Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
File: 2DmRJrYFJVLagB0O5HosfDLnzbw.mft (raw, json)
Hash identifier: MB/+gB7TjugL5zPIT3e7OdgLyeE/1lQuwwmw6mSclKg=
Subject key identifier: A9:A8:F0:39:8D:9E:B3:B3:03:0F:10:EA:E1:BF:2D:DA:22:AB:FB:BC
Authority key identifier: D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
Certificate issuer: /CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Certificate serial: 019F9249016300F2689BB70754297C26111E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
Manifest number: 0214
Signing time: Fri 24 Jul 2026 04:01:25 +0000
Manifest this update: Fri 24 Jul 2026 04:01:25 +0000
Manifest next update: Sat 25 Jul 2026 04:01:25 +0000
Files and hashes: 1: 0zE3UfEHUEziOBAn5MV-3cMOfAI.roa (hash: C69mVu54AG+KnNmbROi8pSxGo/q1kcnt7UFnI0LaEzc=)
2: 2DmRJrYFJVLagB0O5HosfDLnzbw.crl (hash: ZNTn6NDJ1WdnxWDCiS8Bgjoa06MtjeXivOwqo63wJJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:01:63:00:f2:68:9b:b7:07:54:29:7c:26:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8399126b6052552da801d0ee47a2c7c32e7cdbc
Validity
Not Before: Jul 24 04:01:25 2026 GMT
Not After : Jul 25 04:01:25 2026 GMT
Subject: CN=a9a8f0398d9eb3b3030f10eae1bf2dda22abfbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:34:19:9f:6c:fd:cb:75:40:e6:57:98:57:
7c:0d:17:28:75:e6:ea:ac:e0:af:c5:bf:38:42:c1:
1b:aa:24:03:5f:af:85:93:2c:de:03:e6:b1:1c:52:
81:e9:b3:f2:b5:6e:19:c7:ac:b6:70:13:6f:6c:db:
ed:7a:c8:0c:81:a3:5c:b4:49:3e:d4:85:74:fd:e0:
89:6a:f7:b2:6c:53:26:e4:24:db:45:14:3a:3b:23:
7f:f5:27:45:9a:dc:30:cf:ac:fa:ad:2e:60:5f:f4:
9d:c4:80:6c:18:bf:f6:00:94:6d:62:13:ad:14:10:
d7:b4:bf:fb:59:30:97:d7:83:0d:c3:38:4f:7d:40:
5f:94:0b:42:d6:2b:8e:1b:ed:84:98:4e:1e:9b:94:
cc:12:5a:72:6c:74:80:49:30:18:24:67:97:73:09:
19:fa:85:bc:2e:ff:b5:a8:ed:7f:00:3f:a7:8f:a4:
69:a0:30:f4:ae:f9:c8:03:52:95:a3:fe:20:e0:41:
e7:54:88:83:de:ab:33:58:9a:e2:9d:f6:cd:f0:6f:
6f:9b:9e:eb:55:0c:42:2b:77:ab:7a:22:5a:cc:b2:
82:f8:89:6f:d1:a2:f0:31:b4:8c:0b:fc:b0:fe:57:
2f:21:82:4e:bc:81:df:2d:cf:c8:74:e8:2e:2b:f5:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A8:F0:39:8D:9E:B3:B3:03:0F:10:EA:E1:BF:2D:DA:22:AB:FB:BC
X509v3 Authority Key Identifier:
keyid:D8:39:91:26:B6:05:25:52:DA:80:1D:0E:E4:7A:2C:7C:32:E7:CD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DmRJrYFJVLagB0O5HosfDLnzbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fdb10d-0f40-4151-ae17-c1b6216b7268/1/2DmRJrYFJVLagB0O5HosfDLnzbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:41:ae:bc:39:36:a5:a9:56:58:c7:25:80:e2:af:05:1c:
8e:0a:0b:85:58:98:79:04:64:fb:5f:08:39:27:f4:7f:db:33:
9f:b9:dd:69:33:d0:b1:d0:0d:9f:5d:0e:70:e2:ae:21:9c:10:
81:ad:26:e4:2b:0f:f9:90:9f:0a:04:31:f4:f6:e2:2a:f2:8c:
6c:e7:9a:f0:e2:48:bd:a8:bf:25:f4:39:ca:b7:04:94:92:c4:
1c:4b:cb:85:b5:3e:40:ec:25:cd:b6:87:ef:62:6c:53:3a:d5:
33:d7:63:8c:77:df:cd:17:ce:ce:50:fc:0e:2b:5b:5e:ac:f9:
c5:d4:ca:36:28:1e:d2:9e:75:1b:6b:b6:08:e8:81:34:e1:de:
dd:b5:e4:f2:68:f4:87:5a:00:ff:d9:c4:17:e7:28:39:f0:bb:
ae:70:19:f4:b9:a9:1c:57:aa:6e:75:68:19:4a:04:ac:32:93:
d4:60:36:ce:64:1b:cd:64:8e:4a:cd:e3:e1:eb:b7:19:5f:fa:
24:65:bd:d6:f3:4d:e4:09:b2:75:49:f7:6f:78:c1:46:e7:7f:
92:4a:42:b8:56:32:ad:88:8b:5a:b3:d9:a3:59:5f:f7:3f:82:
ec:b6:38:37:56:3b:df:8e:31:8d:7a:22:7d:02:5e:96:36:fa:
d2:84:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:35 2026 by rpki-client