Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: L/IlK3zAPAJezAv2y+1k3oihlxkx8xaPeNn08X5gZKs=
Subject key identifier: B7:62:92:C1:50:75:2B:E9:2E:03:F4:CF:79:89:78:4D:B0:25:24:F9
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 019F916D3D3D8C58E7C6F2CB728F3CEE25C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 19C2
Signing time: Fri 24 Jul 2026 00:01:23 +0000
Manifest this update: Fri 24 Jul 2026 00:01:23 +0000
Manifest next update: Sat 25 Jul 2026 00:01:23 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: m7aWrbG5AyvlzNL7uQEEoJucaahTV+yP45qX4zPAXTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:3d:3d:8c:58:e7:c6:f2:cb:72:8f:3c:ee:25:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Jul 24 00:01:23 2026 GMT
Not After : Jul 25 00:01:23 2026 GMT
Subject: CN=b76292c150752be92e03f4cf7989784db02524f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:ac:e8:30:2b:b8:23:b4:67:71:1c:83:e4:
e1:1c:b4:7e:7e:a1:5b:de:c9:bb:e2:0f:03:fc:c6:
53:37:b6:5b:84:bc:27:a3:70:2d:49:af:57:d2:3c:
e1:c5:18:ce:39:13:83:a9:19:79:31:32:94:f4:63:
66:5a:72:d8:67:db:a2:c2:fe:af:e6:87:eb:23:e7:
b2:a0:cc:9d:59:d0:6b:86:24:0d:1f:c4:2d:3d:6a:
98:b5:72:e7:dd:b4:82:66:49:8e:93:28:eb:9f:5a:
2d:ae:01:f5:fe:78:50:5b:37:30:ba:70:29:e9:e3:
bc:99:e7:d5:72:6e:be:e8:7c:8f:e2:c9:d9:65:dd:
5a:5b:80:e8:60:7a:57:13:b1:df:47:eb:5e:eb:21:
c0:94:aa:ea:6e:27:ba:85:ca:d1:c1:f9:70:ef:de:
95:d4:59:b9:d5:b9:45:bf:8e:52:2e:4b:aa:f5:c9:
57:23:e5:40:07:d6:f2:0b:c2:c0:91:f1:ff:b7:89:
f1:80:a1:db:82:96:2b:82:72:20:8e:48:ec:4d:b3:
a3:0a:5c:da:1c:98:6f:d8:ea:6d:a2:19:6d:5a:2c:
5b:75:e5:3e:95:52:cf:e9:19:93:91:ee:0a:71:9f:
24:06:a1:83:98:b6:74:1f:c3:84:6a:9e:14:1f:d7:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:92:C1:50:75:2B:E9:2E:03:F4:CF:79:89:78:4D:B0:25:24:F9
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:e9:78:68:1b:69:d8:60:34:91:47:a3:ad:4c:d5:21:f4:
f6:09:3f:79:fa:93:64:4d:08:18:92:8d:36:ae:8b:65:58:84:
a0:11:8b:e0:3e:87:56:da:55:60:33:fb:e3:f6:7f:7c:b5:97:
01:f8:d6:1e:5e:e3:b4:bd:67:23:03:e5:1b:78:e9:c8:d0:60:
ae:d5:2b:02:f6:1f:86:c3:f2:df:ab:9d:c9:77:e8:11:a0:34:
99:bc:9f:ff:a5:72:0d:ed:5b:55:28:dc:2f:5b:a1:01:32:61:
a2:d0:15:4b:29:49:41:90:c1:cc:c9:c8:1e:fd:77:83:3b:af:
4d:73:f7:57:00:e3:b6:18:88:08:f4:fe:1f:2a:6c:1e:a1:3d:
36:25:0d:ed:27:ab:f7:c2:5d:2e:f7:7c:7b:6e:8c:04:15:ea:
a4:d0:c4:b5:a8:92:e1:77:16:7d:f6:e5:d9:b7:95:91:b9:4e:
a9:25:d8:ed:54:26:cc:1e:6b:7d:92:46:3e:1c:93:2d:64:32:
20:de:a5:ce:7a:71:20:2e:b4:10:37:73:aa:1b:45:8a:03:d4:
fd:46:6a:b6:cd:8a:b0:c4:80:f8:90:f3:43:e7:00:55:ae:0c:
08:60:84:30:27:c1:79:17:ec:07:8c:76:b9:f6:17:66:72:30:
fe:ef:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:36 2026 by rpki-client