Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
File: 2KVuLWOsXam-012gHL-tIl8EvrA.mft (raw, json)
Hash identifier: C5+067XnxhSByoOB5z23Dohp+5jEXp4aBHcC1UQ994s=
Subject key identifier: 2F:A4:BF:2F:B1:E5:48:BB:8A:28:38:CC:1B:B0:1C:A3:0A:4D:F8:C3
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 019F90910BCCD2DCF0E02FA89CFB8106091E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 20:00:52 +0000
Manifest this update: Thu 23 Jul 2026 20:00:52 +0000
Manifest next update: Fri 24 Jul 2026 20:00:52 +0000
Files and hashes: 1: 2KVuLWOsXam-012gHL-tIl8EvrA.crl (hash: gYP5mbLR7UF5gS5ybQU93LURjH62N3DntkyP2RPiE2Y=)
2: H5rz4CYgzmbUmnfGasi4U65AvKk.roa (hash: TO3cNYf9xWtPGa2S3JS5FwJuRn8xpuHQxouafZFM9ao=)
3: qrZor_4iuHhjWECNHuPoqjZgwRM.roa (hash: jTjQTNz6GwiMBlghpXe7c+6S4Cn1ehIr1K8g9CB/9Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:0b:cc:d2:dc:f0:e0:2f:a8:9c:fb:81:06:09:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Jul 23 20:00:52 2026 GMT
Not After : Jul 24 20:00:52 2026 GMT
Subject: CN=2fa4bf2fb1e548bb8a2838cc1bb01ca30a4df8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:30:58:4e:7f:21:e7:48:86:c2:d5:59:54:
23:98:90:a0:60:b9:6a:f9:b7:38:84:fa:d6:7a:25:
3b:c5:5c:84:94:c3:b6:9d:ec:35:73:78:18:d3:6c:
26:82:43:f1:0d:17:bd:9d:09:4b:d9:a5:e1:39:1b:
d3:1d:27:6f:c1:27:12:2e:83:a0:b3:1c:ac:0f:ff:
eb:24:c8:d4:66:a8:cb:76:fd:5c:4a:8b:e2:3e:46:
32:d9:55:ca:20:18:c9:34:45:70:03:b5:89:bf:03:
df:01:c3:0f:03:22:ab:96:99:fa:fe:e7:bd:d2:75:
c1:3b:6a:e7:62:cd:d6:e3:3b:ef:49:1a:79:a7:48:
a8:3e:24:7e:17:7f:ea:90:69:07:a3:bc:c2:c4:4c:
7e:4a:13:d1:8d:87:98:32:34:98:55:b7:ea:2a:f4:
cd:11:1c:57:d6:ce:84:3a:ee:20:12:18:95:48:1f:
70:af:10:27:74:df:14:a1:02:e1:b0:69:67:b4:4a:
1e:95:a3:cd:a8:52:14:c5:83:aa:d6:09:62:2c:63:
d7:19:17:53:c5:12:28:ac:a8:a4:85:c1:1a:52:2e:
66:68:9d:4f:9d:a6:69:bd:4f:7b:5c:71:03:9e:b5:
84:ea:15:21:04:30:ca:20:0e:89:13:13:f5:ff:93:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:BF:2F:B1:E5:48:BB:8A:28:38:CC:1B:B0:1C:A3:0A:4D:F8:C3
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f6:e9:f4:ff:51:e7:45:16:e1:db:8a:df:4e:6e:9d:79:d3:
84:6b:e4:70:b1:37:0b:d8:28:77:61:aa:38:23:9b:6b:db:15:
d4:2e:a5:be:3d:05:72:b5:bf:4a:8b:1c:93:84:6f:49:4f:6a:
85:e2:aa:13:70:07:2b:c5:a6:30:a4:b0:fd:5b:d1:81:47:77:
ce:7a:cd:57:60:c3:8c:b2:d7:3f:f5:1e:9a:36:dc:44:2a:d9:
50:df:63:3a:b1:b0:78:05:22:86:f6:bc:8e:ee:78:7c:89:09:
ec:be:f5:e0:00:40:11:e9:c3:4f:60:72:37:fd:03:85:5b:b2:
fc:17:2a:48:25:4f:8d:f4:a5:fb:eb:c1:a1:d5:ff:bc:ff:90:
ba:7e:78:fb:ec:a7:89:cc:9d:5e:db:1e:f4:1f:a0:18:76:eb:
ad:0e:d7:10:c0:65:1a:f3:3f:6a:15:78:e5:a6:fa:a4:bc:92:
a4:42:1f:d8:e1:e3:2d:5a:ca:d5:4e:e7:b1:c9:bb:96:69:a3:
cb:ac:4e:e5:13:0b:04:ba:b3:9d:7d:5c:eb:5c:14:e0:cc:cf:
6f:26:3c:69:fc:a1:4b:1d:bc:76:99:f2:1b:26:c7:5c:a5:0a:
3c:ad:71:cb:db:a6:e8:b2:d1:e2:2f:cd:ad:c4:16:2d:57:cc:
65:5e:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:02 2026 by rpki-client