Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
File: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft (raw, json)
Hash identifier: rgtam0O+QWhl1KoQ0kWAQV3Ir4PzmTR+bE9iJB+7Q6Q=
Subject key identifier: 4F:18:ED:AE:F3:B7:27:2E:A8:F4:24:1A:BE:2C:34:66:B3:3D:36:CB
Authority key identifier: DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
Certificate issuer: /CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Certificate serial: 019F905A0B95EB3D256EE53847ECA0EC431A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
Manifest number: 01C8
Signing time: Thu 23 Jul 2026 19:00:47 +0000
Manifest this update: Thu 23 Jul 2026 19:00:47 +0000
Manifest next update: Fri 24 Jul 2026 19:00:47 +0000
Files and hashes: 1: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl (hash: PGT+Z/jDc16hHUFP8lFjtJSgzgMU69zlnlZSdmneq1Y=)
2: QZpcoFZ-mTdXgaU_KSl2tUqS-WA.roa (hash: kKgOgir5OcWMeFMyd0QfuGiJS19k1i7Dnvnix7dS1ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:0b:95:eb:3d:25:6e:e5:38:47:ec:a0:ec:43:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db140e069b31f2b84c5dbd213ed46773b0633e52
Validity
Not Before: Jul 23 19:00:47 2026 GMT
Not After : Jul 24 19:00:47 2026 GMT
Subject: CN=4f18edaef3b7272ea8f4241abe2c3466b33d36cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:bf:88:25:b3:47:49:6d:bb:5e:d4:d0:f8:
e1:00:df:55:f5:bf:31:1a:49:02:58:aa:c1:3b:27:
87:1b:b3:aa:68:cc:99:80:2a:25:b8:cf:57:c5:f9:
ff:73:f6:8e:35:2c:e9:cd:3f:64:a2:80:9a:eb:67:
43:13:39:f2:6b:44:c1:9f:e6:01:78:a7:01:33:66:
85:fb:f4:72:81:90:e5:b6:99:cc:21:70:8c:99:ad:
fa:5c:74:12:e9:33:27:be:1b:6b:ed:c9:7d:a3:df:
0c:47:f2:d9:38:93:c5:ce:0c:7b:b0:32:e5:24:f6:
0e:5b:40:f2:bb:0e:b9:dd:77:55:3a:46:cc:30:d4:
65:ee:6d:48:5f:25:26:a5:97:f4:25:d2:f5:1e:3a:
d6:9a:f0:f3:43:9e:ca:58:da:fc:19:f4:af:36:6f:
53:7d:20:64:09:6e:8c:96:1a:ff:9b:06:8f:12:fe:
f6:a7:22:d1:f1:19:2d:02:3e:f2:cc:57:ce:d8:6c:
fc:c9:7a:aa:70:ef:d1:01:00:1d:70:75:0a:d2:3e:
2d:82:b7:87:bc:1c:ce:61:bc:87:e6:ce:43:7d:87:
d8:44:0f:80:99:a6:2e:91:29:d4:16:54:a2:8e:9c:
49:83:da:bf:82:2e:df:03:ca:ff:fa:bd:34:d0:de:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:18:ED:AE:F3:B7:27:2E:A8:F4:24:1A:BE:2C:34:66:B3:3D:36:CB
X509v3 Authority Key Identifier:
keyid:DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dd:cb:20:53:4d:e9:05:8f:a3:6b:c9:74:29:79:e6:eb:0c:
a2:cc:1d:c4:9c:4a:6d:64:e9:0f:3c:33:0b:14:2b:b5:43:e0:
6d:32:a4:2a:86:6b:bb:2d:7a:35:12:92:3a:42:5f:87:8e:c3:
9b:39:87:c2:83:63:30:07:6c:b9:89:9b:04:d7:39:52:cf:b6:
25:be:d3:a9:9b:e8:e6:5b:4f:76:b6:de:ac:a6:a1:67:05:64:
ad:30:8d:8f:26:b0:64:8a:55:aa:49:32:3b:db:9c:26:0c:2e:
4f:47:31:22:11:64:52:56:f7:5c:51:d8:77:11:20:5b:d4:43:
08:3b:3b:8b:88:c6:ec:d9:c3:09:72:c3:07:5a:4a:83:7a:77:
38:eb:f9:b2:d4:81:32:54:32:6f:d8:d8:16:cb:fd:04:a7:ac:
c1:5d:c4:27:a1:e4:76:e8:ae:fa:7c:59:2a:ee:94:c0:56:d4:
6e:18:e5:75:b7:30:71:da:fd:8b:64:6d:de:71:d2:30:9c:d3:
07:0a:a6:c9:ea:a5:7b:73:eb:6f:02:02:9a:43:82:22:4c:03:
34:5f:34:ca:c0:3d:a1:3e:55:da:3b:8f:55:82:39:95:92:02:
f7:bf:bf:0f:85:0f:0a:fe:2d:5f:15:32:ab:52:f1:f3:75:e5:
e1:4d:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:43 2026 by rpki-client