Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: IWeCdrVfX7r1tqbI3d+YRNTrRU5f52w2M4dQkDyjjlo=
Subject key identifier: AE:AF:7E:C6:08:6A:C5:51:11:8A:72:27:DF:B0:67:6C:C6:E6:F4:4D
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 019F916D61A2F0B20A6803B8AD71952A6E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 00:01:32 +0000
Manifest this update: Fri 24 Jul 2026 00:01:32 +0000
Manifest next update: Sat 25 Jul 2026 00:01:32 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: /mPmtpwN+9Sy49Iz/YDuTwpwiQFgZrVfp4MKawLxGt0=)
2: VEbdeDBfoS7OV3q8Pyt7XMZlTvw.roa (hash: ryGpV2N0yjPTa2J+772hPmPtDVApuFyLbz9EHlqw2ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:61:a2:f0:b2:0a:68:03:b8:ad:71:95:2a:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Jul 24 00:01:32 2026 GMT
Not After : Jul 25 00:01:32 2026 GMT
Subject: CN=aeaf7ec6086ac551118a7227dfb0676cc6e6f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:ad:4e:72:88:6c:b1:6c:d3:3a:c5:38:68:
68:80:c3:9b:6f:8e:a3:52:28:a3:34:20:68:71:b2:
f0:bf:b5:b2:28:70:4a:97:24:05:fb:9f:30:d0:10:
dc:fe:d3:48:d2:31:81:ce:d1:fd:6d:59:f4:a3:8f:
85:70:cf:2c:3b:26:5e:3b:21:be:31:23:80:a9:cc:
db:02:60:f2:8a:fe:1d:90:8a:a4:ac:c3:54:88:f2:
c6:c7:22:d5:63:c7:1f:27:e8:11:5a:f6:a1:da:fa:
12:e9:20:be:ff:49:c1:a0:d6:2d:3a:93:61:a4:0a:
fa:24:c8:85:04:cf:1d:b2:2a:6f:e4:50:ef:0f:57:
5c:0e:b3:53:96:e9:e5:7d:fa:8d:f5:6c:d6:34:5d:
ee:fb:9e:cd:ed:73:02:14:1c:1c:c4:00:4b:7b:1a:
3a:02:87:e6:1a:05:1b:fd:f3:1c:b2:ec:fa:64:a8:
18:d5:9a:f4:4c:ba:8f:e8:02:9c:e4:bd:5b:64:36:
04:e6:1f:53:18:cb:e9:c8:62:8f:5b:d9:bd:13:4f:
21:7e:77:8c:06:a4:08:f5:ec:47:b0:42:bd:e8:e8:
61:00:c3:7f:72:7d:bf:42:04:84:f9:9a:19:08:0c:
9e:9c:2b:5d:89:ea:07:2b:cc:de:1e:f5:1c:2c:17:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:7E:C6:08:6A:C5:51:11:8A:72:27:DF:B0:67:6C:C6:E6:F4:4D
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fd:f7:7b:08:d6:0a:a4:92:e9:af:d9:5c:39:d2:10:30:e5:
6e:a9:e3:72:d5:6c:35:d4:34:52:65:01:07:a8:f5:2f:0a:b6:
df:7c:08:66:ff:f2:27:cf:a5:09:43:1b:93:fe:e0:f3:4c:f3:
a9:62:cc:53:28:8e:36:30:af:d9:5f:97:29:b0:a8:38:63:dd:
60:c2:1f:40:c5:34:fe:dc:5d:a2:d4:af:62:dd:f9:50:0d:bb:
6c:49:88:86:69:df:cc:3c:72:34:50:5b:5f:a8:ed:63:72:df:
12:92:10:9c:4c:1f:4d:c5:a3:09:aa:65:c0:80:77:0d:ab:6c:
37:76:ec:78:13:cc:67:7d:b9:13:85:1a:73:85:e4:86:29:69:
96:4e:5c:8b:a3:0f:6d:8a:3d:11:bf:98:eb:27:40:c0:88:3b:
c3:f7:75:46:48:a9:b3:0b:d8:37:1c:98:bc:d4:17:92:2a:e3:
de:8b:96:fe:fe:d7:ba:20:05:87:19:0d:57:1e:bb:9e:95:e1:
77:ec:6a:af:23:5b:fc:2d:77:c1:c9:fd:b8:e1:7a:bd:04:9d:
8e:31:9a:69:6b:9c:e0:26:49:ac:ec:6a:51:ee:ba:c7:54:26:
44:fa:49:c1:e7:96:e7:f3:1f:5c:d4:16:c1:35:e2:9b:1d:4b:
79:16:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:31 2026 by rpki-client