Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: 6Z+8CD19Dt07vX05aUfuEacd9Vq+PqEsjjSfVtT1Hvc=
Subject key identifier: 12:28:6C:79:DA:87:4C:9B:B9:83:56:CB:1B:60:E5:48:57:3E:C2:03
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019F9023377189AA6D8BF06DD08A71FAF974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0D49
Signing time: Thu 23 Jul 2026 18:00:54 +0000
Manifest this update: Thu 23 Jul 2026 18:00:54 +0000
Manifest next update: Fri 24 Jul 2026 18:00:54 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: Hn7XL8NqFAdBA0gdZLqZQ96csKxPkv0JqGlEoeogzbw=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:37:71:89:aa:6d:8b:f0:6d:d0:8a:71:fa:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Jul 23 18:00:54 2026 GMT
Not After : Jul 24 18:00:54 2026 GMT
Subject: CN=12286c79da874c9bb98356cb1b60e548573ec203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:9d:23:41:46:17:bc:64:ed:39:95:71:cd:
b5:af:64:79:c7:85:2e:cb:77:db:25:fd:80:73:74:
ed:85:d1:fe:2b:9e:12:5b:32:ff:6e:3b:84:96:ff:
b9:fb:ad:d9:9c:2a:d3:26:ab:41:ef:64:d5:d6:83:
f6:14:4d:3c:b5:ad:25:ce:36:82:11:31:f8:cc:cf:
bd:89:14:55:94:bb:66:9c:fd:94:f0:a6:cd:0c:a3:
03:f7:9a:0d:8f:bd:cb:31:81:c8:42:c5:8e:69:3a:
53:58:04:08:63:1d:11:50:cc:58:cd:2a:65:7f:31:
bb:85:2f:89:f0:65:35:b8:34:e9:85:a8:dd:27:9f:
61:f0:ef:b3:6b:79:69:7e:41:d6:31:08:46:86:72:
32:41:5c:45:d0:33:26:53:6c:8e:04:b0:77:d7:c8:
8b:d1:a1:4b:50:23:07:da:95:81:4a:8f:79:fa:a8:
9d:f7:e7:8f:b7:35:03:65:34:83:ea:9e:8e:e9:d6:
70:be:50:e0:15:85:e2:e2:e2:3c:ba:17:91:56:97:
ed:f7:29:e8:40:0e:78:f6:13:e6:29:74:f6:1a:69:
bc:a1:71:8b:d6:92:a5:48:62:b2:b2:19:1c:39:1d:
0d:73:26:c0:0c:ca:42:d2:88:19:41:ab:5a:a5:9b:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:6C:79:DA:87:4C:9B:B9:83:56:CB:1B:60:E5:48:57:3E:C2:03
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:54:13:65:6e:1c:83:25:2b:7b:f2:1a:11:f7:5d:c8:e1:7e:
71:38:47:3f:aa:fe:57:eb:1b:0a:59:c5:9b:f1:a0:97:81:4a:
e7:5f:0c:80:14:2d:73:ab:c8:8c:c2:56:ab:80:bb:40:46:9b:
7e:82:a2:f6:60:0c:50:b1:fe:3f:87:a1:26:2b:bd:4f:e5:12:
d8:c8:4a:12:29:20:93:29:49:ba:5d:f1:71:bb:04:35:a6:a5:
8a:cf:45:38:b6:ec:c0:dd:9f:d4:75:80:5a:e2:72:b1:20:9a:
bf:74:7f:67:44:8b:1b:b6:a1:92:0a:38:11:02:bf:75:17:4f:
b7:d7:6a:4a:2b:8d:d2:e8:5e:eb:59:f0:97:3d:0f:dc:70:05:
ef:4d:06:68:61:6e:50:46:35:17:f7:01:51:2c:d2:25:58:94:
0f:5f:2e:b0:37:19:aa:c8:d5:a0:5a:a1:45:5c:fc:f4:bb:20:
a8:eb:85:84:80:e3:75:d3:fc:84:ad:08:8e:22:bf:57:fa:05:
e8:57:ae:ad:df:94:b8:f1:48:69:7b:c0:92:1c:98:41:e5:54:
c2:52:14:39:94:d0:11:9f:4f:7f:f9:a6:6d:69:74:12:80:bd:
13:b0:be:2b:7a:82:0b:2f:f2:33:34:e6:c4:0f:bb:4a:ea:f5:
13:21:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:35 2026 by rpki-client