Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: dfq820nJ50h4GrRnksibKSjFHUr4yRo6kYIRC+bOisY=
Subject key identifier: 71:AF:6B:AB:16:29:0E:12:56:B0:D1:BA:48:10:44:D3:46:94:3F:25
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019F90908E0B45FB9AF911B6FBB96EC1DA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 20:00:20 +0000
Manifest this update: Thu 23 Jul 2026 20:00:20 +0000
Manifest next update: Fri 24 Jul 2026 20:00:20 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: De4gh/4VN8e+h2kLY9W3u042DMWAD4uVEiM+Zgq2Bac=)
2: VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa (hash: kyHIvFWkdubKP45nhTZVtmGDoRj39kZ1HhwdWsoGzIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:8e:0b:45:fb:9a:f9:11:b6:fb:b9:6e:c1:da:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Jul 23 20:00:20 2026 GMT
Not After : Jul 24 20:00:20 2026 GMT
Subject: CN=71af6bab16290e1256b0d1ba481044d346943f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:91:05:33:82:cb:d9:6d:26:f7:07:f8:70:
2e:4a:ce:c2:ec:61:01:41:5a:c9:5d:f1:db:17:77:
dd:57:8e:c8:f3:0d:0c:f6:75:6f:1e:57:b5:95:79:
21:0b:4c:84:f8:f8:d8:56:c0:70:e7:56:f6:59:da:
4a:ac:04:6a:19:a2:9b:c9:b8:7e:2a:20:42:b8:ca:
b6:3a:42:df:6e:d2:d5:8e:1d:6f:70:4d:89:e9:1b:
b7:19:49:bc:d5:30:59:26:d3:0e:1d:e2:8d:49:66:
c2:bb:f6:93:07:5d:11:bb:2f:78:c8:5a:71:d4:d3:
54:a6:75:12:7b:1f:9f:87:d5:b4:e4:4c:67:c0:02:
23:7c:84:d8:7f:f9:09:d4:5a:b7:8b:5e:a4:23:c7:
a0:ad:7f:a3:eb:74:25:5c:d2:6b:40:34:84:60:d6:
dc:1a:22:6e:06:79:cc:57:38:e5:9c:06:3a:36:8c:
9b:43:4f:6d:0d:4f:fa:ee:a5:b9:e4:72:d5:f5:62:
f9:eb:f8:3c:a9:60:e5:1e:7e:7e:40:dc:f8:06:44:
1c:8f:be:48:b6:c7:17:69:2e:41:26:40:31:42:e9:
8b:01:c3:e4:28:b1:5a:a2:63:fb:dc:b1:ba:25:f6:
7e:c3:62:88:93:67:a3:84:4f:4b:8a:b4:6d:3a:f0:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:6B:AB:16:29:0E:12:56:B0:D1:BA:48:10:44:D3:46:94:3F:25
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1f:ed:83:ce:52:05:1e:bd:60:63:81:44:d8:78:fb:2a:10:
1a:e2:04:69:be:c6:65:85:99:1b:25:7a:3d:1a:11:b1:7c:e2:
66:dd:34:38:30:ae:02:eb:97:1e:b9:20:bd:42:2e:7b:74:d8:
96:f9:f8:44:55:90:7d:09:bd:a5:da:37:cd:9a:e8:2c:30:9a:
d6:f4:b2:59:46:24:e9:a7:c5:6e:42:44:f0:86:3d:c4:ee:45:
3d:c5:76:99:d0:11:20:b4:57:f0:9d:f4:46:74:d2:3f:72:76:
97:59:62:19:5d:00:40:01:98:89:c5:f5:ea:d5:03:b0:dc:a3:
b6:d9:f2:71:04:ad:af:f3:47:b3:c6:f7:81:e3:ee:62:f9:92:
84:24:59:37:e7:a6:3a:37:83:d1:36:f0:55:c6:ea:d5:af:e6:
9e:b1:fa:66:88:9f:6d:12:e8:0c:eb:c3:ea:15:e0:1a:50:d1:
7a:5b:48:80:32:26:4c:61:9b:14:ae:e3:18:6e:04:e1:87:0d:
6d:30:c0:11:42:b0:03:fa:46:04:66:a6:34:6a:98:1a:38:b6:
5f:a8:44:99:b2:cf:a8:60:2d:23:a3:0e:e1:43:7a:47:98:4e:
c4:1e:35:2a:b2:45:d2:a5:2c:ee:4c:bb:92:68:3a:ef:6a:5c:
c7:68:b8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkI4LRfua+RG2+7luwdoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm
MWNjZTEwHhcNMjYwNzIzMjAwMDIwWhcNMjYwNzI0MjAwMDIwWjAzMTEwLwYDVQQD
Eyg3MWFmNmJhYjE2MjkwZTEyNTZiMGQxYmE0ODEwNDRkMzQ2OTQzZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo2RBTOCy9ltJvcH+HAuSs7C7GEB
QVrJXfHbF3fdV47I8w0M9nVvHle1lXkhC0yE+PjYVsBw51b2WdpKrARqGaKbybh+
KiBCuMq2OkLfbtLVjh1vcE2J6Ru3GUm81TBZJtMOHeKNSWbCu/aTB10Ruy94yFpx
1NNUpnUSex+fh9W05ExnwAIjfITYf/kJ1Fq3i16kI8egrX+j63QlXNJrQDSEYNbc
GiJuBnnMVzjlnAY6NoybQ09tDU/67qW55HLV9WL56/g8qWDlHn5+QNz4BkQcj75I
tscXaS5BJkAxQumLAcPkKLFaomP73LG6JfZ+w2KIk2ejhE9LirRtOvA20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGva6sWKQ4SVrDRukgQRNNGlD8lMB8GA1UdIwQY
MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt
NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3
LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOh/tg85S
BR69YGOBRNh4+yoQGuIEab7GZYWZGyV6PRoRsXziZt00ODCuAuuXHrkgvUIue3TY
lvn4RFWQfQm9pdo3zZroLDCa1vSyWUYk6afFbkJE8IY9xO5FPcV2mdARILRX8J30
RnTSP3J2l1liGV0AQAGYicX16tUDsNyjttnycQStr/NHs8b3gePuYvmShCRZN+em
OjeD0TbwVcbq1a/mnrH6ZoifbRLoDOvD6hXgGlDReltIgDImTGGbFK7jGG4E4YcN
bTDAEUKwA/pGBGamNGqYGji2X6hEmbLPqGAtI6MO4UN6R5hOxB41KrJF0qUs7ky7
kmg672pcx2i4OA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:03 2026 by rpki-client