Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.mft (raw, json)
Hash identifier: nU5pSOdg+vCj4FUYUaT3qDxwAyxEUDd/grzfLfswdhM=
Subject key identifier: D1:91:04:2B:29:23:D2:63:89:93:2E:CE:16:5C:E0:D6:E3:35:47:CA
Authority key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Certificate issuer: /CN=da66bbf0d459623626a99bbe2425e02072090b4f
Certificate serial: 019F8F10E429356DD72C84B6B10DDE8A4500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
Manifest number: 0479
Signing time: Thu 23 Jul 2026 13:01:16 +0000
Manifest this update: Thu 23 Jul 2026 13:01:16 +0000
Manifest next update: Fri 24 Jul 2026 13:01:16 +0000
Files and hashes: 1: 2ma78NRZYjYmqZu-JCXgIHIJC08.crl (hash: muKrg/pbNbFpTdzNlO3cHNflBCbOV4w/fjjfvr37ByY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:e4:29:35:6d:d7:2c:84:b6:b1:0d:de:8a:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Validity
Not Before: Jul 23 13:01:16 2026 GMT
Not After : Jul 24 13:01:16 2026 GMT
Subject: CN=d191042b2923d26389932ece165ce0d6e33547ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:a7:e4:e4:ab:09:f6:6a:15:ea:4c:16:3f:
b1:bd:06:1c:9c:be:5f:e6:d6:fb:6a:9c:c6:04:71:
93:f7:e3:6e:59:4d:bf:24:48:94:85:7f:4c:a0:f3:
77:86:a7:87:a0:42:df:1b:4d:7d:25:11:9e:21:03:
ca:7c:7e:f5:3d:42:21:ce:c5:be:e8:0c:58:8b:75:
aa:aa:83:4e:95:9f:8d:49:f6:1d:71:03:d2:51:50:
a6:ba:ff:30:d6:7d:52:72:5a:8d:04:0d:45:21:6c:
1b:06:61:a5:02:c3:85:3c:c4:49:a0:3c:87:0c:18:
f2:01:1b:d4:60:da:72:7d:78:79:c3:40:b2:de:e8:
10:f6:32:e7:a5:47:db:1b:4d:64:05:2e:2f:b6:cc:
63:39:b3:b1:91:83:1f:6d:9d:1e:87:09:00:b8:53:
72:8e:2c:fe:7d:7f:2d:c3:a8:37:48:3e:92:5e:6e:
d3:f5:d4:02:d3:99:ef:1a:44:9d:9a:e7:a5:72:79:
66:55:2f:39:79:14:b8:df:fb:d8:dd:cb:9d:e7:ec:
38:3a:64:78:cb:44:db:71:da:c3:31:bd:a1:5e:72:
4d:f1:47:9d:71:cf:f2:7a:b7:39:0f:cb:db:57:96:
37:4b:80:17:9b:76:6d:f5:1b:99:76:62:99:c2:d7:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:04:2B:29:23:D2:63:89:93:2E:CE:16:5C:E0:D6:E3:35:47:CA
X509v3 Authority Key Identifier:
keyid:DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:1b:23:19:23:2d:53:30:74:d2:f0:fd:13:d9:4e:ab:6b:
bd:c7:c4:d4:da:0d:e9:8f:44:4e:3e:7c:81:37:59:25:02:ac:
26:c4:75:80:f3:a8:ef:a1:e3:fa:c6:b2:4a:bf:cb:79:63:14:
9f:f8:81:bf:5f:43:fe:86:8f:40:e0:66:19:72:6b:55:2d:73:
bc:4b:91:64:39:09:56:e2:77:ea:9a:e7:a5:f9:0e:4e:fa:22:
c0:30:c8:b8:36:dd:c0:76:34:aa:47:e6:28:62:7d:69:c5:79:
b2:e2:e4:5d:35:c3:7e:e5:82:2c:83:90:1b:c9:07:38:98:11:
6a:3c:3f:f1:c8:e3:94:74:7a:42:8f:94:6b:cf:30:ef:26:42:
c0:7d:90:10:f2:06:4a:6e:f5:b5:64:33:9b:43:76:67:ac:39:
b1:fa:a7:6f:1e:71:a4:47:bf:5b:1e:9b:67:66:17:ed:46:2b:
58:dd:b5:46:bf:d6:54:be:92:07:82:7b:af:d5:cb:95:c6:4b:
e2:d1:8a:b9:71:b4:83:21:02:83:67:29:09:c2:a1:c6:97:e2:
27:45:b7:5d:0e:7a:a4:d7:9d:2f:cd:d6:76:9d:1a:2b:02:4e:
33:a6:0f:4a:cb:8b:67:d7:e5:4d:bb:bb:5d:73:b0:c7:2e:c9:
a7:84:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:19 2026 by rpki-client