbLKxAfp
/vdv9PBxkMfJQM/VhY+rytpaJgWot1QkVGJ5vDLbCEgIE/VQdS8KgJ4NPSSITZR1
aZn9jUekljY9ArH+VL7BN4rKPEvXe3wQfS93CeCnujii/PcFYiOyWVJo0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF89W5uF+5hs8djtXxebR/B4+GBMB8GA1UdIwQY
MBaAFNnxnwXM8iITmEacC+jdwEzhThNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZHZkJjenlJaE9ZUnB3TDZOM0FUT0ZPRTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZTMyNDYtZmJhNi00ZTFkLTgwODkt
NGZmMzMzMzgzNjFlLzEvMmZHZkJjenlJaE9ZUnB3TDZOM0FUT0ZPRTFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZTMyNDYtZmJhNi00ZTFkLTgwODktNGZmMzMzMzgzNjFl
LzEvMmZHZkJjenlJaE9ZUnB3TDZOM0FUT0ZPRTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIwL509K
ShXGZwujZSMP8SllH02Vm4np0eQcEItnVl2GnHPegEv9RpFycX7IDpa2I3dLtU5M
U+AEHetEt1lnmQewiUv760mBvhHOTw8AGR5rwjIrAJ7RD2YFdVfABLAmbC5vGzgu
JDoMnInBaCFHnugfbO989f6C/4aLm2Tpj78sQHrVWclITzEIqIWZ7cXElBVzmofz
8DSjZ2wO6jT4crNo8f+ySg6PwcNurL4vzHDdWF332IZeROAcc79lYW810PmY1DMA
JOTyQV9i1yoURpiKlBr1kiu5FpypvMx/AzvbT9iuzRy+qyBLFDIcby6sc73kalp1
WxB9bS9xp5Ob/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:29 2026 by rpki-client