Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json)
Hash identifier: SBdEPcBFlECQmvlLuUkWLg1FmAl+/uepx81MtOZpeNc=
Subject key identifier: C2:00:43:D5:7E:BA:BB:89:E7:F5:EB:41:BE:45:71:A3:17:A2:1B:8F
Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Certificate serial: 019F90234EA0D95125BD144FE60E90DEE9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
Manifest number: 0441
Signing time: Thu 23 Jul 2026 18:01:00 +0000
Manifest this update: Thu 23 Jul 2026 18:01:00 +0000
Manifest next update: Fri 24 Jul 2026 18:01:00 +0000
Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: V4mxv0Lo+kcqnhxf+P/f5tJpNQ9Tr139Y6GEJ5kmHLI=)
2: KbWTyRJitPC32LXPQqBi691clT8.roa (hash: mIu7f2xGRcIDk+hlkwsSKHTB5jDl1uwNz6s4KpvqXDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:4e:a0:d9:51:25:bd:14:4f:e6:0e:90:de:e9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Validity
Not Before: Jul 23 18:01:00 2026 GMT
Not After : Jul 24 18:01:00 2026 GMT
Subject: CN=c20043d57ebabb89e7f5eb41be4571a317a21b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:fd:af:c7:d6:7a:91:7f:b0:eb:53:b5:f3:
29:20:2a:b7:e5:34:26:b8:82:0a:00:fa:63:7b:74:
27:e1:5d:a4:02:7a:05:ec:79:88:ab:48:e3:d2:f7:
8c:02:25:b9:c6:84:dc:86:f4:db:49:98:6e:fe:33:
25:40:84:0f:d2:bf:6f:48:29:60:dd:eb:39:ea:83:
5e:f1:b5:7e:44:cc:79:ee:3b:29:62:9d:aa:b6:24:
75:69:21:ae:e6:34:0e:bb:d4:69:02:45:65:a8:42:
b7:5b:e5:81:c8:0b:65:85:29:da:c4:10:52:be:18:
55:5e:6e:19:aa:ca:1e:bc:cb:50:21:f9:3e:20:79:
80:ff:06:5b:d7:29:14:63:59:8a:4c:dd:1c:70:0f:
77:59:be:95:d2:db:10:14:2b:71:cf:9a:fb:2e:2a:
85:f8:d2:0c:f5:09:25:63:f1:61:0b:42:04:ef:d0:
17:19:5e:22:a8:bc:05:9c:3e:6f:3c:94:37:18:81:
73:e4:e6:fc:53:40:7a:d3:66:50:4c:de:0e:3f:2f:
0d:d7:d4:1b:e2:52:43:e0:ec:16:1c:99:7b:32:a0:
e4:45:7d:65:e8:28:4d:25:d3:38:c7:90:6a:0a:54:
dc:76:07:c8:06:bc:f1:b2:29:f9:93:f3:d7:7e:03:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:00:43:D5:7E:BA:BB:89:E7:F5:EB:41:BE:45:71:A3:17:A2:1B:8F
X509v3 Authority Key Identifier:
keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:f1:2c:16:35:86:86:21:ca:26:51:c3:06:27:d5:90:6d:
32:eb:08:90:b7:18:61:56:7d:05:49:a4:83:e4:f5:3c:13:fd:
73:7e:0b:30:6a:1a:3b:45:d3:1e:42:f8:21:a6:d4:14:96:60:
ee:b6:55:36:6c:8b:d1:01:96:91:f8:46:50:6a:56:8c:e4:41:
f2:95:a1:90:fd:bd:39:23:ff:5f:bc:66:13:36:45:41:12:95:
e1:7c:b8:82:28:9b:96:cf:c4:67:20:21:47:38:2c:b5:eb:e3:
61:2a:6d:08:1a:66:e3:ee:73:76:2e:f8:14:49:45:f2:d9:31:
75:fe:f1:de:d8:89:94:c8:df:65:62:8b:1f:22:88:f4:21:98:
ad:de:8c:e0:cb:79:5b:7c:c3:a5:a8:95:e2:bb:0a:bd:5b:6d:
2c:0c:7d:cf:c2:5a:30:a5:97:8c:c4:4f:ef:34:cd:01:ff:16:
a2:3c:13:55:97:82:37:84:f1:72:99:17:10:fa:6c:0c:7e:d7:
9e:54:df:c5:06:d9:09:6b:f4:2d:ef:12:52:73:3c:fe:eb:35:
2a:62:fd:1d:b8:e3:f2:a8:85:c5:16:9b:90:1c:e4:9e:53:ee:
ef:32:2f:3d:04:56:d8:4a:01:6f:4e:c3:12:a8:d5:83:02:a0:
e3:6b:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:34 2026 by rpki-client