Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: rZWlS10inkMCv+djKYJn/c+JUuItz6322ARbQrLz/aQ=
Subject key identifier: EB:0D:46:08:41:21:A5:C2:18:C3:D7:72:19:8C:96:21:36:BF:B2:81
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 019F8F46F8CD770FCAE3A3C4ABF7C2D1C744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 0208
Signing time: Thu 23 Jul 2026 14:00:20 +0000
Manifest this update: Thu 23 Jul 2026 14:00:20 +0000
Manifest next update: Fri 24 Jul 2026 14:00:20 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: xLHk+8EjAtJVTQPS1CWvR4xXV+TzsqypBbNYrZUTaCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:f8:cd:77:0f:ca:e3:a3:c4:ab:f7:c2:d1:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Jul 23 14:00:20 2026 GMT
Not After : Jul 24 14:00:20 2026 GMT
Subject: CN=eb0d46084121a5c218c3d772198c962136bfb281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:9c:e4:81:a6:92:3b:2b:40:45:ac:97:b4:
05:66:16:c3:03:ef:ff:97:e6:76:8b:35:e4:2a:3b:
32:60:cb:e4:77:c4:27:a6:92:0a:b3:37:68:d5:f1:
c8:53:2c:c9:0a:86:a1:b2:05:86:9b:9f:07:48:ae:
0a:58:1e:c9:f7:12:c4:64:fc:3c:94:30:72:18:9d:
7d:32:09:f0:26:f3:d2:b3:3f:53:40:c7:03:63:59:
81:86:86:aa:d9:9e:30:7c:aa:9c:65:47:59:e1:8a:
90:f0:16:09:ab:79:9d:fe:30:bb:5f:c9:31:16:6a:
0c:80:b9:87:db:51:1b:fd:52:12:94:92:bc:74:24:
08:07:d3:d3:b1:a5:a5:e5:5b:6f:49:db:74:19:ae:
15:65:42:a8:a3:e6:05:85:71:f8:4a:be:a5:77:bc:
2c:0f:96:71:37:4e:c1:3f:ea:b0:e1:21:38:2b:a6:
12:53:db:c2:1a:a7:53:42:a7:8a:81:21:bc:b0:0d:
55:5e:3a:22:06:42:dd:b8:a0:5f:5d:3d:30:29:96:
3a:47:71:fc:05:e7:4f:fd:89:b1:30:d6:26:2d:15:
72:49:1e:e1:cd:fb:c1:df:c6:d8:35:d0:d6:ae:f0:
1d:2f:0a:a3:02:46:13:a4:70:c0:23:5a:6e:c9:e1:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:46:08:41:21:A5:C2:18:C3:D7:72:19:8C:96:21:36:BF:B2:81
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e1:cd:b2:34:52:1a:f6:74:35:e8:49:35:b5:e2:67:37:e2:
fe:0c:a0:22:ee:85:d5:6a:07:23:3b:80:32:e4:87:c0:a4:cb:
b7:e6:f7:b2:bd:cc:81:ef:e1:49:a4:8a:b4:e9:0a:0a:ab:89:
b2:b4:7b:c7:ce:06:45:d1:88:d7:09:33:28:fd:c2:69:8d:83:
38:fd:01:71:ca:94:dd:2b:f1:2f:4b:be:17:8f:f0:c8:18:e5:
df:d8:30:40:1b:c2:05:1b:a3:8b:48:d8:dc:84:ba:08:12:b5:
61:f2:3b:d7:5e:95:5d:b7:c3:07:95:0f:44:fc:fa:85:23:10:
0e:5c:e5:7f:f9:c1:a9:17:2c:7c:de:f7:0a:fe:63:ad:77:e8:
66:b6:8a:e8:99:f7:87:20:f9:a0:0b:46:38:21:91:44:e9:ef:
58:a9:fe:96:43:77:4f:48:a8:77:8d:d5:39:21:16:52:1c:89:
6b:a4:5c:8c:58:c1:1f:7f:c7:6c:8f:04:25:a3:8b:02:81:34:
ad:da:30:44:d3:79:c5:95:87:8d:40:9a:7d:4d:75:d3:e6:51:
17:5e:fa:7b:a9:23:0e:dc:ab:e0:80:e6:b5:c7:11:eb:0c:49:
26:fa:1c:77:8e:a9:e4:26:8e:e7:09:c3:cc:50:58:52:40:a3:
fc:c8:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:53 2026 by rpki-client