Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: Gn3JO3LtskMfYE533Wmu6y29+qjtl7D0bXUFV9Oz15I=
Subject key identifier: 6E:E6:4C:BE:04:2D:6E:23:77:04:48:B7:A5:97:2E:6B:E0:96:C6:A8
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 019F927F60F663DA31423B031939A3399B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 05:00:49 +0000
Manifest this update: Fri 24 Jul 2026 05:00:49 +0000
Manifest next update: Sat 25 Jul 2026 05:00:49 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: rgaLbXMVDHeFcmuoFBqbyQJxbeV2B+snXaSpFiUEp1U=)
2: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (hash: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:60:f6:63:da:31:42:3b:03:19:39:a3:39:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Jul 24 05:00:49 2026 GMT
Not After : Jul 25 05:00:49 2026 GMT
Subject: CN=6ee64cbe042d6e23770448b7a5972e6be096c6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:b3:ee:cc:de:3f:5b:96:c2:ad:5c:00:d3:
fd:78:08:98:5d:a2:11:83:4a:3b:27:8c:8f:ad:01:
bb:1f:d5:3f:6d:5f:5b:88:8d:68:ad:d9:a2:3d:35:
a5:18:3e:60:7f:c1:a3:d9:89:25:3e:3e:09:14:b9:
c5:63:ec:d0:a2:f0:d9:0c:02:e5:9a:45:64:54:00:
11:65:63:ae:db:81:a6:bb:02:29:4d:d4:8e:26:28:
07:8d:b8:c2:3b:e3:07:0b:d7:52:93:45:cb:4e:6a:
d7:73:56:c1:4d:c5:10:1d:d3:e0:59:a6:18:c6:07:
24:af:1a:15:ad:4b:fe:08:e5:3e:11:3a:83:b5:48:
46:d3:58:54:ea:90:0f:19:64:ed:bd:5b:b9:9b:15:
d3:89:db:7e:57:0b:bf:00:b8:85:3a:83:6b:e6:cb:
25:40:e4:28:79:7d:d2:fb:18:27:56:5d:46:f1:89:
95:81:d5:98:e8:34:78:ec:8a:68:48:b8:6f:78:15:
0c:96:c3:d6:43:08:04:d6:e9:c7:02:29:ea:cf:6c:
84:34:21:31:75:c0:60:1c:8e:26:48:db:2f:ee:4a:
d9:31:12:a1:8c:a5:a3:f5:1e:66:f9:43:d4:9c:f7:
33:8f:36:6a:19:b2:44:bd:b0:64:3f:23:07:a0:ef:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E6:4C:BE:04:2D:6E:23:77:04:48:B7:A5:97:2E:6B:E0:96:C6:A8
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:af:75:a7:54:d2:21:22:ed:1e:a4:68:89:3e:b0:ad:c0:49:
7c:d6:11:da:68:f1:48:35:c0:4a:1c:63:d9:62:d0:fa:5a:52:
92:cf:40:86:bb:6c:a4:8c:48:d8:3b:08:13:4a:e3:e6:4d:2d:
c6:28:8e:8a:8c:18:c7:6b:48:6c:4b:d5:8b:40:01:d1:35:64:
f5:b3:68:16:5d:de:64:4c:ec:35:84:81:38:59:fa:77:79:75:
28:05:75:04:63:a3:a8:ca:9f:21:26:f5:58:a0:42:94:b4:92:
f4:fd:6d:40:43:2e:67:8c:36:71:25:1a:82:b8:23:8b:18:9b:
dd:ed:3b:aa:c0:5a:05:29:90:ae:a2:b1:f1:fb:66:1c:b0:42:
95:cf:08:bb:dd:e0:46:d7:e7:50:bb:ed:95:bb:58:a5:86:09:
97:4a:17:75:6a:64:2a:d7:57:b9:9c:91:fe:2c:20:3c:14:a4:
a3:28:83:42:ed:bd:0d:f3:0f:21:11:74:30:ce:f0:64:2b:ca:
f6:62:f4:f8:1b:37:69:90:b9:1d:97:58:c1:0d:6d:e7:07:17:
99:43:d0:c5:3c:2a:4d:8c:3b:b6:06:27:7d:f4:d1:85:e6:f0:
7e:f8:84:f9:4e:e5:bc:54:14:d8:64:fb:7e:da:d3:23:19:9e:
5d:d0:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:24 2026 by rpki-client