Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
File: 2xjQrivPZ9QUonXLOE8tOWCoN70.mft (raw, json)
Hash identifier: aFNt9K4mGN8Lcr2CF9dmNl4HO2h3QvHF+/XBHn4f8Eg=
Subject key identifier: BD:B0:5D:D0:BB:62:A4:F0:F2:9F:2D:CE:01:C4:DA:8F:2D:7B:49:A3
Authority key identifier: DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
Certificate issuer: /CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Certificate serial: 019F8F7E68A0AD45FCBCFA7C69A3597F4120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
Manifest number: 113D
Signing time: Thu 23 Jul 2026 15:00:53 +0000
Manifest this update: Thu 23 Jul 2026 15:00:53 +0000
Manifest next update: Fri 24 Jul 2026 15:00:53 +0000
Files and hashes: 1: 2xjQrivPZ9QUonXLOE8tOWCoN70.crl (hash: BCJivbEv50pt/vhrQhd1MTJna0H8Qfrj4apmX7vCjhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:68:a0:ad:45:fc:bc:fa:7c:69:a3:59:7f:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Validity
Not Before: Jul 23 15:00:53 2026 GMT
Not After : Jul 24 15:00:53 2026 GMT
Subject: CN=bdb05dd0bb62a4f0f29f2dce01c4da8f2d7b49a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:8d:d5:47:d2:e8:fc:22:99:a8:44:84:88:
50:27:68:2d:d7:82:58:a8:3c:f7:88:89:c1:b1:ae:
36:d7:59:c7:d0:48:28:5d:a4:6e:5c:2e:a9:a9:eb:
93:fc:49:ce:77:02:58:03:c2:b6:04:8c:f1:72:1d:
8b:80:50:ca:f8:21:80:c4:c6:9b:bd:7c:44:1d:08:
ba:c1:48:0d:09:0e:8a:10:f1:2d:49:70:98:11:f5:
69:e0:87:5f:fe:5c:68:00:11:93:97:6d:b7:f3:c5:
3c:c8:c5:48:9f:43:e3:ea:6c:84:eb:69:0f:04:a9:
31:99:51:2f:e0:5c:a7:3d:a5:fa:4d:8c:19:73:a8:
bb:e2:ee:f8:ee:aa:aa:d5:12:83:db:12:ca:7c:0d:
77:52:33:4d:90:2b:03:c7:b6:97:6e:c7:bb:56:f1:
a0:b2:1b:e4:a5:aa:11:03:a1:c8:26:b9:1b:f0:70:
72:33:d7:1d:98:a9:95:a0:16:bb:e6:92:80:bb:e3:
6b:b3:57:cd:c5:38:24:d0:00:70:9b:80:6f:db:8d:
67:1b:7f:8f:83:cc:e4:c1:aa:81:a0:42:d6:2c:51:
a1:8b:21:e8:1b:1a:bd:40:fd:dc:6b:ce:0f:b6:72:
b3:c1:f5:69:8e:91:a1:3b:fb:58:a7:83:f1:32:75:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:5D:D0:BB:62:A4:F0:F2:9F:2D:CE:01:C4:DA:8F:2D:7B:49:A3
X509v3 Authority Key Identifier:
keyid:DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:23:be:0c:ab:cd:b2:f6:20:02:85:d7:7f:d0:6b:54:c0:c7:
26:41:39:ac:9d:ca:8d:6c:ef:df:e8:a0:8d:4c:f9:6f:a6:98:
96:1a:ec:2a:bb:5a:a6:c1:cd:c2:88:25:eb:ef:2c:4a:ac:cf:
6c:7b:63:64:12:27:2d:aa:3e:04:a0:be:ea:3d:3c:83:85:90:
d7:e9:1b:32:a4:53:b2:de:3b:79:1b:6e:2c:b3:02:92:b6:df:
97:c4:ad:ce:c8:82:a7:cf:4f:94:b7:f4:7e:3e:4a:71:94:70:
3e:e9:bf:3d:51:dc:4c:78:7f:92:c8:f5:2e:27:76:57:67:44:
57:0f:3b:86:df:e2:5c:d2:9d:ee:49:a8:a4:5d:6a:d6:80:46:
db:de:28:b0:28:23:14:1a:fb:b1:19:f8:fd:ac:ed:a8:34:ea:
ca:b9:65:01:26:01:ff:28:f3:e5:3a:75:58:fd:30:75:5d:9d:
b6:bc:5c:cc:54:d5:de:34:2a:aa:6f:94:03:c7:1f:a2:8b:38:
32:71:0d:2d:92:b7:f2:b7:05:66:52:c9:93:3b:10:82:3b:75:
ff:65:a8:d1:85:47:f3:2d:d4:72:34:2b:ca:ff:43:73:b9:cf:
33:2a:9d:95:4b:e4:8a:8c:2b:c5:45:0d:46:cb:9f:62:0d:d7:
84:90:48:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfmigrUX8vPp8aaNZf0EgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMThkMGFlMmJjZjY3ZDQxNGEyNzVjYjM4NGYyZDM5NjBh
ODM3YmQwHhcNMjYwNzIzMTUwMDUzWhcNMjYwNzI0MTUwMDUzWjAzMTEwLwYDVQQD
EyhiZGIwNWRkMGJiNjJhNGYwZjI5ZjJkY2UwMWM0ZGE4ZjJkN2I0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY+N1UfS6PwimahEhIhQJ2gt14JY
qDz3iInBsa4211nH0EgoXaRuXC6pqeuT/EnOdwJYA8K2BIzxch2LgFDK+CGAxMab
vXxEHQi6wUgNCQ6KEPEtSXCYEfVp4Idf/lxoABGTl22388U8yMVIn0Pj6myE62kP
BKkxmVEv4FynPaX6TYwZc6i74u747qqq1RKD2xLKfA13UjNNkCsDx7aXbse7VvGg
shvkpaoRA6HIJrkb8HByM9cdmKmVoBa75pKAu+Nrs1fNxTgk0ABwm4Bv241nG3+P
g8zkwaqBoELWLFGhiyHoGxq9QP3ca84PtnKzwfVpjpGhO/tYp4PxMnUJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2wXdC7YqTw8p8tzgHE2o8te0mjMB8GA1UdIwQY
MBaAFNsY0K4rz2fUFKJ1yzhPLTlgqDe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhqUXJpdlBaOVFVb25YTE9FOHRPV0NvTjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jZWY4OTYtZjk2OC00YzJmLTgwYzQt
MGFjZWJhYTY3Yjc5LzEvMnhqUXJpdlBaOVFVb25YTE9FOHRPV0NvTjcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jZWY4OTYtZjk2OC00YzJmLTgwYzQtMGFjZWJhYTY3Yjc5
LzEvMnhqUXJpdlBaOVFVb25YTE9FOHRPV0NvTjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiO+DKvN
svYgAoXXf9BrVMDHJkE5rJ3KjWzv3+igjUz5b6aYlhrsKrtapsHNwogl6+8sSqzP
bHtjZBInLao+BKC+6j08g4WQ1+kbMqRTst47eRtuLLMCkrbfl8StzsiCp89PlLf0
fj5KcZRwPum/PVHcTHh/ksj1Lid2V2dEVw87ht/iXNKd7kmopF1q1oBG294osCgj
FBr7sRn4/aztqDTqyrllASYB/yjz5Tp1WP0wdV2dtrxczFTV3jQqqm+UA8cfoos4
MnENLZK38rcFZlLJkzsQgjt1/2Wo0YVH8y3UcjQryv9Dc7nPMyqdlUvkiowrxUUN
RsufYg3XhJBIJw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:55 2026 by rpki-client