Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: ZqO5r26YrI1uD6+D+5xdUDvsCA/YSSXs6kvU7hY97xM=
Subject key identifier: F5:8F:15:9B:9E:58:C1:01:DE:B0:1D:20:BA:B0:B9:A9:BC:AE:E7:5C
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 019F8FEC0945182FF3F77C17B939BD61DB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0B6E
Signing time: Thu 23 Jul 2026 17:00:38 +0000
Manifest this update: Thu 23 Jul 2026 17:00:38 +0000
Manifest next update: Fri 24 Jul 2026 17:00:38 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: 2JYxE2jTX7ZoBinGvhReZSQJr9eO0VtCJVJz+4rwDCI=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:09:45:18:2f:f3:f7:7c:17:b9:39:bd:61:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Jul 23 17:00:38 2026 GMT
Not After : Jul 24 17:00:38 2026 GMT
Subject: CN=f58f159b9e58c101deb01d20bab0b9a9bcaee75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:7d:21:02:19:15:2c:a5:5f:d5:71:63:79:
45:f4:60:04:47:ef:3e:b4:d3:60:03:66:74:06:08:
fe:8a:19:68:7d:b1:a0:01:47:0e:fd:5e:bc:6e:5d:
8e:10:99:8d:bf:f3:d5:aa:6b:a4:69:cd:ef:89:b2:
25:e6:1d:92:5c:32:07:8e:cc:8f:6d:bd:a6:58:54:
92:7e:ff:7a:ab:e2:1e:ae:47:6f:bb:ae:d3:d8:5d:
41:07:22:71:21:64:30:e0:9e:76:ca:8b:48:fd:60:
08:be:a6:9e:d4:07:17:af:f9:6f:6e:f7:86:0e:91:
80:7a:aa:18:ba:de:89:49:dd:62:fd:61:1a:5d:42:
4f:f2:d9:8f:4a:14:6c:03:c3:5d:9c:9d:ba:9d:f0:
71:c4:b9:96:a0:32:99:5c:32:94:e2:2d:c3:2a:d6:
23:61:1c:e8:12:e9:2f:31:e0:9c:d5:26:32:37:31:
81:8f:b3:f5:c2:57:42:5c:80:99:99:c0:bf:f1:5d:
e6:04:d8:72:f4:45:65:44:50:b2:a9:05:1a:0c:96:
7c:08:34:d1:16:d9:05:71:2f:9c:b2:f8:10:45:e4:
c7:54:3c:80:9e:5e:35:c6:15:14:0d:5b:47:8c:42:
1f:ed:de:f3:2b:71:f9:d2:25:17:94:04:04:25:f5:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:15:9B:9E:58:C1:01:DE:B0:1D:20:BA:B0:B9:A9:BC:AE:E7:5C
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3e:f8:36:90:41:6a:19:e2:8d:d9:3b:7e:d1:a0:9e:cc:4b:
37:9c:0b:b6:09:86:19:ea:de:08:10:29:47:55:e2:18:f3:a9:
d9:34:aa:4d:3c:cf:df:7f:b3:e9:2c:3d:c7:f4:75:64:56:fb:
b2:35:39:a9:14:aa:eb:3f:5c:ea:96:63:a9:6a:e2:8d:51:38:
4a:12:0b:12:a2:6a:65:39:1a:0b:0c:69:e7:00:66:fe:6c:fb:
b3:2e:92:ba:15:db:2a:c6:55:41:23:ea:84:03:d6:13:28:6c:
02:59:2d:02:06:81:72:c4:69:62:2a:1d:29:7b:a0:49:13:93:
fb:62:bd:15:b7:8c:5e:b6:46:cf:56:e3:d9:1c:57:35:6d:ca:
ae:0c:7b:39:a4:fe:25:dd:50:b6:5f:66:99:04:90:7c:af:b3:
64:ca:7b:36:af:67:3d:77:07:f5:05:73:9d:52:7c:52:c6:05:
06:fb:3d:c5:85:a0:02:1a:0d:b3:8e:66:a3:ba:9d:40:d6:d1:
88:cd:01:67:a8:85:88:4f:05:6a:ca:5a:ca:e0:56:26:97:2e:
ec:79:80:00:08:9b:02:2f:dd:c0:d9:be:06:21:62:0e:77:66:
94:ae:84:21:08:dd:87:0b:cb:80:5d:47:74:2a:95:22:86:4f:
db:14:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:52 2026 by rpki-client