Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: sV/VqP5NzgfYWjzAPqOlmdC4rR4OQ4ty6bopCH59bt8=
Subject key identifier: 25:CE:96:2E:F9:4A:62:58:76:D7:C2:14:43:56:A7:DE:50:73:76:EB
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 019F902342FA0AAC030EBB48B4EAEAE4DF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 162D
Signing time: Thu 23 Jul 2026 18:00:57 +0000
Manifest this update: Thu 23 Jul 2026 18:00:57 +0000
Manifest next update: Fri 24 Jul 2026 18:00:57 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: xrmEyTRl4AqZYlDhKZoRem0jMe+THhm6PVBN4q/QaYI=)
2: Mvg3Mo5WSYjcX-Icj2bidj2_crQ.roa (hash: vVq/Mz8wGpzyBjkk9cQ+W/VRqd2BvaRyhDgc817bfY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:42:fa:0a:ac:03:0e:bb:48:b4:ea:ea:e4:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Jul 23 18:00:57 2026 GMT
Not After : Jul 24 18:00:57 2026 GMT
Subject: CN=25ce962ef94a625876d7c2144356a7de507376eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bc:c4:b9:03:2e:da:c0:1f:f4:89:e5:aa:04:
e8:95:81:17:b1:2d:02:17:8a:5d:71:96:38:fb:7c:
04:d5:6b:e9:e6:d2:7f:f8:96:00:c7:76:8e:3d:0e:
a5:2b:a0:d6:42:6c:5d:41:f4:a9:d1:4f:d0:67:bb:
b9:f9:8c:89:4a:b9:64:29:1e:76:98:bd:37:01:10:
5e:9a:5d:87:11:9a:57:65:ea:30:97:96:7c:dc:3a:
35:69:3b:fa:25:24:43:19:26:d1:71:b8:93:48:72:
6d:8f:55:f1:56:33:d4:d4:d6:6c:9d:b5:a9:85:69:
be:b5:49:5a:7c:6e:05:72:44:06:4c:3e:b8:a3:cd:
26:0d:c9:ae:7c:25:f4:c7:58:bc:64:8e:45:c7:ab:
78:0c:aa:9c:0a:6b:f5:59:c1:7d:73:18:1f:dc:30:
d3:04:fd:53:ed:fd:d2:a7:df:2f:b8:81:e9:2d:6a:
c7:3d:ad:74:bf:e0:ed:01:ad:f0:e0:68:98:12:2b:
0f:67:b7:3e:66:07:c6:9f:52:78:5e:e5:fa:dd:f6:
c5:8c:05:c2:2d:c9:fd:77:23:a1:ef:84:33:26:05:
0e:39:f2:ee:94:ad:f1:a3:9c:bc:00:1e:46:ef:d0:
55:33:1a:d6:7b:df:d8:61:bb:34:96:63:13:f3:2e:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:96:2E:F9:4A:62:58:76:D7:C2:14:43:56:A7:DE:50:73:76:EB
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:80:5d:ab:f4:28:bd:ce:de:85:05:7c:f7:0e:f9:a8:00:
72:3e:1b:e5:4f:09:c1:b7:f9:f5:1f:e0:e4:40:7c:72:49:e2:
ad:53:25:ba:88:c7:dc:a3:ce:08:6c:a0:73:e9:03:c6:5d:36:
a8:06:f8:8d:7d:f8:0e:ca:55:9a:ad:c7:76:92:ec:9c:35:09:
ff:39:06:ab:3f:ee:4c:2f:89:d4:cb:7f:6b:c4:ac:a8:08:d8:
b4:64:07:bb:ed:9d:e9:d0:7f:19:35:77:6c:53:53:f9:08:fa:
d4:26:9a:8f:93:a9:59:e1:8e:a3:28:30:47:db:17:ae:66:21:
23:54:69:b0:67:10:26:f3:f5:c1:35:9d:b3:ba:e3:35:0d:43:
a5:6b:a4:a8:7b:dc:e1:8f:76:ad:50:ff:14:60:46:c3:db:16:
e4:79:cf:93:c2:aa:f1:fa:7f:c0:ef:11:84:32:ef:c4:2d:6f:
05:d8:0c:b4:a0:48:12:51:c4:3a:3d:5e:a1:9c:7e:f8:ee:ff:
68:d0:01:6b:9a:80:61:c9:e0:1d:f5:7a:98:07:63:cd:af:0e:
1f:5a:e2:50:c8:8f:52:a7:63:0f:a1:64:56:5c:93:96:22:8d:
54:65:12:52:07:8c:3b:84:be:05:0b:78:a6:90:43:db:6f:b7:
f9:11:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:06 2026 by rpki-client