
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
File: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft (raw, json)
Hash identifier: 23MJ9jMaexm9CfxOcRzsM5+WjFS5K1Kw8IqNxHA9O6A=
Subject key identifier: 58:C5:E9:73:0D:4D:A0:F2:C1:2E:98:D7:7C:8A:72:B3:94:F8:FF:8E
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Certificate issuer: /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial: 019F8F7EEF601E1E8340B4E9BA9F17F9D89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:28 +0000
Manifest this update: Thu 23 Jul 2026 15:01:28 +0000
Manifest next update: Fri 24 Jul 2026 15:01:28 +0000
Files and hashes: 1: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl (hash: NgjuQxiZdYTiGd/dgEv/q+f+uj37KiHwp5Lzd1Vr+EA=)
2: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (hash: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ef:60:1e:1e:83:40:b4:e9:ba:9f:17:f9:d8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
Validity
Not Before: Jul 23 15:01:28 2026 GMT
Not After : Jul 24 15:01:28 2026 GMT
Subject: CN=58c5e9730d4da0f2c12e98d77c8a72b394f8ff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:93:01:ad:55:33:c4:6d:52:41:19:82:db:
21:bb:60:fc:17:fa:ee:0f:ba:13:e1:bc:04:62:d5:
24:db:c8:28:21:10:ba:0c:fd:51:29:9c:04:d0:13:
05:2a:52:00:cf:e6:d5:4e:84:86:d9:8c:15:9b:25:
c7:a5:22:ec:94:04:b5:10:1f:29:8f:3a:02:7c:68:
27:92:60:6f:b5:71:5b:51:3d:84:0a:17:81:a5:1f:
39:8d:82:8d:54:98:f8:2d:65:c3:cc:8e:f9:11:9f:
bb:44:bb:de:02:50:e2:32:a6:2a:f2:db:c4:d9:fb:
43:5e:03:e3:65:5a:86:f4:20:ac:2d:e5:95:7e:b1:
bb:da:b8:0c:f2:68:5c:17:02:72:11:1f:02:4e:0d:
b2:f7:b0:4c:96:22:70:c5:bb:62:85:a0:ce:28:87:
a7:1f:1a:05:39:c8:4f:5a:a2:97:4f:d1:89:f4:c8:
ac:9b:ae:ba:60:d2:30:6d:7f:12:5d:d8:31:7d:68:
54:23:be:7e:0d:da:42:cb:69:5c:66:6d:95:b4:44:
24:43:99:8c:c4:a2:f3:72:5b:7e:c1:c3:07:c6:a0:
f6:0d:76:5e:28:0e:34:11:1f:f4:bf:e9:c1:e7:55:
f7:2a:ee:74:84:6a:50:00:da:ed:11:63:01:2e:40:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:E9:73:0D:4D:A0:F2:C1:2E:98:D7:7C:8A:72:B3:94:F8:FF:8E
X509v3 Authority Key Identifier:
keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:32:05:72:12:48:71:68:2b:b6:34:b2:2e:bb:0b:55:aa:
a0:79:90:9a:93:52:9c:46:da:c5:02:61:24:75:5c:ad:3f:c6:
15:8b:8d:f9:8c:e6:a2:b3:81:55:93:56:56:f6:ea:c3:41:28:
64:e3:88:18:c6:08:79:33:0c:20:ec:11:88:fb:23:cd:62:d5:
bd:5d:72:02:65:cc:f2:52:6a:9a:a1:76:de:e3:47:28:f6:37:
d1:bd:9d:3e:e6:f3:ce:de:49:a3:62:78:f8:fd:49:66:da:ed:
1c:47:5f:42:9d:e6:1a:7d:0a:fe:50:88:8f:d9:7c:d9:80:c4:
e7:78:31:a8:a3:4c:3b:41:6b:12:88:1a:03:ee:62:67:17:2e:
db:bb:e6:f1:6e:dc:2d:48:00:02:a0:f8:4d:c1:8e:6e:66:9a:
9b:a8:bc:83:d4:7d:fe:71:bd:dd:13:15:0d:e3:76:91:d1:d2:
86:a4:56:a4:24:78:4c:29:e4:50:c4:f2:cc:cc:5f:6d:7b:12:
e0:ab:85:63:a1:ab:98:c6:52:04:9e:ec:55:40:e3:aa:0c:5d:
ac:97:72:c1:ad:9c:bd:f4:c2:4d:2f:23:f5:cf:11:c8:98:61:
d7:fa:73:c5:97:47:a6:af:d2:eb:8e:ce:18:6b:38:c1:90:f3:
6a:dc:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:21 2026 by rpki-client