Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.mft (raw, json)
Hash identifier: Xbin/O2XFtDLsfArL11GaKA0czSBvs6QDa7UcM/RuV0=
Subject key identifier: AD:BE:35:C9:C6:6F:B9:86:93:74:02:36:18:24:80:0C:43:96:41:78
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 019F8F7F235468C14F24867098C85540B8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
Manifest number: 0CC2
Signing time: Thu 23 Jul 2026 15:01:41 +0000
Manifest this update: Thu 23 Jul 2026 15:01:41 +0000
Manifest next update: Fri 24 Jul 2026 15:01:41 +0000
Files and hashes: 1: 20IFnOKR1Jpmkgcxx2faVj7yESQ.crl (hash: fpTn8e+m0llAx9i417LcLGmqVO8coV9zQbhayrYgZ+c=)
2: K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa (hash: /NaxyStNTlcpIpTarZjjR+9kQ6m4FlTTRFr5N6+rcrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:23:54:68:c1:4f:24:86:70:98:c8:55:40:b8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Jul 23 15:01:41 2026 GMT
Not After : Jul 24 15:01:41 2026 GMT
Subject: CN=adbe35c9c66fb986937402361824800c43964178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:34:eb:0f:b3:f6:a0:b2:8b:e5:77:d3:78:
9d:d1:75:b9:f4:d5:80:78:ce:f1:62:4e:f2:79:6f:
4e:d3:96:5b:0c:67:a6:32:50:c2:eb:f2:50:ef:f1:
76:51:51:2c:36:3d:37:cf:36:9e:b9:18:6f:7e:7c:
33:57:4f:d2:bd:15:56:8f:b4:ed:c1:57:64:90:c2:
53:06:69:63:74:a8:5e:98:a5:e2:be:06:9c:21:0c:
1f:2e:15:74:93:8c:05:d0:0d:e6:ce:e2:66:a7:69:
b7:f6:c6:9a:ee:6d:1b:f7:50:d8:d2:05:f5:16:55:
c7:53:18:77:a4:87:98:84:08:4b:03:82:c3:1e:16:
b3:3f:23:11:e0:89:d0:43:f8:27:db:a7:44:00:06:
6e:c4:20:12:d6:b3:ee:9e:b5:54:7d:1f:51:b0:26:
b5:f7:cb:52:5c:e6:96:b6:72:e7:36:10:f6:3a:86:
2b:36:6e:1b:d0:82:70:94:fe:12:84:c1:31:f8:0a:
d3:4d:2e:3b:be:b4:a1:51:03:21:5b:ef:58:a8:d5:
37:c4:74:1e:ce:bb:90:c2:f5:a7:f8:59:37:6c:5b:
ba:0b:c0:5c:a4:1f:e1:74:a1:02:e4:a2:bf:c0:0b:
52:29:44:d5:73:07:a0:e1:b3:5f:38:72:10:e6:03:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:35:C9:C6:6F:B9:86:93:74:02:36:18:24:80:0C:43:96:41:78
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:98:f4:e2:34:46:6d:04:6f:50:d6:a7:44:86:98:8e:e3:35:
cf:54:6c:4d:58:6e:76:94:d2:f6:05:5c:1d:37:6d:f0:41:69:
53:93:68:d9:6e:a6:b2:b9:f3:30:52:95:3a:1d:3e:dc:10:28:
12:55:dc:8b:21:03:39:58:27:61:3d:75:ba:f1:0c:ae:5c:3b:
f9:c5:f7:95:76:ab:1b:9b:8e:9f:f9:ef:30:36:6b:20:32:9a:
26:96:f4:cc:f5:9f:fd:d1:1d:00:0a:fa:db:cb:b5:e8:b8:ae:
46:76:39:79:2f:c8:b6:66:49:84:8a:5b:1a:7b:4d:c9:f7:45:
4f:38:37:8a:12:1c:2a:d3:b2:d2:51:a7:b0:ec:9c:d7:17:f4:
8f:54:6a:2b:39:fd:e8:0b:db:ca:91:63:fb:09:b8:bb:6c:d7:
de:a2:55:41:65:07:5a:ac:2c:bd:d4:fc:8c:95:04:d4:78:b4:
b4:e5:55:c0:4d:77:8b:a3:55:4a:4b:99:06:52:c5:dc:1e:58:
dd:d3:26:98:e1:a3:02:72:a7:b0:c8:30:5a:7f:33:be:17:cf:
0c:5a:d9:20:e2:8d:50:ec:8d:37:55:12:6d:37:82:4f:8b:ba:
04:79:b8:54:3d:69:7b:11:c1:07:8b:12:eb:ee:8e:7b:20:1a:
4c:2f:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:10 2026 by rpki-client