Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: NS/5otPnLOSkBJW0yGBUoNt64UDRm/2aAqu1DlKzYlQ=
Subject key identifier: E5:76:E2:70:5A:AB:51:F9:2C:05:6E:7B:27:A3:EA:EC:21:ED:17:4E
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019F8FECC9C5755264FC378290AF69FFB2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 19DB
Signing time: Thu 23 Jul 2026 17:01:27 +0000
Manifest this update: Thu 23 Jul 2026 17:01:27 +0000
Manifest next update: Fri 24 Jul 2026 17:01:27 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: 4kthfCIwnUBGv1+0oHjqJu9WiTIYooc+DdHBBONJbm8=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:c9:c5:75:52:64:fc:37:82:90:af:69:ff:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jul 23 17:01:27 2026 GMT
Not After : Jul 24 17:01:27 2026 GMT
Subject: CN=e576e2705aab51f92c056e7b27a3eaec21ed174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:7e:b5:f0:3a:75:25:c4:83:5c:21:d3:d3:
97:9c:e0:30:2d:7a:5a:73:52:ae:53:cf:20:e4:20:
16:7f:0a:d4:a6:cd:aa:5f:fd:98:e3:ff:8c:21:a5:
12:4d:1a:b2:6c:9a:01:34:1f:7d:3b:9f:c3:fb:11:
c5:38:ae:cf:61:f3:f2:a9:64:b1:34:8a:77:3d:0a:
53:7d:1a:1f:62:ed:e6:4d:67:bc:e9:b4:50:bc:e5:
38:fe:1b:6a:3c:cf:d6:92:dc:97:d4:78:4c:c3:c2:
7e:e5:27:9e:04:46:09:cc:9c:72:a9:59:6a:a6:42:
bd:ff:03:e7:1b:1b:6d:b3:36:05:f5:f2:60:91:26:
7a:5f:53:6d:ec:df:85:00:9e:74:35:fe:7b:2f:49:
0c:fd:61:20:32:82:52:17:91:e8:37:1e:06:8c:84:
76:43:4a:35:46:95:6f:ae:cb:c8:90:fe:0f:85:57:
eb:93:ce:06:14:0d:dd:fe:45:d0:16:96:c8:88:d2:
e7:62:72:1d:67:35:7a:d2:d8:42:c3:e7:7f:95:59:
b2:9c:a1:f3:1c:11:16:30:8f:e7:88:a9:49:0f:9f:
fc:66:f2:1c:46:dd:88:15:c5:ae:f5:9e:5b:04:26:
57:1d:9a:a3:5e:dc:b1:ff:55:fd:63:ae:38:5f:01:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:E2:70:5A:AB:51:F9:2C:05:6E:7B:27:A3:EA:EC:21:ED:17:4E
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4a:9e:41:b1:f5:08:38:bd:59:5d:cc:17:67:5a:94:a1:82:
88:74:c0:f8:2f:a1:f0:56:ca:d6:33:22:81:a2:c1:d1:e1:2e:
28:8c:c6:4c:bc:85:36:16:e3:fd:81:7f:ea:f4:bc:82:7f:63:
0f:0b:47:1a:d0:11:fe:a9:b5:2b:5f:ce:74:8a:9b:04:7c:94:
9e:5a:86:ea:2c:f9:74:2a:95:6e:30:ad:92:38:70:11:13:df:
6e:44:ec:05:31:98:e1:12:37:80:7e:08:9b:67:29:a9:26:f0:
30:2f:ea:24:44:40:5c:9b:63:67:aa:9b:14:80:d7:44:94:63:
6d:3a:b5:1a:d1:91:78:1b:74:b5:a8:3a:9d:a5:da:c1:62:4d:
76:33:3f:23:ca:1e:45:f6:6a:0a:28:da:8a:e4:16:52:d8:5c:
6b:35:33:95:ed:16:21:87:88:e7:e4:91:f4:91:18:35:c3:fe:
c6:2f:75:b3:32:30:90:31:5c:3a:48:74:e0:2d:19:58:ef:da:
23:31:d9:dd:85:fc:7a:ca:bb:d7:1c:da:32:a0:73:57:25:48:
cf:00:d5:9f:bf:1e:82:74:fa:a7:89:03:17:db:6b:da:e5:c1:
75:fb:7d:5c:c7:fb:f0:16:0f:ca:dd:94:1c:52:29:63:6e:36:
eb:e0:95:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7MnFdVJk/DeCkK9p/7LiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjYwNzIzMTcwMTI3WhcNMjYwNzI0MTcwMTI3WjAzMTEwLwYDVQQD
EyhlNTc2ZTI3MDVhYWI1MWY5MmMwNTZlN2IyN2EzZWFlYzIxZWQxNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKd+tfA6dSXEg1wh09OXnOAwLXpa
c1KuU88g5CAWfwrUps2qX/2Y4/+MIaUSTRqybJoBNB99O5/D+xHFOK7PYfPyqWSx
NIp3PQpTfRofYu3mTWe86bRQvOU4/htqPM/WktyX1HhMw8J+5SeeBEYJzJxyqVlq
pkK9/wPnGxttszYF9fJgkSZ6X1Nt7N+FAJ50Nf57L0kM/WEgMoJSF5HoNx4GjIR2
Q0o1RpVvrsvIkP4PhVfrk84GFA3d/kXQFpbIiNLnYnIdZzV60thCw+d/lVmynKHz
HBEWMI/niKlJD5/8ZvIcRt2IFcWu9Z5bBCZXHZqjXtyx/1X9Y644XwHPLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOV24nBaq1H5LAVueyej6uwh7RdOMB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUqeQbH1
CDi9WV3MF2dalKGCiHTA+C+h8FbK1jMigaLB0eEuKIzGTLyFNhbj/YF/6vS8gn9j
DwtHGtAR/qm1K1/OdIqbBHyUnlqG6iz5dCqVbjCtkjhwERPfbkTsBTGY4RI3gH4I
m2cpqSbwMC/qJERAXJtjZ6qbFIDXRJRjbTq1GtGReBt0tag6naXawWJNdjM/I8oe
RfZqCijaiuQWUthcazUzle0WIYeI5+SR9JEYNcP+xi91szIwkDFcOkh04C0ZWO/a
IzHZ3YX8esq71xzaMqBzVyVIzwDVn78egnT6p4kDF9tr2uXBdft9XMf78BYPyt2U
HFIpY2426+CV7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:01 2026 by rpki-client