Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: W5BJBcosCi/IRA7KyB/iv4fk26lXUTkkEGnt+uHvjRI=
Subject key identifier: 0C:33:14:21:46:10:44:0B:E1:53:F6:27:B9:9F:D0:DA:FD:6D:45:76
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 019F91DABF13D65A0152AF5C94C8A466463B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 02:00:59 +0000
Manifest this update: Fri 24 Jul 2026 02:00:59 +0000
Manifest next update: Sat 25 Jul 2026 02:00:59 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: ESfGSkaBCFisHxXa6oiiA4bVzbL1FaYr0dfEFn7PBGY=)
2: YgBe7NidCuhBJDoY20do8_9nElw.roa (hash: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:bf:13:d6:5a:01:52:af:5c:94:c8:a4:66:46:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Jul 24 02:00:59 2026 GMT
Not After : Jul 25 02:00:59 2026 GMT
Subject: CN=0c3314214610440be153f627b99fd0dafd6d4576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:85:c2:be:d1:7f:9c:d9:70:16:67:1c:6c:
8d:d1:8c:3f:5d:a1:a0:80:4d:e8:1c:5f:f1:e4:2a:
98:1f:00:e0:ba:29:b1:0e:04:85:f5:f6:17:75:e0:
e9:7e:39:00:71:02:a8:a4:f4:c7:aa:a0:85:88:36:
b9:66:80:98:bd:c1:6d:73:4e:e0:88:eb:21:d1:58:
16:0e:b6:12:9a:2e:55:8d:c4:39:00:5b:28:ef:f2:
a3:5f:7c:6e:a5:7b:53:97:33:22:03:d8:67:fd:5c:
79:c0:7a:da:66:94:17:a6:bc:6f:fa:9d:31:d2:2f:
9b:aa:51:53:a4:bd:9c:33:6d:b7:97:f2:f9:78:d3:
74:bf:53:4b:c6:75:93:25:4c:c4:c2:f7:fa:d3:f3:
da:df:78:fa:ac:5f:04:a0:e8:73:dc:b2:da:4c:99:
59:2c:6a:84:eb:33:3f:81:63:74:5a:bd:6e:ff:69:
29:f8:8e:8e:a5:22:4e:c4:d7:29:66:0f:d7:a2:5f:
bb:84:c5:d9:90:b2:83:b7:a5:dd:d9:6f:87:e9:07:
65:19:39:9c:fa:66:50:f3:09:44:eb:0d:93:bf:93:
b7:ba:7a:25:af:b4:c8:49:19:f7:2d:f7:f3:95:7b:
a2:b9:9b:5c:98:7e:21:74:56:bd:33:a3:95:33:c0:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:14:21:46:10:44:0B:E1:53:F6:27:B9:9F:D0:DA:FD:6D:45:76
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3e:60:4e:dd:2b:54:9a:74:09:53:95:59:cc:c4:bd:44:e1:
aa:19:37:7f:c3:b4:bc:67:79:15:b9:1e:6d:d1:4e:49:b8:0e:
1f:1b:69:eb:2b:95:7a:ca:4f:7e:ca:cb:2a:24:f7:59:97:0d:
a6:0b:97:ad:a6:60:d6:12:85:a1:a8:27:7d:07:c5:4f:36:36:
b3:c5:c2:f1:5a:6d:88:1a:01:c7:83:b6:6a:b9:ad:ec:76:06:
df:ad:e6:21:b0:26:70:aa:ba:63:31:1b:36:1f:e9:7f:66:10:
86:9b:3b:1b:75:ab:69:40:45:63:0a:54:a7:fc:45:8c:df:8a:
02:df:05:db:07:2b:cc:c6:a8:ff:83:57:a9:b9:22:81:da:53:
90:1e:eb:6f:87:05:09:94:3e:a7:1b:8c:ef:4a:ee:8f:2e:ed:
e4:ff:2b:e6:7d:b9:41:7f:4e:d6:ce:fc:85:77:54:13:4b:0f:
11:fa:cd:5c:76:2a:d2:07:48:24:62:85:25:ee:ab:b1:13:87:
a4:6e:fd:47:1d:d4:6f:f3:d3:24:49:76:09:93:86:3c:e5:1c:
53:55:2b:69:30:58:68:f0:d3:c9:39:89:e1:7c:ab:ad:d6:e7:
3c:c8:d8:89:12:d8:7d:83:60:05:c0:bc:45:d7:b8:2d:bc:96:
d8:9f:98:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2r8T1loBUq9clMikZkY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi
MzRlY2IwHhcNMjYwNzI0MDIwMDU5WhcNMjYwNzI1MDIwMDU5WjAzMTEwLwYDVQQD
EygwYzMzMTQyMTQ2MTA0NDBiZTE1M2Y2MjdiOTlmZDBkYWZkNmQ0NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoCFwr7Rf5zZcBZnHGyN0Yw/XaGg
gE3oHF/x5CqYHwDguimxDgSF9fYXdeDpfjkAcQKopPTHqqCFiDa5ZoCYvcFtc07g
iOsh0VgWDrYSmi5VjcQ5AFso7/KjX3xupXtTlzMiA9hn/Vx5wHraZpQXprxv+p0x
0i+bqlFTpL2cM223l/L5eNN0v1NLxnWTJUzEwvf60/Pa33j6rF8EoOhz3LLaTJlZ
LGqE6zM/gWN0Wr1u/2kp+I6OpSJOxNcpZg/Xol+7hMXZkLKDt6Xd2W+H6QdlGTmc
+mZQ8wlE6w2Tv5O3unolr7TISRn3LffzlXuiuZtcmH4hdFa9M6OVM8DTowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwzFCFGEEQL4VP2J7mf0Nr9bUV2MB8GA1UdIwQY
MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt
ZGVmMGNjMzRlMDA4LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4
LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj5gTt0r
VJp0CVOVWczEvUThqhk3f8O0vGd5FbkebdFOSbgOHxtp6yuVespPfsrLKiT3WZcN
pguXraZg1hKFoagnfQfFTzY2s8XC8VptiBoBx4O2armt7HYG363mIbAmcKq6YzEb
Nh/pf2YQhps7G3WraUBFYwpUp/xFjN+KAt8F2wcrzMao/4NXqbkigdpTkB7rb4cF
CZQ+pxuM70rujy7t5P8r5n25QX9O1s78hXdUE0sPEfrNXHYq0gdIJGKFJe6rsROH
pG79Rx3Ub/PTJEl2CZOGPOUcU1UraTBYaPDTyTmJ4XyrrdbnPMjYiRLYfYNgBcC8
Rde4LbyW2J+YHg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:30 2026 by rpki-client