Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
File: 2cj-O3Ss0SRgHvsTBk98cwBglno.mft (raw, json)
Hash identifier: u8U/X0/F7e+UmiHloWJ8drlkAHQaKIDLJxe1iPP9hK4=
Subject key identifier: 67:1D:D3:6B:EB:A4:F5:60:77:90:41:24:8A:DB:3D:B4:E1:45:02:B0
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Certificate issuer: /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial: 019F8F7F5F56F489F19851C514D1552026A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:56 +0000
Manifest this update: Thu 23 Jul 2026 15:01:56 +0000
Manifest next update: Fri 24 Jul 2026 15:01:56 +0000
Files and hashes: 1: 2cj-O3Ss0SRgHvsTBk98cwBglno.crl (hash: KcnEOdN6PxQf6YzenDIqmoLdaORl1fDo9eCJ0wttwwU=)
2: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (hash: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5f:56:f4:89:f1:98:51:c5:14:d1:55:20:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
Validity
Not Before: Jul 23 15:01:56 2026 GMT
Not After : Jul 24 15:01:56 2026 GMT
Subject: CN=671dd36beba4f560779041248adb3db4e14502b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:c8:e1:56:3f:5d:e4:61:d9:32:a7:10:4b:
be:2b:64:7e:82:77:9c:ba:da:fc:b2:f8:c8:7a:69:
22:b3:12:19:9b:53:dc:56:72:18:e6:b2:18:0d:86:
be:ed:40:c1:02:2e:e9:7b:6f:2b:09:10:7f:6b:53:
3b:b2:81:e3:02:0d:04:4e:50:32:07:f4:e5:1d:a8:
39:aa:20:c5:be:10:62:fe:e9:58:bc:c2:d6:0e:5f:
24:fb:b6:8c:bb:2e:95:06:5c:56:b1:18:b1:85:e2:
40:7c:42:b5:97:15:af:16:14:8e:ac:42:72:25:69:
b7:cb:01:ed:23:7c:59:49:f9:5a:9e:c4:80:44:2d:
f5:d1:c0:04:ca:08:04:89:8b:4d:c3:b4:67:a8:f2:
ba:19:c3:c6:78:fe:06:80:dd:96:56:49:d9:ea:ed:
51:29:e2:b8:3c:4d:48:48:46:55:88:dc:55:ba:a1:
23:a5:ac:bb:ac:4d:5b:10:3f:fb:4d:f6:6d:2a:e4:
75:9d:65:d3:f2:21:e7:c0:9e:e1:30:14:c4:3a:ed:
da:06:eb:a9:93:db:2d:db:62:f2:4f:a6:f0:4a:f9:
fb:dc:f5:ec:44:f5:5c:22:1e:b5:2c:77:ea:e2:a6:
41:2c:a6:92:ac:4f:4a:8b:18:76:a5:5c:dd:c0:42:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:D3:6B:EB:A4:F5:60:77:90:41:24:8A:DB:3D:B4:E1:45:02:B0
X509v3 Authority Key Identifier:
keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:c2:38:f1:fc:7e:60:60:ee:64:eb:79:2b:7a:9a:86:cb:
8e:79:ab:27:16:60:db:d4:ec:49:65:68:30:6f:6d:d5:d0:18:
95:10:67:41:03:00:49:52:6b:23:60:ba:4f:54:3e:a7:b6:73:
e1:ed:72:22:a9:59:68:24:17:8f:13:77:1d:9a:1d:9c:b2:3e:
88:34:fb:f4:eb:c0:44:d3:b0:37:6e:6a:b0:de:9a:18:f6:5e:
a6:1e:95:62:da:a6:52:73:ac:07:3f:1a:f1:40:5a:b5:1d:92:
e9:16:c7:d7:93:47:25:e0:20:7e:a9:95:af:58:18:94:82:16:
37:6f:c6:c4:e8:44:b1:53:5d:85:08:d7:ba:4c:2c:64:1a:bd:
5a:14:0a:6c:08:7a:3a:88:58:02:7f:46:68:ee:43:ec:fa:e3:
ed:70:b7:b0:d3:d6:13:e6:39:65:d7:6e:52:34:7e:a6:58:a4:
ac:ff:dc:3f:4f:3d:ce:19:a5:3d:da:4c:13:8d:88:dd:6c:1a:
1f:bc:db:e1:61:cc:6d:77:50:e7:ce:49:a5:c7:8b:88:89:c6:
b0:5d:ff:a3:94:19:48:0e:59:99:4d:f6:d9:e0:40:76:52:8a:
8e:a5:ee:c4:b1:d7:02:5f:2e:64:0d:0a:8c:51:11:4a:4e:c8:
c1:2d:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:08 2026 by rpki-client