Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: 5B7e/6Khab2H8Y8LidWcrvCR88z0VvGSzFkYZYyQHM4=
Subject key identifier: D1:66:E5:F3:9A:97:2B:38:52:52:F7:EF:1A:61:C5:B9:F8:A1:34:B3
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 019F92110EE0D943D9732B54CD8A4EF6CCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 1890
Signing time: Fri 24 Jul 2026 03:00:19 +0000
Manifest this update: Fri 24 Jul 2026 03:00:19 +0000
Manifest next update: Sat 25 Jul 2026 03:00:19 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: r3jR4aFzLhFPZDTVlicFJjVkmoM8ESCStBU+g3RPCQo=)
2: xET4g9Q22br6M_aAIvnYf8vNiW4.roa (hash: Co0dW764z3RfUQJ68TAOxwF+Vuab9DVTLXdcNmyxXW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:0e:e0:d9:43:d9:73:2b:54:cd:8a:4e:f6:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Jul 24 03:00:19 2026 GMT
Not After : Jul 25 03:00:19 2026 GMT
Subject: CN=d166e5f39a972b385252f7ef1a61c5b9f8a134b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:e4:87:0e:aa:8c:75:3f:08:5e:e6:1a:2d:
6a:49:13:de:2e:6e:3a:49:dd:15:36:f3:03:e0:72:
0e:94:1d:dc:7a:c5:db:f7:a5:d1:a5:29:af:31:83:
74:15:7b:b6:fa:60:a6:c8:89:52:19:64:a1:ad:7c:
e4:34:fb:1e:32:95:50:ac:44:e2:13:46:c1:71:b6:
d8:82:4d:8a:b3:33:7c:50:6c:43:4a:d1:eb:aa:80:
3e:2c:ac:56:9c:01:02:41:0e:50:42:94:83:70:5b:
75:a6:07:48:45:6e:58:88:38:af:40:c1:e2:98:9a:
c8:04:22:94:07:22:f7:5b:cb:fe:dd:3d:88:01:e6:
3e:05:23:49:ad:d7:7c:b3:a2:1a:73:76:7e:f8:4e:
2c:0f:11:59:56:b4:ee:4d:64:de:f6:42:ca:53:25:
73:2b:e4:3f:c8:bb:f3:16:d8:df:bd:ff:53:ba:9c:
f3:8d:75:60:e8:79:6e:79:91:d7:1a:ea:38:ff:b4:
0d:ab:0d:d7:36:40:d1:0f:de:80:2e:d5:c3:10:7f:
8d:ff:ce:d4:8a:09:6c:51:9d:ea:4a:1a:e2:00:0b:
ba:c9:07:ce:24:b2:f6:fd:68:e0:5a:82:f9:88:8b:
80:7c:68:9d:0e:e7:e0:36:7c:9a:2c:61:e4:d9:6c:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:66:E5:F3:9A:97:2B:38:52:52:F7:EF:1A:61:C5:B9:F8:A1:34:B3
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9c:a5:55:4f:79:70:50:a8:d5:d2:45:3a:06:ea:ec:31:e5:
8c:a1:a5:77:20:85:33:f1:55:8c:5c:a1:e0:c2:6e:ef:9f:39:
90:7f:2c:82:45:5f:60:b3:7a:96:a4:10:59:cc:e8:0f:4f:08:
1a:5d:6d:5b:a9:43:13:be:1e:8c:1a:02:2d:56:8b:4e:66:f4:
4c:c7:1a:15:0f:5c:39:f8:82:52:26:06:ce:78:c2:b0:07:dc:
af:d7:c9:03:b1:ec:d1:72:b8:b2:5a:d6:58:1e:3b:11:41:a5:
4e:6c:4c:b5:c8:33:fb:0d:bf:a0:42:d7:7e:ff:39:17:eb:05:
90:12:68:52:8f:4e:30:80:47:57:ed:a8:18:2c:94:f4:71:7a:
e4:fe:19:8d:77:cf:57:77:b9:7f:2a:f9:94:36:a1:0b:34:b3:
f6:db:08:4e:52:a5:96:36:0a:be:73:ed:98:71:63:d1:08:36:
03:d5:e5:72:23:96:d2:b9:cd:25:aa:f2:30:36:86:fe:d9:bb:
57:09:98:3a:ac:b9:4c:1e:68:01:ea:26:72:c7:3d:1b:72:cc:
e2:6a:0b:2f:8b:17:d0:34:bd:f0:53:7a:62:fb:a9:e3:f3:be:
16:ef:9f:53:c5:21:21:73:c3:1b:1b:08:a3:47:ea:bc:25:24:
f4:df:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:32 2026 by rpki-client