Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier: W9UK1wt8AdfBW3RJGdu+TxxR4YREI5FOngG7JRuveI0=
Subject key identifier: BC:DC:B4:B1:99:FA:B1:21:FD:D7:22:17:C2:A6:AE:0B:AB:CA:07:0A
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 019F90C827FBB4F6D79D790A1EAD7D266B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 21:01:04 +0000
Manifest this update: Thu 23 Jul 2026 21:01:04 +0000
Manifest next update: Fri 24 Jul 2026 21:01:04 +0000
Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: fnytouW6Iz9JWEe4WqGKwpKjaPWpVE1fL/WIQAkL6QU=)
2: kX0ln8n5R4ckT5blpr2Q8T6dxyw.roa (hash: m+DqRW/7H7lJLeLV4xP2QSBsOS0wlhVWEX4nGDQ/zJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:27:fb:b4:f6:d7:9d:79:0a:1e:ad:7d:26:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Jul 23 21:01:04 2026 GMT
Not After : Jul 24 21:01:04 2026 GMT
Subject: CN=bcdcb4b199fab121fdd72217c2a6ae0babca070a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:70:e7:c7:53:81:27:b2:c0:78:81:97:77:
81:86:7c:d1:b7:15:43:57:cb:15:ab:cc:0b:d9:48:
6c:79:98:8f:9e:cc:11:3a:4e:b5:74:a3:da:27:a0:
44:27:4d:5d:61:f9:bf:61:bd:6b:e6:db:75:d7:38:
69:6b:c0:ce:7e:8d:91:a5:a2:31:97:eb:9b:c1:f7:
48:d6:28:39:9a:64:50:9d:c8:32:3d:e4:06:9c:47:
a5:88:26:8c:cc:9b:d3:c7:85:72:97:2c:61:fb:b4:
07:63:cc:4b:5a:de:e9:9e:7c:c5:1b:18:fc:ac:5d:
4e:0e:1d:2b:45:44:e1:ae:f0:73:e9:12:3c:36:1a:
eb:f9:9b:9d:aa:80:a6:1a:f0:3f:5f:03:66:48:1a:
03:96:22:05:8f:24:3b:96:44:21:5d:c3:62:3d:cf:
6b:30:3e:27:45:a4:e2:4a:f4:7e:d4:c7:89:af:07:
a2:4f:6b:5b:b4:1d:4a:52:74:6f:da:d9:ea:44:b0:
5b:e2:99:0b:25:83:ba:02:50:5c:e6:82:84:83:e5:
1b:00:74:ee:74:43:ca:11:8c:70:6c:45:ca:86:65:
bc:17:e9:8b:f3:8d:4a:c7:e8:87:1e:07:01:7f:92:
8a:83:14:cf:b3:3a:b8:a7:55:c1:09:f2:8f:b1:a8:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:B4:B1:99:FA:B1:21:FD:D7:22:17:C2:A6:AE:0B:AB:CA:07:0A
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:92:a3:92:53:fd:9a:40:50:c2:c0:e7:21:5b:1a:94:4f:
41:6d:3a:92:16:94:39:e3:4f:16:a2:d8:2e:f5:cc:7b:fe:5b:
c8:e2:16:55:d4:39:5d:e6:01:9d:ae:82:d1:e5:25:3f:83:30:
8d:3d:70:b4:e7:4c:f5:0e:52:f7:c1:15:b6:bc:8d:6f:7d:a7:
08:64:84:04:cf:05:22:55:0d:f7:a5:c7:41:81:aa:9c:30:65:
aa:b7:25:27:c5:68:19:84:18:55:b4:25:86:f8:19:f0:64:ec:
76:50:66:c6:56:ae:f5:22:7f:3c:9c:28:36:dd:cb:e5:c4:43:
d0:02:cd:f8:88:da:9c:04:82:4d:5a:1c:7f:9c:f4:ad:3f:9c:
47:cd:4f:47:34:05:37:6e:a2:7e:da:41:90:ce:13:93:d1:01:
50:cd:40:37:45:fa:39:81:57:30:db:57:06:5a:99:26:32:e6:
e1:3a:9a:e8:bc:74:3b:42:96:5e:1b:c4:fb:27:9e:84:fc:63:
3f:99:7f:25:cd:fd:f0:ed:e3:9c:d6:17:25:33:f0:fa:b2:42:
c1:0d:21:38:22:dc:b3:0c:2b:45:f7:c7:44:96:b3:eb:83:ee:
37:8f:78:2e:50:85:26:57:21:fd:2d:6a:a3:43:75:be:83:43:
02:58:32:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyCf7tPbXnXkKHq19JmtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZjBhMzljZmFkZjkxMGY2YjEzMmFkMjI4ZTYwNjU2MTg4
N2EwNmMwHhcNMjYwNzIzMjEwMTA0WhcNMjYwNzI0MjEwMTA0WjAzMTEwLwYDVQQD
EyhiY2RjYjRiMTk5ZmFiMTIxZmRkNzIyMTdjMmE2YWUwYmFiY2EwNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8tw58dTgSeywHiBl3eBhnzRtxVD
V8sVq8wL2UhseZiPnswROk61dKPaJ6BEJ01dYfm/Yb1r5tt11zhpa8DOfo2RpaIx
l+ubwfdI1ig5mmRQncgyPeQGnEeliCaMzJvTx4Vylyxh+7QHY8xLWt7pnnzFGxj8
rF1ODh0rRUThrvBz6RI8Nhrr+ZudqoCmGvA/XwNmSBoDliIFjyQ7lkQhXcNiPc9r
MD4nRaTiSvR+1MeJrweiT2tbtB1KUnRv2tnqRLBb4pkLJYO6AlBc5oKEg+UbAHTu
dEPKEYxwbEXKhmW8F+mL841Kx+iHHgcBf5KKgxTPszq4p1XBCfKPsai61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzctLGZ+rEh/dciF8KmrgurygcKMB8GA1UdIwQY
MBaAFNrwo5z635EPaxMq0ijmBlYYh6BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMt
OTJiMjA3ZjY0MWIxLzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMtOTJiMjA3ZjY0MWIx
LzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2GSo5JT
/ZpAUMLA5yFbGpRPQW06khaUOeNPFqLYLvXMe/5byOIWVdQ5XeYBna6C0eUlP4Mw
jT1wtOdM9Q5S98EVtryNb32nCGSEBM8FIlUN96XHQYGqnDBlqrclJ8VoGYQYVbQl
hvgZ8GTsdlBmxlau9SJ/PJwoNt3L5cRD0ALN+IjanASCTVocf5z0rT+cR81PRzQF
N26iftpBkM4Tk9EBUM1AN0X6OYFXMNtXBlqZJjLm4Tqa6Lx0O0KWXhvE+yeehPxj
P5l/Jc398O3jnNYXJTPw+rJCwQ0hOCLcswwrRffHRJaz64PuN494LlCFJlch/S1q
o0N1voNDAlgyEA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:09 2026 by rpki-client