Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: cfwYgHS+VGVhjL3Xal9WdsQ3zL5onEAl86D1D4ZnThs=
Subject key identifier: B2:0B:B8:59:46:8D:90:60:B0:B4:82:E4:19:B4:94:45:7B:F5:E8:1A
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019F8F470BD70F2F54C937F2D19773398E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 027B
Signing time: Thu 23 Jul 2026 14:00:25 +0000
Manifest this update: Thu 23 Jul 2026 14:00:25 +0000
Manifest next update: Fri 24 Jul 2026 14:00:25 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: Phatjg80XgXyI/8Y+l3hN5/Mb8PJaBQUWicWoh/Xbis=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:0b:d7:0f:2f:54:c9:37:f2:d1:97:73:39:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Jul 23 14:00:25 2026 GMT
Not After : Jul 24 14:00:25 2026 GMT
Subject: CN=b20bb859468d9060b0b482e419b494457bf5e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:4d:f6:db:a3:39:f6:e1:e6:52:7e:d6:1e:
c1:a5:12:b6:df:b2:90:6b:56:8d:b5:b0:e6:f4:6e:
51:3f:f1:3b:66:54:26:98:c1:49:13:f1:b1:c9:9e:
be:7e:21:6e:95:26:4d:b8:42:0c:6a:db:d6:b3:27:
a0:6e:d8:9f:c1:62:a0:ec:de:d2:df:c1:fe:93:f6:
3f:9e:74:9a:e6:8d:9e:6c:c5:ec:53:b0:1c:08:05:
98:2d:e4:c0:4b:34:9a:7b:d0:8e:eb:bc:b0:47:7e:
25:9d:7c:df:e6:0a:77:08:d2:00:23:d2:2e:f9:2f:
74:86:8e:82:28:ea:1e:4a:24:51:05:c0:d7:3c:d4:
c3:22:03:55:ca:02:6b:dd:a3:e5:68:0f:48:7f:4b:
0e:30:1a:49:90:ad:97:e1:d2:6f:97:1c:81:c4:18:
99:8d:98:5b:5d:f7:a9:0b:3c:76:5a:63:25:58:77:
a1:26:e6:9d:ed:88:af:a3:23:68:66:cd:d2:47:7f:
8c:ee:21:d9:95:a9:07:04:c7:2a:6c:94:08:8c:a7:
a1:8d:40:e8:c6:2a:5f:fd:d0:8e:7f:6e:20:52:6b:
a0:ac:d6:1f:4d:8b:9c:d2:43:26:50:a5:cc:ff:6a:
6f:49:77:81:cc:9f:59:43:6c:83:c0:b4:e6:3d:e1:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:B8:59:46:8D:90:60:B0:B4:82:E4:19:B4:94:45:7B:F5:E8:1A
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:52:6a:28:57:b8:26:29:4b:16:3e:6b:2c:ec:40:9c:fc:76:
f2:60:04:7f:3c:b3:0e:2c:c9:5d:ed:83:fc:3c:7a:5c:30:9a:
7f:a7:75:a8:80:a4:84:86:4c:41:fd:16:7d:86:0e:d7:be:6c:
01:9e:20:d4:07:a2:4a:fc:bd:dc:28:9d:e9:69:48:be:78:87:
5b:45:6a:1e:24:e2:60:dd:63:47:d1:36:4b:62:c7:a8:c2:66:
dc:c6:8e:d9:9c:64:13:8a:a7:bf:cf:bc:5a:3e:71:d6:a0:11:
0c:2f:44:e7:01:20:eb:8c:76:a6:4b:ab:95:db:29:85:84:3e:
7d:5c:2b:16:2e:03:fa:db:4d:b1:00:9c:6c:ff:6f:49:ed:d7:
73:31:58:31:d1:23:a5:66:77:5b:6d:44:22:a9:be:94:94:45:
d2:c4:68:a9:0e:3c:8a:57:c4:d5:d5:82:76:a7:ef:e6:b0:93:
05:89:a8:15:d7:c1:3b:8f:ee:ec:3b:d4:8d:25:0c:80:c8:87:
c0:6f:81:da:83:32:0c:59:29:1e:de:f4:3e:63:49:8b:0c:03:
2d:52:41:5c:e8:15:c9:97:02:eb:82:8d:85:05:a0:79:61:2f:
3d:81:24:f5:56:fc:93:cf:5b:47:24:f2:b5:87:c5:3e:40:2d:
57:80:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:17 2026 by rpki-client