Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File: 2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier: PphT7uiPZ3hId0ZGvNvyh+knQkrvKeKKtkQEuBiIpwQ=
Subject key identifier: 67:93:BD:9E:90:BD:53:49:01:EB:82:BF:37:6B:45:12:BD:25:83:EB
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial: 019F8FB4DB7FC881D84CFC19D02BE932A663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number: 1245
Signing time: Thu 23 Jul 2026 16:00:22 +0000
Manifest this update: Thu 23 Jul 2026 16:00:22 +0000
Manifest next update: Fri 24 Jul 2026 16:00:22 +0000
Files and hashes: 1: 0n_03Dj5AW36ZZDavaaJH9fKBco.roa (hash: ZZO0rbuY9EtWgQnWOuRAYlrzfJbNdlRI89FyzHlX6sU=)
2: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: fa0aagdLPDNrwiNAEJZQ1lH2befEmDsndFMzjHKpBkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:db:7f:c8:81:d8:4c:fc:19:d0:2b:e9:32:a6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Validity
Not Before: Jul 23 16:00:22 2026 GMT
Not After : Jul 24 16:00:22 2026 GMT
Subject: CN=6793bd9e90bd534901eb82bf376b4512bd2583eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:50:b8:8d:89:58:a8:04:59:5e:9f:3b:fc:
a8:e8:39:f7:14:8d:59:25:b7:c3:6d:f3:a3:3c:93:
68:d4:b2:26:c8:26:77:2c:99:aa:20:23:3b:77:69:
b7:4f:d7:1c:dc:e0:46:ef:fc:d7:0a:1c:03:69:a8:
45:1e:f1:ad:99:75:2a:35:af:dd:21:ed:af:7a:03:
ba:63:4d:a3:f3:0f:f4:f7:00:2e:4b:f9:8f:85:fa:
ae:8f:82:99:79:d7:c6:0c:fc:60:d7:c3:04:2d:e4:
5e:72:c7:8e:99:cd:12:c3:c4:50:26:7b:44:77:bf:
d3:7d:7b:fc:86:e9:55:fa:cc:40:3b:57:a7:94:4b:
3b:0a:c6:d4:aa:72:f7:f5:88:3f:99:f3:4c:72:86:
fa:a7:84:27:ac:3a:9d:6c:58:1b:0a:ca:5e:fa:f4:
99:db:7f:cd:8e:b7:7c:85:3c:3f:e1:3d:9f:09:36:
bf:82:dc:4f:d2:20:ec:85:64:8a:5c:9d:02:57:0c:
cb:9d:e4:bd:7b:72:c1:06:80:fe:29:9f:d0:52:f2:
50:4a:5d:f7:b8:bf:4d:8b:99:67:39:96:5a:d4:8c:
6a:ae:58:ea:dc:af:66:70:d0:de:9a:9c:be:94:69:
69:b3:ea:4e:b9:05:d6:7d:30:31:a0:41:40:5d:f0:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:BD:9E:90:BD:53:49:01:EB:82:BF:37:6B:45:12:BD:25:83:EB
X509v3 Authority Key Identifier:
keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a6:fa:5b:0b:e7:a7:63:1f:f6:26:88:01:ee:1d:c5:f5:87:
51:01:f2:3d:f9:b6:de:ef:1f:95:3a:57:b1:14:24:9a:bd:9d:
cc:30:51:ac:46:ef:dc:fe:e6:8d:cc:41:5b:28:90:8c:90:0f:
34:fd:9d:ba:7c:42:a4:76:a6:2d:2c:1e:2f:d1:ee:4f:37:60:
a9:b8:fb:b6:b6:04:c3:79:3d:18:90:f6:78:06:cb:d8:c8:3d:
77:b4:af:81:d4:d3:e2:25:4d:c5:14:26:71:f6:87:fa:e0:05:
f4:b2:aa:e6:2b:a6:f4:27:25:5f:98:22:d0:ac:da:3c:82:b3:
bf:93:5c:c5:7d:25:55:a3:fe:ae:6f:0c:fd:0c:28:03:1a:31:
55:de:80:1e:c7:7a:44:cc:96:72:1e:0d:09:b3:4d:e5:f4:69:
68:cd:63:93:dc:ac:c3:fb:fe:d5:96:96:c2:57:61:c6:35:0b:
7d:0c:d6:3e:1d:72:54:be:14:44:61:6a:72:04:5b:f2:b9:c8:
08:3a:da:9a:9e:55:7f:3f:84:76:16:44:f4:83:49:3a:34:55:
b6:0f:50:2c:07:96:46:f6:03:6f:7a:41:d5:b8:a6:f3:e0:cb:
17:8d:d1:b2:07:e1:bc:1c:73:22:9c:62:11:84:e2:d4:3c:44:
d9:25:1a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtNt/yIHYTPwZ0CvpMqZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDY0OTE4OGFhYTQzOWQ4NTExZjcwZWJlODJiYTVlNzY2
Yzg1ZDIwHhcNMjYwNzIzMTYwMDIyWhcNMjYwNzI0MTYwMDIyWjAzMTEwLwYDVQQD
Eyg2NzkzYmQ5ZTkwYmQ1MzQ5MDFlYjgyYmYzNzZiNDUxMmJkMjU4M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOtQuI2JWKgEWV6fO/yo6Dn3FI1Z
JbfDbfOjPJNo1LImyCZ3LJmqICM7d2m3T9cc3OBG7/zXChwDaahFHvGtmXUqNa/d
Ie2vegO6Y02j8w/09wAuS/mPhfquj4KZedfGDPxg18MELeRecseOmc0Sw8RQJntE
d7/TfXv8hulV+sxAO1enlEs7CsbUqnL39Yg/mfNMcob6p4QnrDqdbFgbCspe+vSZ
23/Njrd8hTw/4T2fCTa/gtxP0iDshWSKXJ0CVwzLneS9e3LBBoD+KZ/QUvJQSl33
uL9Ni5lnOZZa1Ixqrljq3K9mcNDempy+lGlps+pOuQXWfTAxoEFAXfB8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeTvZ6QvVNJAeuCvzdrRRK9JYPrMB8GA1UdIwQY
MBaAFNnWSRiKqkOdhRH3Dr6Cul52bIXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMt
MWNjNmEzMWIxNGJmLzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMtMWNjNmEzMWIxNGJm
LzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6b6Wwvn
p2Mf9iaIAe4dxfWHUQHyPfm23u8flTpXsRQkmr2dzDBRrEbv3P7mjcxBWyiQjJAP
NP2dunxCpHamLSweL9HuTzdgqbj7trYEw3k9GJD2eAbL2Mg9d7SvgdTT4iVNxRQm
cfaH+uAF9LKq5ium9CclX5gi0KzaPIKzv5NcxX0lVaP+rm8M/QwoAxoxVd6AHsd6
RMyWch4NCbNN5fRpaM1jk9ysw/v+1ZaWwldhxjULfQzWPh1yVL4URGFqcgRb8rnI
CDramp5Vfz+EdhZE9INJOjRVtg9QLAeWRvYDb3pB1bim8+DLF43RsgfhvBxzIpxi
EYTi1DxE2SUa7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:50 2026 by rpki-client