Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: ynhd/4qxfN53xIqaNGaWQSr2UvRdzadZEuaqTTVTvqg=
Subject key identifier: 9C:30:DA:B4:5F:05:86:19:86:88:DF:7D:9E:01:39:48:21:B2:34:7F
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 019F90C7B1FF6496D2857F2588C90A2E14DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0ACC
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: rIoVBizsw4HwFylTHd43f6YlnZisj70h7LwAxv4zvic=)
2: t5gDJTwEX_7MnOD4QMV2-iNg9e8.roa (hash: Av2GUWR+Q2vX5K8GexOH8XltfedpKMt8MiGL4TnfRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b1:ff:64:96:d2:85:7f:25:88:c9:0a:2e:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=9c30dab45f0586198688df7d9e01394821b2347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:16:46:a3:81:4b:87:c2:6b:d8:bb:27:d6:
30:b1:74:0d:4f:0d:a3:f2:cb:7f:7a:c9:41:a5:9d:
55:74:85:d5:31:2b:32:f5:55:84:35:5c:7e:3b:73:
33:60:28:fa:13:e7:42:70:e5:f8:a9:86:d2:75:8d:
ff:72:8d:af:fe:5d:c9:51:cc:bf:b9:a8:d5:c6:21:
fa:8c:f5:a8:b4:f6:94:07:0d:f4:0e:3f:05:c3:88:
c6:94:da:59:9c:3f:87:7e:c9:a4:65:f7:5a:5d:44:
83:fb:da:8a:b5:b7:74:33:54:be:61:0d:75:7f:10:
5d:d1:18:8e:cc:0c:2f:74:a8:cf:60:02:87:82:78:
c6:31:96:89:b1:32:d6:e8:88:83:f4:e0:f7:56:c0:
48:e6:0e:5b:d6:dd:58:ff:93:1b:d4:5b:5f:a0:2a:
6a:82:df:90:c1:44:9a:b5:90:b9:4f:de:b0:0b:e8:
fa:08:e2:47:94:45:58:e0:d3:52:e5:ca:14:eb:b7:
2b:9e:ae:dc:2b:0c:f6:42:f4:f2:cf:34:01:e1:00:
6b:05:87:09:04:e4:cc:f2:d0:13:a2:17:32:a5:c4:
c6:07:ed:0a:51:d9:05:84:6f:86:3e:7d:6f:5e:65:
11:bf:14:89:3b:90:fc:b5:23:e9:8d:2a:5b:2b:f0:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:DA:B4:5F:05:86:19:86:88:DF:7D:9E:01:39:48:21:B2:34:7F
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:22:5b:87:5b:7b:d4:ae:5f:dc:da:f8:af:6f:07:42:2b:4a:
52:26:e2:7b:15:59:41:26:91:8e:6b:65:88:54:60:43:28:68:
a3:5c:eb:72:c3:56:65:22:e3:0a:02:4c:62:25:1c:cd:68:11:
1a:f1:55:9c:87:72:9f:ae:fe:b5:59:57:99:e4:60:fd:cc:ee:
53:d5:0c:c1:3a:74:ad:0e:b2:5e:5e:56:13:64:4a:3b:d6:e7:
e1:8e:99:80:d7:a3:47:e3:19:bf:60:f0:fd:b2:b3:cc:65:f2:
c2:7b:56:49:d5:40:69:bd:f6:b9:3d:5d:da:57:6c:cc:f4:b0:
ec:87:56:44:17:ca:5f:e5:5a:38:dd:d6:85:91:fa:f7:f5:cb:
23:8c:33:07:50:1d:ff:59:f4:99:09:47:84:94:a2:79:ab:62:
e2:43:ae:45:74:43:46:cf:27:d2:da:fc:61:54:77:75:07:e2:
ba:6e:09:1e:91:45:6b:00:ee:51:b9:88:72:31:f9:db:63:3d:
bb:c3:14:4f:6a:ef:45:67:98:b7:bd:a1:21:67:4d:45:ef:18:
0c:65:3b:60:76:1c:a2:50:f5:d7:37:32:6c:70:5c:e7:30:99:
79:fc:aa:f8:c0:ca:e8:7d:1e:ac:8d:7e:07:0f:f0:23:d6:18:
fd:f2:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:22 2026 by rpki-client