Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: +IbDV1l8UQif5NTEvFIjrPUDV/KVBlsRiFKNrfn9b6I=
Subject key identifier: 9B:6A:AF:58:14:01:35:EC:58:2D:B1:C7:C8:06:B5:41:EA:50:46:14
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 019F8FB4ED67D4A3D86B4158B25B4620CBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 1231
Signing time: Thu 23 Jul 2026 16:00:26 +0000
Manifest this update: Thu 23 Jul 2026 16:00:26 +0000
Manifest next update: Fri 24 Jul 2026 16:00:26 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: ShaaWTauvlyRjs47nxHgI4ekVwvM609bGgwTjpXLUC4=)
2: g5H3jVqYNQpriA9TInAd41VghDM.roa (hash: 3r7gHJ0JlonEqSVqkHhQarvmMlG4HS20KpOoGGPQ51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:ed:67:d4:a3:d8:6b:41:58:b2:5b:46:20:cb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Jul 23 16:00:26 2026 GMT
Not After : Jul 24 16:00:26 2026 GMT
Subject: CN=9b6aaf58140135ec582db1c7c806b541ea504614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:0a:68:23:64:51:ce:94:c2:14:f2:10:45:
d4:16:a7:91:77:4d:c9:1e:c0:64:62:c6:f5:6a:36:
97:ec:13:90:e5:3e:84:66:56:40:80:17:28:55:00:
2e:73:86:26:f3:c2:a0:ca:4f:1d:60:9f:58:9e:de:
25:8d:c5:e6:48:97:ab:4c:7f:69:2a:26:08:74:e5:
0d:3b:65:67:08:de:83:81:f9:15:39:4a:0a:0e:a1:
03:99:62:42:95:ba:86:48:09:5b:69:a4:db:2a:b3:
27:e6:6e:b3:12:2c:3a:92:26:e1:7e:b2:ce:f0:4f:
22:3a:f7:a8:41:5b:cc:37:59:20:51:4c:87:7a:94:
f8:de:1c:44:4c:91:1a:c1:9f:08:8e:6f:f9:9d:96:
28:55:27:ec:a7:be:8b:e5:35:ef:ec:38:42:c1:56:
64:bc:53:72:f4:72:52:30:74:c2:02:45:01:93:79:
64:92:ed:c4:db:e3:95:48:b3:09:00:66:cb:2e:8d:
cd:95:48:3a:be:73:15:f1:3e:ac:50:e0:05:75:80:
0f:11:f9:c5:03:d6:4e:05:aa:50:d0:ae:a6:00:e3:
86:d0:d4:75:15:01:1d:1d:92:e6:62:7a:19:a7:51:
0e:2b:e6:5c:ae:53:a5:ac:c4:2f:f4:db:48:77:10:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:AF:58:14:01:35:EC:58:2D:B1:C7:C8:06:B5:41:EA:50:46:14
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:e0:ce:2a:c5:b8:3d:f5:db:91:70:f6:7f:3f:5f:5a:77:
5c:87:56:ee:1e:4c:c2:f5:e9:6f:bc:0b:81:2a:c7:a0:52:96:
d1:bf:df:a2:6b:36:53:a9:e9:9f:4f:de:de:6d:b4:3b:d8:fd:
6e:b2:8c:6e:ce:4a:3b:39:18:6e:d8:c7:a1:09:9c:e8:fd:42:
22:11:85:21:09:12:50:62:8c:8b:54:5d:6f:36:3e:66:4f:af:
51:43:82:cc:91:24:0c:31:9e:5d:60:e1:e7:8a:4a:67:6e:55:
a5:79:9a:38:37:48:37:39:e3:35:9f:1c:b3:30:84:40:5a:fb:
cb:ae:c2:f5:db:89:8b:ec:4b:c4:ee:39:67:de:cd:48:b4:f2:
38:65:4d:6d:1e:8d:c9:9d:8b:78:a8:7f:7e:9b:7b:b1:ca:1f:
93:c7:fe:be:2c:da:b2:a8:79:eb:25:82:c2:16:82:be:91:50:
6d:5a:43:a6:9e:ef:68:b6:58:39:0a:e7:02:68:37:89:78:9b:
78:86:aa:d6:85:92:e4:9c:62:87:77:f0:30:76:99:5c:c6:c3:
10:20:18:19:93:b7:61:58:eb:2e:68:6f:e9:b9:91:2a:3e:5f:
da:58:ad:a8:ba:c4:0d:82:2b:8e:1e:ef:03:41:0b:90:c2:f8:
01:d1:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:07 2026 by rpki-client