
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: Up5MCZdSewJpZ+WhW2QxEBMlMPrkHUs55wuZtCFD5+k=
Subject key identifier: 1A:9D:5C:98:D8:58:A5:C9:F1:25:A9:D1:06:A8:53:EB:54:86:B5:8A
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019F91A3BF6F1FF2C60A75F1CF2D6E89FA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 01:00:55 +0000
Manifest this update: Fri 24 Jul 2026 01:00:55 +0000
Manifest next update: Sat 25 Jul 2026 01:00:55 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: jiukfrKOWk/Gtj6JgrbXwa5XnrNEn9/CNQA9fK+XCO4=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:bf:6f:1f:f2:c6:0a:75:f1:cf:2d:6e:89:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jul 24 01:00:55 2026 GMT
Not After : Jul 25 01:00:55 2026 GMT
Subject: CN=1a9d5c98d858a5c9f125a9d106a853eb5486b58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:2b:93:9d:91:1b:b8:2b:df:1e:1a:b3:88:
e5:95:d0:b5:0d:3f:12:e3:ea:b2:8f:43:ae:e7:44:
ca:9e:7d:b8:60:55:e2:03:13:5c:2a:5f:66:57:77:
ac:ae:d9:aa:36:73:b5:41:76:8f:fb:a2:b4:ed:87:
85:a6:67:87:de:f0:c5:74:c0:ce:f7:70:ab:85:de:
51:74:97:54:e1:ea:77:11:47:64:1d:42:d6:43:b7:
39:c0:ba:25:29:b7:f3:66:2d:a1:d8:75:9c:1a:f8:
39:b9:25:84:ae:c3:e4:8d:26:2d:56:2c:2a:52:fa:
09:8d:c4:48:7e:98:fb:18:fa:e6:bf:8a:70:60:d2:
b2:a2:a0:23:b2:eb:e4:f6:8d:74:a8:c8:a4:f6:fe:
1c:8d:cf:a4:80:70:ec:83:ae:2d:30:32:bb:eb:ba:
1d:b8:39:e3:2c:eb:fb:56:6b:6d:b5:19:0f:69:ab:
20:66:b1:41:53:0c:09:c1:7f:78:29:2b:ed:e9:6b:
f2:6d:2a:96:5d:c7:e8:2c:67:7b:be:8a:10:a2:c5:
ce:06:24:90:db:e1:df:90:a0:33:ed:84:5d:3a:17:
38:6c:b9:13:70:9e:bf:a3:bd:35:f4:3e:66:1b:d9:
c1:db:f1:db:ce:7e:7a:45:32:f9:cd:81:ee:89:e1:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9D:5C:98:D8:58:A5:C9:F1:25:A9:D1:06:A8:53:EB:54:86:B5:8A
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:6d:85:40:96:d2:cb:16:22:7a:a0:13:90:ea:99:0a:19:
ca:93:cb:a3:6a:83:65:71:f8:4d:d7:a8:a5:8a:5e:a4:8c:93:
4d:86:12:3e:f3:2f:86:75:49:04:f3:f0:57:48:0b:2a:83:9b:
83:52:7c:6f:ac:a7:58:88:e6:9e:1e:c4:24:4d:be:6c:72:5b:
ee:10:70:99:2e:c3:72:c8:bb:cc:0a:79:5c:36:c6:2f:bb:e6:
eb:7b:bf:73:22:b8:b6:c6:71:af:2e:db:7f:10:05:18:5d:a8:
da:32:5f:68:75:a2:81:b1:67:2d:ea:e3:c9:5a:38:ab:f8:b6:
72:6d:10:f1:c1:6a:e7:32:7e:d2:76:02:45:3f:5b:f7:24:82:
42:4c:b5:75:ff:fa:b3:4c:1a:3c:0c:22:cd:aa:09:c8:60:ab:
36:32:50:cb:cf:9b:ae:65:fd:1d:14:6a:27:e5:7d:44:ed:c7:
a1:5f:c1:e9:62:47:f6:8c:85:17:91:2c:d9:ba:2d:83:94:0f:
27:bc:a3:24:c6:5a:4c:2a:2a:1f:cc:e4:c1:ef:42:4f:51:33:
de:53:a4:e8:f8:44:00:9b:3f:d0:b6:e1:c9:b3:91:fe:3c:6b:
d8:70:2f:21:80:70:6b:f2:74:e0:70:0f:ae:15:74:74:4e:fa:
47:87:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:58 2026 by rpki-client