Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: uc6k2MigVD0xz9gtRASX8ZiRVhtkv9lMLZsfmRSRZ1g=
Subject key identifier: 8F:6F:B3:21:F1:97:6E:D7:01:F0:DC:AD:E2:22:4F:06:B8:25:50:B4
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019F90FEB191B56693CC7061C81620C24F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:00:38 +0000
Manifest this update: Thu 23 Jul 2026 22:00:38 +0000
Manifest next update: Fri 24 Jul 2026 22:00:38 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: UDhoZJcLR1B42QhGZFYwecnOTGj4O34jI3wMNDhkG3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b1:91:b5:66:93:cc:70:61:c8:16:20:c2:4f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Jul 23 22:00:38 2026 GMT
Not After : Jul 24 22:00:38 2026 GMT
Subject: CN=8f6fb321f1976ed701f0dcade2224f06b82550b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:79:3b:b8:d4:f7:b3:31:c0:0f:e7:ad:0c:ab:
18:74:ec:a5:91:be:91:fd:49:15:54:77:b7:2a:6a:
26:8e:ed:24:24:e2:59:65:ba:e3:08:fb:bb:20:6b:
97:53:fc:aa:7e:22:f3:d1:db:81:92:4a:b9:bd:d2:
ff:94:6e:a2:1e:af:78:2e:b7:9d:d4:a1:24:75:2d:
42:e6:93:97:82:2d:ff:3d:7b:51:f8:8f:53:e0:71:
9a:4e:7c:7d:4a:67:fc:c3:47:91:10:e0:c1:93:e1:
61:08:eb:2c:1d:96:a2:fb:9c:58:a8:2b:60:3d:8e:
0f:aa:57:5f:ab:04:0b:74:c7:96:85:23:96:eb:8a:
d5:82:46:5a:a4:c1:ac:86:6f:8b:ae:7d:0d:4c:95:
cd:4a:4c:47:92:75:64:38:b1:c6:ec:8b:2d:b6:cf:
87:44:9f:2b:18:e6:cf:79:1d:b0:79:70:b4:d3:13:
ac:2a:4f:44:21:e7:62:74:3d:eb:11:e4:08:9d:b5:
fe:06:60:5c:25:b6:f6:2a:d4:be:7b:80:30:54:53:
fc:02:0e:be:fd:a4:32:13:64:6f:69:1c:27:22:ad:
ae:fd:03:df:5d:d2:08:36:31:59:ac:26:82:d4:09:
c1:bc:7b:b4:e9:5e:94:e6:1a:a8:be:0e:fe:51:ca:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:B3:21:F1:97:6E:D7:01:F0:DC:AD:E2:22:4F:06:B8:25:50:B4
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:a0:e8:9e:54:b7:a4:ea:4e:4a:ed:b2:b3:b7:0d:c4:9f:
8e:4d:28:9f:fa:ef:69:a2:52:40:bc:20:69:69:95:58:38:a1:
b6:b6:9f:7b:92:29:18:ec:1a:02:72:ec:5a:86:2e:ce:2f:ea:
e4:e6:ba:7d:dc:84:2f:67:10:f2:04:aa:bc:ec:3d:53:67:2a:
dd:fb:62:0a:e6:bd:41:63:09:e9:a5:ff:62:cb:6e:17:5f:8f:
e8:4f:96:39:3d:6c:f4:0e:2c:56:69:b3:d2:a0:a8:f6:b3:9d:
0a:b9:0f:49:01:d2:fa:f1:a8:51:06:89:65:c6:d6:77:0a:18:
2e:ca:a3:4f:c1:9d:42:c8:c7:f4:72:1b:0e:31:10:e1:03:cb:
2a:15:14:57:b4:40:56:a5:22:e9:9d:47:7b:fd:63:3a:50:59:
5e:c4:33:95:63:ff:e5:dd:7d:f5:20:a9:9d:42:ec:4a:b4:0f:
ee:5b:37:8d:a5:7b:86:30:f3:7d:9b:e0:4b:ed:9c:9b:24:1c:
33:2e:b7:a9:25:4b:98:1a:39:c6:04:34:b6:e1:a6:52:f0:36:
b3:e9:dd:4a:64:b3:dc:30:00:6b:57:20:3e:d8:a8:5c:d4:07:
fc:0b:79:34:a3:35:f5:d2:f5:ab:5f:1c:e0:0a:ac:b5:f4:e3:
44:e9:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:13 2026 by rpki-client