Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: kJdJ8y54j2Scs0g+lKjpT8+hACm0sWb0c5bXwRUxGfg=
Subject key identifier: 16:BB:2A:2F:7D:3E:EE:19:89:EF:5B:F6:3D:A3:58:C8:7F:B5:6E:57
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 019F90233CD2EE7297DCFEBB7A391B53526D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0C02
Signing time: Thu 23 Jul 2026 18:00:56 +0000
Manifest this update: Thu 23 Jul 2026 18:00:56 +0000
Manifest next update: Fri 24 Jul 2026 18:00:56 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: j0GPHQ8+hMs+i7zwJDZaPYzNRDDwXs9+1h3VWfqxe+c=)
2: zuAP0P2ieWMLtXb48E1VVwKO93w.roa (hash: KzZQHMAxju4Nmcnntgy06fN2nxsFzdB0gSb36aOEgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:3c:d2:ee:72:97:dc:fe:bb:7a:39:1b:53:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Jul 23 18:00:56 2026 GMT
Not After : Jul 24 18:00:56 2026 GMT
Subject: CN=16bb2a2f7d3eee1989ef5bf63da358c87fb56e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:16:1c:74:a1:c2:70:52:f1:7b:7e:66:aa:
ad:73:16:b9:b6:62:81:a7:51:4f:3a:ec:34:73:37:
d7:69:17:41:22:1e:f8:c3:1d:0f:34:7e:b0:f4:18:
00:c0:4d:44:9a:9a:9b:6d:1d:48:b1:e5:22:5d:49:
5d:6e:47:cb:0c:d1:9a:65:f2:f0:ef:6d:3e:2d:00:
9a:5b:68:8a:b7:62:63:92:2c:cf:71:f3:98:53:2d:
82:68:00:4c:40:79:d0:d1:dc:f4:ad:46:c6:39:36:
cb:ee:7a:43:2d:38:72:dc:d1:8d:fb:18:2f:a2:a5:
eb:c1:56:88:bc:84:e7:7e:c5:8b:6e:c4:38:7d:5a:
fa:2c:08:ae:06:e4:e0:cb:c5:b7:bc:fe:c5:fb:05:
25:fc:2e:44:16:13:8b:43:45:75:09:b1:72:25:c1:
e1:33:36:29:62:48:24:66:43:ae:9f:a7:84:a9:a3:
40:ce:a1:ab:8f:57:3f:b8:f8:9a:40:c4:e1:47:7a:
66:13:68:bd:fd:e4:06:8c:4a:d1:a8:1d:93:55:ce:
8d:32:7d:82:74:5c:09:59:03:79:dc:50:80:d5:e2:
76:25:d9:26:3b:de:e6:2d:22:f1:fb:51:bf:3e:f5:
5f:b1:d1:b7:f7:e3:51:0b:32:07:47:86:af:21:e7:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:2A:2F:7D:3E:EE:19:89:EF:5B:F6:3D:A3:58:C8:7F:B5:6E:57
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:eb:54:4f:6f:0d:9b:d4:0b:f0:b8:b4:2c:9c:ad:13:c2:f5:
62:dc:a2:fb:88:76:f4:2e:25:e8:0a:6d:5c:87:88:a6:94:78:
63:2b:01:17:21:6d:1f:07:8b:d3:84:64:07:c2:22:80:c9:00:
bd:75:5e:95:88:63:df:bf:10:32:e3:fc:ac:3a:e0:88:63:05:
ec:1c:4c:70:b4:26:7c:0f:8e:56:aa:a1:1f:97:14:86:09:63:
81:6f:2a:25:aa:e1:f5:87:3b:b6:c6:86:21:75:62:19:5e:7e:
84:aa:ba:a8:17:b0:19:0a:c8:98:ee:bf:64:a8:28:b8:94:d5:
6a:4a:17:51:5c:9e:ee:a6:e1:c1:bf:06:dc:86:ed:bc:da:2b:
48:46:82:0a:fa:5d:f2:67:5a:fb:e1:47:1b:a7:c1:08:8e:c2:
a6:a5:3a:65:8a:6f:95:42:71:f9:7c:8b:cb:8d:73:60:10:86:
d5:b8:9b:f9:fb:7d:37:7e:dd:df:ff:40:c2:e2:a2:05:f9:ad:
3b:27:32:09:1a:c4:84:e9:37:e4:81:2e:53:39:13:f9:6f:b5:
df:c0:f7:e3:45:56:b4:39:5a:ed:64:4b:f4:1a:19:cc:16:2a:
8f:cd:73:9a:91:86:61:66:8f:d0:8d:b1:d8:ac:64:ab:a9:e9:
58:d7:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:52 2026 by rpki-client