Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File: 2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier: Yujk1sWqhJ6osLZLYP+0SwyUhIWjBbHNYOv2pv+G54k=
Subject key identifier: F8:BB:E7:54:AB:F8:13:A4:36:A4:2C:46:9B:85:52:57:A6:C3:B4:84
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer: /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial: 019F916DC3D77E46521DABA97025B4B9496A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number: 1853
Signing time: Fri 24 Jul 2026 00:01:57 +0000
Manifest this update: Fri 24 Jul 2026 00:01:57 +0000
Manifest next update: Sat 25 Jul 2026 00:01:57 +0000
Files and hashes: 1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: +Cl+qjrpbEIe93Q/rw+sYaix2pmNBFPEWPhhY87zZDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:c3:d7:7e:46:52:1d:ab:a9:70:25:b4:b9:49:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Validity
Not Before: Jul 24 00:01:57 2026 GMT
Not After : Jul 25 00:01:57 2026 GMT
Subject: CN=f8bbe754abf813a436a42c469b855257a6c3b484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:7d:a0:dd:ce:ce:3e:10:cd:b7:5e:b8:4f:
e0:14:a0:f7:42:b0:c0:b7:76:85:15:8e:b3:0b:22:
ee:f2:eb:c0:dc:55:41:dc:51:d2:dc:d2:b2:c5:32:
96:2c:fc:e4:bc:54:42:38:07:ed:c5:b4:1f:b4:83:
c6:0e:bf:12:d2:fd:06:37:58:42:24:e7:47:2c:7b:
69:1b:ce:ea:a8:50:4a:97:2c:dd:42:32:fb:b3:8a:
8e:12:65:59:5f:17:82:1c:5e:80:25:8c:ab:c8:e9:
16:cd:09:e4:45:5f:0b:25:e4:a5:0b:7f:09:47:9a:
82:3d:3c:c6:e5:ea:48:00:f7:7b:a3:ee:fe:dd:7e:
e3:00:0c:a6:2c:40:a5:1b:a8:39:f4:d6:50:fc:d6:
79:64:0d:94:66:7a:ae:10:3a:4c:27:b0:52:fb:1a:
95:f2:c9:93:91:bf:65:89:82:40:72:59:4b:fb:1a:
04:46:7c:e8:04:6b:06:09:d8:3f:b1:31:bd:87:9b:
bd:c0:1b:d5:9b:fd:56:da:c0:b3:67:ac:f3:ad:93:
e7:68:f7:d4:ae:5a:84:3e:92:2a:9b:1c:33:bc:e3:
6d:15:89:a1:9a:6f:69:9e:00:f1:19:13:88:8c:a8:
01:56:e6:0f:2b:94:93:61:a2:7b:95:6c:f5:b9:e6:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:E7:54:AB:F8:13:A4:36:A4:2C:46:9B:85:52:57:A6:C3:B4:84
X509v3 Authority Key Identifier:
keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:95:93:9d:d5:84:8f:b1:14:e2:7d:b8:5f:1e:70:f2:d1:
ba:17:ab:06:ea:79:95:dd:87:8b:a2:6d:44:e2:32:7d:ab:c3:
84:f2:8c:74:dc:38:12:cc:b4:a5:75:9e:81:8e:16:fa:71:be:
44:62:fc:f1:bb:22:ea:00:6c:8d:12:9a:ec:5b:fe:77:ee:16:
cc:be:f5:8e:5c:bc:5d:c4:85:4a:37:63:20:5c:eb:99:f2:8b:
75:9a:1c:f3:70:7c:56:a6:ec:e2:b2:e6:b0:37:49:9b:95:7c:
f4:4c:24:28:a0:e2:10:64:6e:a4:31:56:e6:f8:31:4b:ea:5c:
72:68:e9:9c:1a:78:bf:84:13:fe:73:db:71:4e:b6:27:4f:1c:
03:da:75:2a:2a:49:b9:b9:f5:96:86:72:31:40:af:b1:b6:89:
3d:d6:6f:23:29:b9:57:da:7b:44:e1:15:08:d4:d9:71:ab:40:
fb:81:78:ef:11:7f:2c:df:d3:9a:8a:a8:95:50:8a:7e:80:32:
96:40:7d:f0:75:8b:2f:08:fe:0b:d5:5a:02:bd:58:8f:f8:1e:
06:94:5b:44:71:51:6c:80:07:d7:c9:b5:3b:2c:28:9a:8b:a8:
a3:03:f3:a3:8e:b1:e1:ba:14:5b:65:ce:fe:48:0b:cb:04:44:
f9:d0:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:46 2026 by rpki-client