Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
File: 2PDDRgpyhimVO1uoZcPQDBdsWYA.mft (raw, json)
Hash identifier: xou3PsyqtRREGakCVKsXrB+n7/2qFZp4eSCXmR70E8k=
Subject key identifier: B9:CA:28:F4:59:38:89:41:5F:84:21:A9:F6:D2:ED:EE:02:6E:99:44
Authority key identifier: D8:F0:C3:46:0A:72:86:29:95:3B:5B:A8:65:C3:D0:0C:17:6C:59:80
Certificate issuer: /CN=d8f0c3460a728629953b5ba865c3d00c176c5980
Certificate serial: 019F9059987443F8738000726D9A8691FD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:00:18 +0000
Manifest this update: Thu 23 Jul 2026 19:00:18 +0000
Manifest next update: Fri 24 Jul 2026 19:00:18 +0000
Files and hashes: 1: 2PDDRgpyhimVO1uoZcPQDBdsWYA.crl (hash: UKmZegzTQneLqEk+40sW61kqIddc7X3UDPQiTMbz5G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:98:74:43:f8:73:80:00:72:6d:9a:86:91:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f0c3460a728629953b5ba865c3d00c176c5980
Validity
Not Before: Jul 23 19:00:18 2026 GMT
Not After : Jul 24 19:00:18 2026 GMT
Subject: CN=b9ca28f4593889415f8421a9f6d2edee026e9944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:51:a9:e1:f2:56:e1:90:db:a5:b1:f6:83:
2f:a2:f6:a3:2b:c2:ea:46:8f:23:42:06:e1:a9:90:
e9:97:b5:ab:49:bd:df:05:11:17:0d:da:7b:e9:1c:
c9:41:bd:ea:8e:08:49:a3:d4:fb:0c:45:3a:48:d1:
2f:ba:69:8a:51:7b:62:dc:51:3d:c1:77:11:7f:19:
1c:cb:0c:83:ae:62:ec:99:38:c6:a3:be:cb:f8:0f:
50:c8:06:c3:1e:ea:a3:64:bf:0d:20:36:3d:e1:58:
c8:76:4e:42:9d:84:e0:b4:36:64:4e:3b:7b:fd:e4:
b3:8b:7a:36:b9:17:8c:34:ad:ea:7a:dd:1a:b3:ee:
f0:b9:43:ba:87:77:68:71:8d:f6:70:c8:13:52:d7:
53:c3:d1:65:64:4c:83:f8:b4:21:11:a9:bc:e2:9a:
77:cc:0a:33:ba:68:ba:e6:dc:5b:01:62:3f:34:cb:
22:ef:b5:69:dd:3f:1a:1b:5b:d5:e3:35:2f:b2:d4:
b4:9f:3f:74:a4:5d:ee:57:ae:07:c9:c1:2c:55:0d:
90:21:51:f3:bf:cf:34:d3:f6:f2:4a:b5:96:6c:cf:
99:57:fd:9f:fc:7e:00:9e:9a:8e:29:e7:76:26:75:
bb:8e:7e:e1:34:31:cf:66:92:47:65:cf:20:30:8b:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:28:F4:59:38:89:41:5F:84:21:A9:F6:D2:ED:EE:02:6E:99:44
X509v3 Authority Key Identifier:
keyid:D8:F0:C3:46:0A:72:86:29:95:3B:5B:A8:65:C3:D0:0C:17:6C:59:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:aa:7c:61:70:09:8b:29:da:df:14:fc:49:6b:4c:c0:56:66:
9d:d7:bc:e7:01:9c:a1:f7:15:98:05:76:3a:d6:bf:b2:ac:19:
95:8a:76:00:ff:65:ab:cc:87:0b:bf:d7:d5:10:43:0a:7a:db:
f8:5e:1d:65:2a:13:50:e9:59:28:c8:4d:ca:6f:fb:5e:1a:39:
b5:24:d1:44:24:e0:57:91:ec:99:2a:2a:1a:fd:14:c6:3d:85:
30:89:77:96:b8:f1:5d:f1:77:05:f4:a2:2f:d2:b4:2e:70:f9:
b3:3d:12:ba:46:bf:cb:f4:2a:0e:50:cc:11:d6:e9:2b:5c:44:
9d:c0:d7:80:f1:f2:27:6c:c5:19:0c:7a:53:52:f0:25:7a:4b:
63:00:2e:70:52:08:a8:a9:c0:32:0a:ab:e3:96:b2:cd:90:6f:
49:01:55:d7:2f:f6:d2:46:55:be:5f:e5:19:4c:c3:e4:7c:20:
9c:ef:97:26:0a:52:37:3e:a5:5d:a0:ac:3c:4a:e0:db:98:5a:
d4:2d:a4:17:44:6c:29:3e:14:35:6b:3f:e8:6b:c8:76:f0:c6:
b4:c8:df:3c:c8:2a:f7:ed:c2:59:69:b9:94:98:c5:25:b0:97:
c5:f3:14:30:b8:2b:ad:a2:7b:a0:ba:ca:e2:ed:23:56:11:88:
1f:b8:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:52 2026 by rpki-client