Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: ZJ68TTSBGbVWGL2Dqg+H9R8p2S5vln/WelerJKpgjNA=
Subject key identifier: A8:33:2A:52:61:7C:83:11:08:CC:14:58:4F:6E:52:6C:64:5A:86:62
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 019F916D7F110C1AEF3A7468D3505F3550D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0C15
Signing time: Fri 24 Jul 2026 00:01:39 +0000
Manifest this update: Fri 24 Jul 2026 00:01:39 +0000
Manifest next update: Sat 25 Jul 2026 00:01:39 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: N8lQRca0tvwDwAITZVJoZ8tS/UDBGqyQCw2zxijDOVY=)
2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=)
3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:7f:11:0c:1a:ef:3a:74:68:d3:50:5f:35:50:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Jul 24 00:01:39 2026 GMT
Not After : Jul 25 00:01:39 2026 GMT
Subject: CN=a8332a52617c831108cc14584f6e526c645a8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:69:9a:50:ba:64:5d:ab:67:be:dc:37:5c:
88:a2:7f:c4:e2:40:58:77:05:a8:b2:ef:a1:28:ed:
99:bf:f1:3f:8b:8b:15:40:a6:31:e4:23:90:ad:00:
57:2b:57:a0:d7:9b:eb:8f:bb:68:3a:16:56:4e:83:
ae:b7:a0:d1:32:fe:65:4e:ac:53:69:ba:f8:ec:26:
8a:92:f0:2d:4e:3f:a6:c8:81:7e:42:56:9d:dc:a9:
70:cb:70:1e:a1:fa:a2:38:2e:78:55:67:03:b9:ab:
7d:2e:7a:2b:32:6d:33:c1:13:e2:d4:f3:2a:e3:2c:
de:9b:30:e3:48:5e:66:01:f6:77:06:6c:ff:0f:12:
98:b2:ad:8b:f6:30:71:1c:f6:db:c6:a5:e7:6d:a2:
4c:f9:ec:e4:e9:63:54:e6:71:72:96:a5:ad:a0:9a:
62:77:ea:dc:4e:b1:0b:d0:3f:47:a6:03:c6:92:97:
66:fd:4b:7a:0f:9a:c5:89:85:11:bd:02:67:5c:8b:
69:bd:e2:0b:61:90:e1:eb:71:c1:ab:b1:13:57:5e:
24:2f:f8:25:25:ee:6b:01:85:c0:c1:05:23:52:ff:
93:53:96:cf:6c:9b:5f:3a:b2:07:8e:40:0d:a7:31:
4f:96:f1:f2:df:bf:84:66:e4:c1:9f:79:57:3c:3d:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:2A:52:61:7C:83:11:08:CC:14:58:4F:6E:52:6C:64:5A:86:62
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c6:58:89:82:86:b1:32:fb:12:ee:7d:d4:c9:90:27:c8:5f:
3d:34:79:79:2f:3d:60:09:ec:02:4e:e8:de:fd:89:38:33:d9:
a8:52:43:11:0d:52:95:c5:6d:3f:29:1f:a7:92:0f:41:53:ee:
ad:35:d5:5a:48:0d:ae:d2:12:3a:bd:48:30:31:c8:70:65:43:
e4:fc:21:3d:b9:37:cb:f7:c6:e1:24:b8:6e:77:82:58:0b:46:
d6:98:ff:53:cf:fe:8e:95:0a:f6:2f:19:3b:f5:7b:c4:18:d1:
db:22:98:b6:d2:be:05:71:3c:2b:db:8b:92:08:6d:78:69:23:
81:99:91:79:e7:42:6a:6f:a5:19:c2:64:61:c9:16:f9:11:c2:
ce:7f:88:d5:46:c8:9c:93:03:1c:ea:bc:30:0e:98:db:01:7b:
93:cd:da:33:52:0f:c8:b7:8a:cc:6c:38:02:2a:01:b8:7a:dd:
90:c2:0b:67:91:13:2e:92:0c:fa:81:fa:29:9c:96:69:14:a8:
12:8a:cb:71:20:5e:a8:f7:c1:55:49:0b:4c:f8:f4:3f:18:44:
eb:2d:86:25:96:8b:be:cb:2e:da:42:4d:5d:c5:0a:d0:02:86:
5e:5d:56:e2:f0:80:26:ba:29:0e:8f:e0:f2:12:d0:bb:69:ec:
81:a6:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:49 2026 by rpki-client