Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: L8DiaZX7chLuGlkQ6jPjTBcaDxd4sog7JZlogAQOK64=
Subject key identifier: 78:CC:91:62:CF:CD:5A:B8:32:E5:17:68:06:C0:53:F4:7C:E4:58:AC
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 019F90FE58046BECA7A5A31D4415F70A1A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 0C5D
Signing time: Thu 23 Jul 2026 22:00:15 +0000
Manifest this update: Thu 23 Jul 2026 22:00:15 +0000
Manifest next update: Fri 24 Jul 2026 22:00:15 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: 8N1nTRNTFPQjDOzZn5Dvm71ZrD2flfXDrfk+KInjw4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:58:04:6b:ec:a7:a5:a3:1d:44:15:f7:0a:1a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Jul 23 22:00:15 2026 GMT
Not After : Jul 24 22:00:15 2026 GMT
Subject: CN=78cc9162cfcd5ab832e5176806c053f47ce458ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:85:3c:e2:8f:e2:3c:77:47:84:a2:6b:1d:
3a:32:19:92:5b:25:16:c8:18:54:de:f0:9d:a4:31:
94:8f:91:64:31:60:ac:94:a1:91:8e:58:0e:9d:d6:
49:88:1b:32:eb:f3:d5:52:af:62:e9:56:8d:72:55:
55:62:01:7a:1a:71:6f:12:5f:3e:1d:c1:ca:c9:9c:
cb:51:5f:60:77:25:ef:3e:68:26:4b:96:ac:1f:a0:
07:bb:f6:43:23:7d:40:8e:f6:b1:7d:22:fa:5d:da:
54:e0:83:17:66:7d:80:55:fb:a6:a5:16:db:58:ff:
ad:37:72:f0:de:5d:ff:d0:22:5e:d3:4a:55:b5:80:
37:84:a9:fc:1e:09:4c:8c:27:98:05:93:ba:35:a0:
4d:3d:62:ee:71:f7:f6:c6:e3:cd:96:7e:8e:49:d1:
97:51:ab:42:61:b3:bd:41:ee:c7:8d:1a:87:88:ae:
fd:e6:8b:02:0c:0f:67:f6:34:09:0a:ca:18:f0:0e:
8f:a5:7b:35:eb:fa:15:cc:86:02:2c:99:dc:93:0e:
23:31:f0:d9:b1:38:9b:e7:6e:76:05:9f:96:73:12:
f6:da:e2:12:64:30:9b:42:0d:c1:4f:34:07:8d:87:
98:cf:69:d4:74:53:f6:97:97:58:18:6b:6f:f1:4b:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CC:91:62:CF:CD:5A:B8:32:E5:17:68:06:C0:53:F4:7C:E4:58:AC
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:63:03:be:f7:1d:dc:4a:a8:34:ae:42:47:73:6a:f1:b8:79:
43:13:3d:5d:96:bf:17:91:83:8c:7f:91:24:a1:2f:59:71:8e:
ac:83:17:cb:82:2d:b1:a1:81:b0:5a:79:85:4e:fa:42:1b:ec:
75:94:92:5e:5c:22:94:c4:00:6a:eb:92:41:68:d6:b2:fc:86:
19:ce:38:02:4c:ba:52:31:1f:9e:e0:de:fd:c0:81:24:a4:21:
8f:cc:03:7e:58:81:0b:b3:67:21:17:d5:3e:07:35:03:18:86:
d1:92:a4:ce:31:db:5c:90:9e:1f:26:6f:83:5a:25:59:4e:3c:
cd:fb:c7:86:f6:47:c1:11:e0:67:9f:4a:02:a8:69:55:97:b1:
70:94:c2:15:ed:f8:5f:8f:64:38:34:53:88:96:ca:cc:d5:b6:
47:a7:f0:19:46:55:37:92:6b:c2:5c:7e:ca:1f:1a:02:0a:d6:
d1:2a:d4:c0:2b:7e:cb:fb:df:ef:b6:51:8f:1b:b4:c4:38:22:
e1:b3:cc:2f:05:97:36:13:52:e2:28:02:1d:09:8c:e0:0c:f5:
b3:30:7c:e7:55:49:67:b7:44:e6:86:25:bc:50:9d:e8:74:0a:
4a:73:46:8e:47:90:08:4d:f7:c8:7f:bb:b6:e2:b4:8c:38:66:
b5:7c:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:47 2026 by rpki-client