Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: r5BC+FGQHuOvCW/phFwNifiYsdZYW0NvoJyAWV/fUMY=
Subject key identifier: A9:A5:CC:0B:55:63:F3:6A:B5:4B:9A:D2:D0:5C:5D:60:BD:54:39:57
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019F92ECCB11EC501944B0B1EA8E1417CBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 110B
Signing time: Fri 24 Jul 2026 07:00:19 +0000
Manifest this update: Fri 24 Jul 2026 07:00:19 +0000
Manifest next update: Sat 25 Jul 2026 07:00:19 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: wMhLsr07cmxA/0PIvQh8UUltQjPN1iEhmKY2MYRHehs=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
3: kdld6jPS4h7qCb7yETrdIyonX4I.roa (hash: TsAE5GMjgX+T1Uu8DxhOV4EuhDXdBpOqPFL5SGq4GAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:cb:11:ec:50:19:44:b0:b1:ea:8e:14:17:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jul 24 07:00:19 2026 GMT
Not After : Jul 25 07:00:19 2026 GMT
Subject: CN=a9a5cc0b5563f36ab54b9ad2d05c5d60bd543957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:10:30:c6:ac:51:53:66:11:e3:05:fc:62:
cb:bc:cc:29:2f:bd:71:c5:19:17:37:66:dc:55:27:
09:48:29:0f:3f:4d:c3:a5:0a:82:49:3e:17:c6:03:
3b:0d:02:58:45:27:25:35:bf:09:59:c4:40:e5:1a:
ac:f9:f4:71:0d:73:85:e5:26:25:56:55:d6:b5:36:
b1:49:89:00:81:29:e4:af:38:b8:10:b5:72:37:23:
c9:fc:71:25:f5:ad:8c:68:65:a9:56:13:84:2d:43:
9d:e4:f8:51:b1:53:27:5c:04:9d:d2:b7:4e:9e:2b:
6e:ee:be:7f:7b:d5:2e:9f:29:6a:5a:15:56:10:bb:
bb:a9:8f:7c:fa:8c:37:7c:66:83:ac:47:9d:f0:12:
b7:41:72:2f:ab:0a:1a:0c:04:13:d8:bf:06:9d:ac:
dc:66:11:2a:ae:07:e9:5a:4f:68:73:f1:23:d3:c9:
b1:b9:4a:09:8e:6c:03:d9:98:dc:4e:b6:ec:68:d2:
9c:e1:fe:9f:d1:2e:61:ce:08:71:c4:b5:33:c6:dc:
96:31:b1:54:75:85:77:4c:49:01:31:f9:8b:26:93:
d8:cc:bb:cc:26:9b:3d:b8:16:0a:26:d5:04:40:4b:
e4:7a:26:8e:c9:93:6b:74:bf:d1:74:3d:fe:02:62:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A5:CC:0B:55:63:F3:6A:B5:4B:9A:D2:D0:5C:5D:60:BD:54:39:57
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:5a:23:b3:be:3e:99:62:b7:f7:9a:a2:7d:cb:e4:86:f0:
ca:d1:1b:fc:d6:da:c3:94:80:60:52:33:8b:17:93:4d:41:f2:
fe:9a:bd:92:f3:0a:1f:50:d0:c2:57:5c:18:13:c1:62:cf:0a:
a3:07:77:2f:be:47:a4:5f:79:5a:8f:86:fe:6e:fe:c9:44:20:
2d:e5:da:e7:d0:20:d7:b6:e4:62:c3:7d:03:8b:e5:c4:6a:35:
95:f2:67:f7:8b:f9:b0:ef:2c:a4:c4:65:86:bf:1e:ce:38:04:
44:88:ab:66:5c:4b:60:7f:88:47:3e:09:a0:cb:c2:4c:c2:7a:
e0:cc:6b:f7:15:f3:8f:66:be:04:84:b0:3c:d3:0a:03:70:ce:
5d:b1:0d:b3:7a:4b:e9:11:b5:ef:19:c8:ee:2c:34:73:b0:15:
4a:32:5d:82:35:8f:13:83:3d:1e:4f:12:98:0b:ff:e8:9f:4d:
15:f7:ea:6c:1e:5a:49:0d:5f:53:89:5a:45:dd:e4:5e:96:38:
74:52:3c:d2:7d:59:c9:4d:33:1f:79:2c:6a:c7:17:7b:0a:28:
30:30:f6:e9:1b:6e:27:f1:a4:17:1e:88:b3:01:41:c6:30:f5:
84:08:7b:8d:74:47:e7:0d:22:49:3b:61:ac:98:88:bf:b4:db:
f5:4f:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:59:58 2026 by rpki-client