Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: z0w9rSYNKX9S109bAIR7T4ho1dv6mhJhN3vC4819zJc=
Subject key identifier: 35:FB:E3:7F:60:DE:69:96:57:74:82:AB:B2:9E:D7:79:A4:33:ED:CB
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 019F91DB2B76297DE5E08B25F9F01FE2CEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 0E54
Signing time: Fri 24 Jul 2026 02:01:27 +0000
Manifest this update: Fri 24 Jul 2026 02:01:27 +0000
Manifest next update: Sat 25 Jul 2026 02:01:27 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: 8Gqht6IOY/o0jEcFn9a8GHvjqqvTHK98vsPcNDZWnQs=)
2: RHS11XqX5pjtfXZH7I66Gp4Ow3s.roa (hash: 9qk+uC8E6OyhqYxBRe7jo40pbmRAOPPP2eDmccn/Upc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2b:76:29:7d:e5:e0:8b:25:f9:f0:1f:e2:ce:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Jul 24 02:01:27 2026 GMT
Not After : Jul 25 02:01:27 2026 GMT
Subject: CN=35fbe37f60de6996577482abb29ed779a433edcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:93:99:59:39:05:42:bc:06:b0:33:95:c6:
59:5b:1c:05:12:3d:8a:2a:6c:78:19:9b:7c:2d:b3:
ce:64:1b:56:d5:8f:bc:6c:cf:be:91:96:48:17:b1:
dd:05:c7:ea:0b:70:9f:20:b7:b0:a6:60:25:64:fa:
71:40:76:97:b2:4e:65:4c:df:6f:48:bc:d8:52:53:
7f:07:91:ab:c3:8b:f2:43:e0:e6:6b:e8:f9:2d:0e:
ab:d7:89:26:c2:51:8e:48:4d:97:9f:b8:9c:62:12:
d7:b5:79:fd:47:f5:11:5f:25:d9:ff:df:22:7b:97:
27:bc:e7:7a:d7:7e:93:83:1c:7a:5d:42:4d:6b:7d:
6a:4c:09:08:8b:75:ed:d5:6d:e8:6b:98:23:7a:1b:
a1:67:43:6c:4e:76:ed:60:78:71:f7:1b:92:d1:58:
24:a6:49:1f:e6:ab:fc:49:86:32:ed:77:7f:e0:23:
57:d2:ba:b5:3e:a9:40:2e:49:8f:89:4c:63:14:59:
9f:58:0b:57:78:26:50:a8:07:99:67:72:aa:67:02:
58:b8:0c:c1:93:a4:c9:d1:b9:b8:06:d7:cf:89:51:
d8:50:4e:be:d3:0a:4a:e8:d6:74:71:18:2e:f0:3f:
71:e5:4a:c7:db:bd:ea:f8:5c:af:f6:f0:1b:48:90:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:E3:7F:60:DE:69:96:57:74:82:AB:B2:9E:D7:79:A4:33:ED:CB
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:18:0b:4f:61:7a:df:32:02:19:59:9a:ff:ab:6e:8f:a3:
ad:d8:44:97:dd:51:9a:0a:1a:13:fa:bd:55:3d:95:29:22:82:
db:eb:94:7a:d8:fb:c4:65:ad:23:5b:ad:8f:5f:31:6f:49:8c:
b0:84:4c:ef:2c:a5:5e:3c:be:02:16:ce:f9:14:bd:ad:44:fb:
9c:d5:61:0c:00:bd:74:dd:3a:7b:7f:b1:0b:7e:2c:7b:5b:7a:
5c:97:60:94:d2:cb:f3:65:0a:bc:4e:8a:47:b6:18:76:ca:a1:
7d:69:8d:ed:f2:07:d1:06:86:1a:d9:59:d4:f6:3c:ef:07:a3:
e7:69:e7:5d:79:9c:f9:fc:82:bc:5c:0b:d7:c1:7c:7b:bd:ea:
b7:60:3c:0b:08:ea:cb:47:fc:dc:f7:bc:78:7a:75:47:4b:5c:
76:56:9d:e9:70:e0:59:8d:de:b7:e5:31:ef:fd:f2:25:75:d8:
ea:e2:b9:50:aa:1e:2c:78:ed:ab:13:a9:3a:e3:04:e0:b0:7f:
56:db:d7:d3:62:77:07:cd:06:3c:d6:51:c8:75:1a:22:53:19:
da:25:1e:b5:69:41:a8:0c:66:9a:d2:29:4a:54:8a:57:3e:ec:
da:ae:e4:1b:49:ab:08:9c:b5:41:6f:71:a5:59:92:4b:93:01:
f6:32:bb:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2yt2KX3l4Isl+fAf4s66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDFlMjIwYjYwMWI2N2ZlMzBjYmI3YjdjMWJmMjJmYmUy
MmZiNGYwHhcNMjYwNzI0MDIwMTI3WhcNMjYwNzI1MDIwMTI3WjAzMTEwLwYDVQQD
EygzNWZiZTM3ZjYwZGU2OTk2NTc3NDgyYWJiMjllZDc3OWE0MzNlZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg2TmVk5BUK8BrAzlcZZWxwFEj2K
Kmx4GZt8LbPOZBtW1Y+8bM++kZZIF7HdBcfqC3CfILewpmAlZPpxQHaXsk5lTN9v
SLzYUlN/B5Grw4vyQ+Dma+j5LQ6r14kmwlGOSE2Xn7icYhLXtXn9R/URXyXZ/98i
e5cnvOd6136Tgxx6XUJNa31qTAkIi3Xt1W3oa5gjehuhZ0NsTnbtYHhx9xuS0Vgk
pkkf5qv8SYYy7Xd/4CNX0rq1PqlALkmPiUxjFFmfWAtXeCZQqAeZZ3KqZwJYuAzB
k6TJ0bm4BtfPiVHYUE6+0wpK6NZ0cRgu8D9x5UrH273q+Fyv9vAbSJAzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX7439g3mmWV3SCq7Ke13mkM+3LMB8GA1UdIwQY
MBaAFNnR4iC2AbZ/4wy7e3wb8i++IvtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzIt
YWYyN2Q3Y2ExYmY2LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzItYWYyN2Q3Y2ExYmY2
LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuAYC09h
et8yAhlZmv+rbo+jrdhEl91RmgoaE/q9VT2VKSKC2+uUetj7xGWtI1utj18xb0mM
sIRM7yylXjy+AhbO+RS9rUT7nNVhDAC9dN06e3+xC34se1t6XJdglNLL82UKvE6K
R7YYdsqhfWmN7fIH0QaGGtlZ1PY87wej52nnXXmc+fyCvFwL18F8e73qt2A8Cwjq
y0f83Pe8eHp1R0tcdlad6XDgWY3et+Ux7/3yJXXY6uK5UKoeLHjtqxOpOuME4LB/
VtvX02J3B80GPNZRyHUaIlMZ2iUetWlBqAxmmtIpSlSKVz7s2q7kG0mrCJy1QW9x
pVmSS5MB9jK7Yg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:26 2026 by rpki-client