Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: PXXIrxMm+jvPizYz0p301c4zXL0qrN+KZOD4w7UMP74=
Subject key identifier: 9D:45:17:86:59:3E:6C:FC:F5:8E:5C:CF:C3:A1:50:77:0F:26:B4:B4
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019F90FF3E7CF5B4E3A7151C7B07AE250F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 1953
Signing time: Thu 23 Jul 2026 22:01:14 +0000
Manifest this update: Thu 23 Jul 2026 22:01:14 +0000
Manifest next update: Fri 24 Jul 2026 22:01:14 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: H1px/297PBgxOsyLhjXkEIrykFX5lF+PCK9AXedMiwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:3e:7c:f5:b4:e3:a7:15:1c:7b:07:ae:25:0f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jul 23 22:01:14 2026 GMT
Not After : Jul 24 22:01:14 2026 GMT
Subject: CN=9d451786593e6cfcf58e5ccfc3a150770f26b4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:03:2c:fd:5c:1b:c7:b2:de:d9:94:80:38:
77:95:22:5c:1b:09:b1:4f:c8:01:35:46:4f:21:ac:
91:fe:ea:85:1f:8c:c6:03:30:07:ce:79:90:43:9a:
c3:f4:35:2c:8a:c5:7f:70:db:77:1c:38:5f:d2:65:
3c:42:c3:3a:d6:5f:13:83:f9:59:a5:fe:4d:03:53:
c7:d5:b0:9c:d1:17:64:cd:57:88:3d:3c:85:71:5b:
2e:8e:1c:ef:ab:a5:ed:fb:18:c1:b9:ce:43:7f:c7:
64:9a:da:37:be:40:d1:e6:45:e2:6f:b7:6a:f2:e6:
1b:56:5d:b1:64:95:0b:f9:58:ab:97:d4:bd:7e:bb:
74:94:b2:dc:e6:6f:a5:bf:b8:7d:12:3d:6a:78:10:
ec:0d:96:12:7f:4a:41:71:01:82:a9:56:7a:84:83:
ba:c6:68:e7:b3:dd:a0:34:aa:a8:a9:3d:6d:60:a8:
99:e5:df:74:b1:d8:4f:cb:17:6b:35:b7:cb:10:2b:
89:33:7e:4c:6c:c0:9d:33:5d:c7:e6:65:e2:fc:ce:
7f:51:d0:75:74:ad:20:0b:a0:5e:d6:58:a4:e9:d2:
da:8d:eb:f8:ab:93:56:80:f3:d8:65:04:b1:c5:4f:
b7:5f:d4:e4:71:e7:b9:20:99:63:76:38:01:e8:3c:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:17:86:59:3E:6C:FC:F5:8E:5C:CF:C3:A1:50:77:0F:26:B4:B4
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a7:6b:42:ec:3b:2f:09:e9:23:cc:b2:96:b1:4a:e7:85:f9:
ef:cc:57:bc:02:00:15:de:88:89:c4:20:ea:13:f4:38:c0:41:
e0:c7:7c:da:b4:67:cb:7c:21:54:23:e0:dd:9a:19:97:72:6b:
40:1c:20:08:19:af:11:d6:83:79:3b:9e:5d:6e:ba:02:d7:c2:
d5:5a:d5:1d:bf:bc:13:ae:09:02:ee:c6:c2:f2:35:6b:84:24:
b1:73:8b:63:a7:69:4c:f8:30:21:b1:76:0c:fb:33:7a:40:31:
a0:8d:e2:a6:de:74:c4:15:3c:66:44:88:bf:ec:64:4d:a3:03:
b2:76:7a:e5:30:e0:3b:b7:25:84:b9:57:e0:c3:dc:6f:96:38:
4c:3b:7a:e4:a8:21:4a:76:2f:99:35:02:2e:41:d2:fc:dd:f1:
7c:ca:fb:ad:84:0c:03:dd:60:82:8a:09:88:84:21:94:78:10:
93:ee:8b:5d:31:ec:ad:1a:b6:98:db:0f:5b:c2:59:02:e5:74:
82:3a:c0:2b:aa:d9:ff:83:60:70:be:df:ef:37:14:3e:43:80:
ae:a3:a3:36:1f:52:d2:da:75:b0:92:7b:2a:16:ec:57:30:ec:
7e:68:ce:5d:e9:78:c2:a3:6b:29:31:35:2e:ab:3d:eb:1d:24:
a6:10:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:24 2026 by rpki-client