Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: glkO8wHt4s5s7AFkSuCbM503wK6jJqGc/2St0Rrka4A=
Subject key identifier: 3A:C8:7A:C5:EE:99:4A:81:C7:3B:49:8E:02:A6:49:D8:21:60:2E:19
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019F91DA76467D80C00498B615572735D842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 01B6
Signing time: Fri 24 Jul 2026 02:00:41 +0000
Manifest this update: Fri 24 Jul 2026 02:00:41 +0000
Manifest next update: Sat 25 Jul 2026 02:00:41 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: fBJyDkJ/efjqK8lQ5NVNBRdYUQWzYekiExCmIi8/LMk=)
2: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:76:46:7d:80:c0:04:98:b6:15:57:27:35:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Jul 24 02:00:41 2026 GMT
Not After : Jul 25 02:00:41 2026 GMT
Subject: CN=3ac87ac5ee994a81c73b498e02a649d821602e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:5c:3f:c4:b9:7f:91:42:6f:32:ff:63:3a:
16:ea:0f:c6:7c:21:20:07:9d:96:bc:f2:90:2b:c4:
70:42:92:29:8a:59:d1:b5:a8:7a:e0:8b:a1:31:73:
dd:ee:c0:ee:87:a1:00:dc:64:90:b6:9b:b3:b8:38:
a0:73:11:4a:54:2a:98:83:81:0f:f6:4d:18:ea:82:
41:45:e5:f2:47:9c:61:5f:23:25:6c:72:27:ba:87:
ba:d1:2d:8d:cc:03:bc:89:50:3b:da:96:46:ca:30:
35:73:62:98:ea:0c:43:a3:d3:b3:f2:0c:01:e9:02:
e0:33:c1:46:e1:17:59:a9:6b:c0:f5:d9:79:fd:cc:
f5:7f:27:2e:70:2f:3a:bb:75:24:28:fb:d7:56:f0:
e6:aa:53:3b:77:8a:c2:f0:46:ac:fb:cd:ea:eb:f1:
93:92:16:27:70:87:81:82:61:e9:c4:a3:7d:d6:46:
8c:a4:14:fd:f3:e6:2e:26:6a:ff:84:d8:b3:87:c2:
6c:7b:16:4c:6a:ae:50:48:6e:af:7d:87:a3:2c:3b:
24:fd:d1:11:e7:b2:66:00:c4:4c:14:b3:17:3c:63:
d9:5f:47:73:95:1a:f4:e0:bb:d6:77:c8:ba:25:95:
c7:d9:79:d5:24:de:9a:98:2f:54:50:e2:b9:a5:1b:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C8:7A:C5:EE:99:4A:81:C7:3B:49:8E:02:A6:49:D8:21:60:2E:19
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a6:9e:f5:2b:67:43:27:6c:91:ff:95:41:fc:9f:0b:16:82:
9d:7d:88:1f:9a:22:66:75:5b:06:30:80:0f:93:a1:d9:09:80:
8f:fe:c0:c4:50:38:23:2e:0c:d7:7e:b0:65:47:5d:fe:0b:71:
43:52:e1:d8:11:e6:c6:38:e3:93:39:f2:b9:fa:73:d4:e2:76:
c6:d8:45:13:5b:c8:2d:b0:3b:50:cf:90:0b:91:05:bb:67:70:
db:30:ab:93:d7:32:c3:3e:4e:42:d0:87:dd:9e:9c:05:92:4e:
df:3b:75:ec:29:9a:3c:b1:01:00:81:8e:f3:29:b4:d0:2b:1d:
a2:b2:60:c7:ec:34:f3:08:00:fe:86:1c:91:ea:f6:c9:4e:e1:
8a:71:74:00:c8:72:9e:d1:72:9e:eb:16:c8:02:2b:60:a3:9f:
cd:4e:57:b0:21:f2:6c:1d:98:6c:75:f1:6c:33:dd:00:f2:c1:
fb:d9:a5:d8:a3:ea:a0:72:9a:dd:d9:c9:57:05:f7:eb:cc:49:
f6:74:64:37:67:2e:74:01:53:36:cd:5d:67:46:78:a1:36:6a:
96:ef:92:de:94:96:e6:cf:dc:11:dc:69:1a:48:d7:9c:5f:39:
5e:d8:61:1b:a0:65:80:e1:6d:44:ac:a9:57:69:9d:ab:66:fa:
5d:d4:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:21:09 2026 by rpki-client