Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
File: 2V_Z-7sug4agu3amyEH8aKfD65g.mft (raw, json)
Hash identifier: 4lBuZ77MYnPZ2ncbQneTmCO+op4nal//OhYxLe83yhI=
Subject key identifier: 20:C9:BE:8F:39:50:14:87:FE:41:B6:AD:FA:90:F9:C8:5E:D0:53:F4
Authority key identifier: D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
Certificate issuer: /CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Certificate serial: 019F9023574B2FE0258406E21B524D5F0624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
Manifest number: 0617
Signing time: Thu 23 Jul 2026 18:01:02 +0000
Manifest this update: Thu 23 Jul 2026 18:01:02 +0000
Manifest next update: Fri 24 Jul 2026 18:01:02 +0000
Files and hashes: 1: 2V_Z-7sug4agu3amyEH8aKfD65g.crl (hash: MzXk5cJTQym/lMjuNehlXn3nQANqlU2c9SoYWXX8KHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:57:4b:2f:e0:25:84:06:e2:1b:52:4d:5f:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Validity
Not Before: Jul 23 18:01:02 2026 GMT
Not After : Jul 24 18:01:02 2026 GMT
Subject: CN=20c9be8f39501487fe41b6adfa90f9c85ed053f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:5c:70:a4:25:5c:8d:81:7a:bf:cb:62:e9:
ad:cb:0a:a7:01:96:a7:a4:55:bd:cf:a9:ec:ca:92:
23:9e:b5:60:71:00:79:9a:86:e6:93:05:e9:63:a2:
5a:18:a8:30:b2:02:0d:03:5e:a7:4c:74:14:8f:88:
ef:49:f9:06:ad:fb:57:ef:43:7c:9d:6a:e5:5a:9c:
4f:a7:5f:f4:fa:b9:8d:7a:4b:6c:86:f5:09:29:db:
96:f5:75:77:9d:4a:99:54:7b:98:85:a1:7a:c1:1b:
54:7b:1d:fc:0d:0b:d6:db:b9:ba:e6:d5:3e:25:ab:
fe:fa:5b:c4:e9:30:23:a6:1f:37:4c:01:36:8a:6a:
09:d7:3b:69:db:09:11:ff:b4:6d:99:9b:a3:63:21:
33:b7:47:94:50:89:c2:ad:29:aa:fe:25:1f:88:d9:
e3:b9:03:9f:87:06:89:b1:a1:d5:db:f3:09:2e:5b:
52:5b:af:ac:54:da:a7:fb:b5:31:ef:ec:36:c9:fd:
74:1d:1a:c1:cd:6e:38:67:37:6c:86:0c:d0:f0:3a:
a7:fc:04:df:96:44:58:bc:35:ef:9c:ad:24:5c:27:
92:c6:ca:84:74:5b:ab:3c:8e:2a:39:1a:5c:62:62:
76:81:4f:f6:10:36:ba:2a:88:b9:e0:b5:20:fc:20:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:BE:8F:39:50:14:87:FE:41:B6:AD:FA:90:F9:C8:5E:D0:53:F4
X509v3 Authority Key Identifier:
keyid:D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a5:ce:90:29:0e:2e:3d:40:e9:c8:22:03:24:27:56:e4:26:
8c:90:73:ac:76:ba:20:d7:b4:3b:09:52:3d:c4:38:d1:23:67:
77:d5:35:6c:0e:f6:b2:9a:85:5a:cd:16:4a:22:cd:7b:6a:cf:
58:a1:cc:c6:e9:6a:2a:af:65:51:9c:54:eb:a3:a9:6f:6e:a6:
c7:7d:5d:83:a1:46:81:e7:20:85:bc:5c:95:b3:ce:91:67:8a:
22:8b:ef:68:6d:1f:64:0b:23:08:8b:a5:c6:a4:27:5f:9a:ba:
fc:4c:b4:75:b5:8f:2d:82:85:6a:b4:93:6f:a0:fa:72:2d:f0:
8b:5a:fa:04:ce:46:6b:b6:60:6f:b5:8e:00:3b:36:d6:88:bc:
f6:89:f4:c7:5e:86:35:fb:bf:2e:25:fc:1d:1c:65:0a:7d:14:
04:8e:6a:91:78:41:44:72:58:f0:1e:2c:c8:35:35:1b:69:92:
49:ae:ce:00:31:c0:4a:43:6a:87:ce:c9:06:eb:12:e6:82:74:
00:43:d6:62:fe:03:89:90:2b:81:60:49:2a:1e:7e:4e:7d:6b:
e0:c5:bb:f6:a9:cc:de:9a:c9:df:ce:bf:78:22:eb:6e:76:05:
4e:85:ce:c5:16:c2:4f:96:1f:87:18:40:0a:3f:ba:d8:9a:f6:
1f:fb:eb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:07 2026 by rpki-client