Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: DjhdxkKucU5THsJs6ZQujhCMBXiAUhH53OEoyM9G2Pw=
Subject key identifier: 84:12:C6:D2:AF:DC:E0:03:4C:EA:FE:D4:FB:BC:51:51:66:81:C8:40
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019F916D834D365A68200EBAEFEC23B3B99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: kzabsdwxTGvFeRxl5HDu0vChZ6a9/vvr0J4O27sbi3Y=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:83:4d:36:5a:68:20:0e:ba:ef:ec:23:b3:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=8412c6d2afdce0034ceafed4fbbc51516681c840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:4a:e0:7e:b9:30:00:4f:ae:4e:b9:25:af:
48:d9:0e:bc:d1:c5:57:fa:67:b7:7a:65:7c:2f:bf:
f6:11:ff:0a:e3:53:11:40:52:51:88:68:17:70:fa:
bc:0a:9d:97:4f:a4:b4:14:e3:12:e4:84:dc:64:aa:
9c:2f:cd:45:11:ea:7c:b6:ea:1f:d4:34:25:5e:22:
4e:ea:37:0e:57:a3:7f:e7:28:a4:ba:9c:9c:3c:cd:
3f:fd:a4:66:39:43:c0:d7:79:d5:fc:3b:6a:b8:6d:
d9:1c:ca:9d:c8:30:88:9c:4f:47:03:46:1d:27:e9:
e1:5b:4c:08:7b:30:79:33:62:94:48:e5:a1:e3:49:
b8:0b:d7:81:2d:04:84:cd:bb:d0:bd:7a:99:fd:95:
58:51:a5:9c:1f:5f:7b:83:4c:bb:ec:7d:2e:b6:92:
7f:40:90:e3:f7:89:19:ea:b0:d4:83:8b:e9:24:b0:
6a:3e:45:86:d6:2b:f4:d5:25:10:35:0a:21:09:71:
d3:71:9f:a3:de:64:26:84:e2:79:8f:58:3f:5b:86:
02:43:db:ab:0c:8c:b1:ef:d2:1e:7a:07:47:56:ff:
4a:87:e1:60:cd:4c:9b:86:cd:53:d9:d2:ed:91:e2:
fe:ab:46:2c:e6:f0:f2:57:63:c4:71:d4:ac:cf:72:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:C6:D2:AF:DC:E0:03:4C:EA:FE:D4:FB:BC:51:51:66:81:C8:40
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:41:a0:57:b9:e9:3e:3a:d5:63:db:9a:28:c7:5c:53:4d:bc:
35:34:ee:0f:36:27:58:38:98:28:6b:78:72:66:8a:43:3f:1b:
24:2b:e8:ca:88:23:67:8b:90:bb:b2:a4:0e:c5:3c:a9:86:17:
97:8f:90:56:81:53:e3:f6:8a:a9:70:98:32:44:d3:92:7e:bf:
ee:a6:d4:e0:84:46:cc:45:2a:89:61:86:e8:18:f5:a2:6c:1c:
f2:09:f8:81:67:46:44:63:a8:66:4b:c6:56:25:0e:ac:cb:93:
83:37:36:86:10:d6:27:40:32:ea:88:f3:a3:c3:ed:68:4b:f4:
3c:13:81:0c:e8:41:0c:7a:3f:e9:2f:aa:34:87:aa:16:27:8f:
ba:20:d9:58:5f:a7:a5:8a:3d:a4:b1:c3:2a:ac:2f:aa:2a:ff:
66:87:b8:93:1a:d0:3e:10:a7:e0:5a:2c:a3:01:56:78:af:54:
8e:50:bc:ec:40:ae:8a:ab:05:00:f4:d8:ce:17:11:f8:e0:c5:
47:30:8a:88:b1:21:e3:7e:50:60:6e:d9:98:2f:ec:a3:ae:bc:
e1:43:f3:98:b7:c9:64:c2:50:2d:13:01:92:54:57:35:2b:27:
98:c4:99:5c:a6:38:27:46:5a:2c:ac:5b:7d:ce:5d:f7:70:50:
c3:dd:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:20 2026 by rpki-client