Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: ouiv0sYSsgJe4ojyyX2GaSRYjfMfTJmujl1tYGNh9lQ=
Subject key identifier: 1D:89:C2:D0:22:D4:4F:C5:F8:E5:10:80:19:4A:15:10:F9:59:A5:FF
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019F9211567B6A9690C9C35812A044C6CCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 02F8
Signing time: Fri 24 Jul 2026 03:00:37 +0000
Manifest this update: Fri 24 Jul 2026 03:00:37 +0000
Manifest next update: Sat 25 Jul 2026 03:00:37 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: NHlfvRT17I7Y002TZnMlXkFsiZWgZgEfAfQ3sfnLKkU=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:56:7b:6a:96:90:c9:c3:58:12:a0:44:c6:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Jul 24 03:00:37 2026 GMT
Not After : Jul 25 03:00:37 2026 GMT
Subject: CN=1d89c2d022d44fc5f8e51080194a1510f959a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:b6:b0:19:dc:6c:61:89:cc:18:4a:9b:03:
83:a0:39:95:f2:af:39:eb:16:c7:7a:29:9f:18:34:
d4:78:08:b3:22:66:c4:40:6e:f0:21:96:c6:db:d2:
4c:8d:9c:b5:51:d3:fb:4d:48:91:c6:a6:64:0b:bd:
88:bc:f1:aa:a4:f9:1d:47:79:48:88:65:89:f3:ac:
c2:cc:da:2c:45:f2:aa:9d:92:4f:f2:30:43:bb:81:
f0:82:55:88:d2:95:47:f7:f7:95:7b:07:46:56:4c:
4d:cd:00:5a:3f:28:4a:b5:c0:62:c9:f4:03:74:a3:
2c:21:cb:71:a7:29:53:f8:26:2f:58:e5:1d:5f:84:
ad:de:c1:38:04:f2:62:c2:91:d2:ea:1d:e7:bd:49:
7d:90:52:80:80:cb:e6:cc:5c:47:1e:28:39:93:bf:
23:26:f8:c6:03:58:e9:a2:9f:21:fb:c1:ee:da:29:
65:3d:e4:ae:87:a4:a2:28:3e:fe:30:6f:4a:16:6a:
9e:e1:e8:3e:72:74:c2:9f:f5:1a:78:62:d3:49:18:
4c:ee:62:6f:f9:5c:ec:88:5d:32:3a:82:32:c5:81:
62:28:44:e2:b9:da:5f:ef:44:74:ee:bb:99:d0:01:
a0:da:f1:e3:f6:1e:d6:bb:f1:a6:f3:30:0d:fd:10:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:C2:D0:22:D4:4F:C5:F8:E5:10:80:19:4A:15:10:F9:59:A5:FF
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:44:33:94:4f:59:3c:51:b7:f1:ac:83:08:e9:ff:3b:e0:
d5:9d:29:50:ba:45:40:db:00:a0:77:44:86:ac:4a:00:2d:e4:
8f:98:24:ed:1f:4d:44:fd:f1:54:ed:96:af:98:ec:96:e2:04:
4a:97:70:44:da:66:ec:4a:ca:9e:84:6a:83:52:93:5b:2e:ba:
96:44:1c:7b:df:f5:94:63:a6:03:38:f1:d5:33:10:80:02:ca:
13:cf:69:35:f7:7e:7b:b8:47:a3:1a:46:84:8b:9d:76:c0:79:
ee:9c:62:5d:6f:1d:07:4c:77:8f:fb:07:53:10:33:10:4e:4c:
34:5a:15:66:44:1e:ad:7a:90:80:57:f1:95:0d:09:2e:84:07:
67:2c:7c:cb:55:c2:b6:b1:41:75:3f:35:5e:b5:77:83:eb:ff:
b3:af:0b:e2:b5:6d:65:90:0f:d8:a2:39:db:eb:9c:63:84:5a:
fd:e4:08:80:5b:a8:72:54:7d:7c:e6:42:9e:c7:26:0d:30:e2:
dd:dd:3b:9a:2f:59:d2:96:5c:5c:fe:b1:99:11:df:b3:ba:ac:
7e:40:ee:93:74:99:0f:90:b7:e7:96:03:73:a3:3b:94:25:39:
d2:62:d8:57:7a:8d:9a:d1:d7:33:f4:a2:4a:73:af:6d:9a:08:
47:7d:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:02 2026 by rpki-client