Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: wf4SBklNAxhThCqMpo4tLqJlcoEnPJ5M4/MgMdB3hlM=
Subject key identifier: 23:D1:76:B9:D2:D0:C1:CA:DD:20:53:A6:FB:5F:DA:9C:BB:91:86:68
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 019F9211A90F120CA5AF45AA6DE209200993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: epXxzWuo4uFfeiVIjZDY4RaFaT8eqO8V0edWHs+zbhY=)
2: LpFRmX9PzrWkSCAE9MBkhoB4NC0.roa (hash: O5h6RKwcek/boNWUKWdfTylprmmWoB0fVIyV7iyo7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a9:0f:12:0c:a5:af:45:aa:6d:e2:09:20:09:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=23d176b9d2d0c1cadd2053a6fb5fda9cbb918668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:25:38:4f:00:9b:7a:94:ee:81:52:2d:0b:
63:fa:a3:84:99:e3:61:9f:90:c5:51:ac:0a:d2:95:
de:6c:ec:6f:ad:50:41:fc:14:1d:ac:8d:2a:99:1e:
cc:06:66:43:0b:9c:4b:0b:da:26:9e:f0:ed:e1:52:
54:23:24:18:92:74:d9:7f:f4:fe:86:a6:4e:99:62:
4d:e9:71:ad:a8:ae:9f:da:41:98:0d:21:54:fa:77:
8e:bd:38:27:03:99:16:ea:14:6b:97:b7:08:84:fe:
32:ae:9c:db:5e:22:89:42:d8:8b:69:2e:c2:95:ca:
19:69:9a:dd:62:01:3a:b6:7b:1c:07:29:66:12:f8:
7c:d0:27:66:1b:32:e3:66:69:a9:7e:47:1c:78:3b:
06:7f:82:45:9e:e6:be:a7:8f:36:17:48:e0:fc:7c:
d0:8b:d3:14:67:85:7c:a3:ef:5c:bc:c5:e2:8c:f1:
8a:87:44:24:5d:73:d2:47:68:b3:1d:8b:fb:9d:f9:
3c:3f:61:8c:54:9d:46:85:0d:e3:80:9e:5e:32:60:
48:36:ba:57:76:43:2f:cf:83:dd:02:a1:2d:03:54:
07:31:88:14:13:e5:f5:54:f3:9c:3a:00:ea:f4:f4:
75:3c:e7:76:1a:40:e7:78:b0:29:26:72:37:09:d2:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:76:B9:D2:D0:C1:CA:DD:20:53:A6:FB:5F:DA:9C:BB:91:86:68
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f1:c4:bd:0e:3d:e5:01:8b:1f:1e:6c:16:15:df:6f:66:d1:
b9:28:e8:a7:41:23:8b:53:52:48:bd:d3:1b:dc:da:0d:9e:9e:
dd:43:95:45:1f:10:72:4c:64:93:2e:79:0e:db:8a:b0:fe:ac:
2f:c9:14:86:b9:68:7d:8e:f1:74:bf:f7:c0:c0:9c:6b:09:13:
34:e4:a6:51:66:ac:7a:e0:32:61:de:56:e3:ee:b6:47:a6:cf:
ae:df:75:02:1f:26:bf:b5:9f:ca:4f:76:0f:49:e5:83:a4:dd:
74:99:fb:5f:de:8b:6a:a1:92:47:55:b3:84:12:cf:5a:85:32:
33:84:5a:95:63:36:f1:10:77:b3:30:d9:fc:54:3b:2e:ab:10:
0d:1a:71:ea:0d:07:20:93:5e:3d:da:d6:1e:5a:0d:5b:ff:92:
03:a8:c5:6a:17:60:88:0d:82:7c:6d:a3:bc:28:7a:50:e0:63:
04:1e:cf:51:b2:f7:d9:38:56:0f:f1:3e:dc:70:69:49:f9:cc:
90:4c:40:5d:1c:87:4d:12:b8:8f:6f:8a:37:bd:50:1b:23:71:
f0:37:aa:61:f3:ba:2c:e0:12:dc:77:b4:1e:47:be:2a:7d:c4:
fa:1c:42:c1:70:a4:70:54:b9:94:a3:bf:ec:82:37:ad:81:7e:
7b:ca:ec:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEakPEgylr0WqbeIJIAmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDczZDA2YjU4NjUyZjg0OWZhOGJjZjNjZWM2Yjk1MDkw
OWJkNjgwHhcNMjYwNzI0MDMwMDU4WhcNMjYwNzI1MDMwMDU4WjAzMTEwLwYDVQQD
EygyM2QxNzZiOWQyZDBjMWNhZGQyMDUzYTZmYjVmZGE5Y2JiOTE4NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVElOE8Am3qU7oFSLQtj+qOEmeNh
n5DFUawK0pXebOxvrVBB/BQdrI0qmR7MBmZDC5xLC9omnvDt4VJUIyQYknTZf/T+
hqZOmWJN6XGtqK6f2kGYDSFU+neOvTgnA5kW6hRrl7cIhP4yrpzbXiKJQtiLaS7C
lcoZaZrdYgE6tnscBylmEvh80CdmGzLjZmmpfkcceDsGf4JFnua+p482F0jg/HzQ
i9MUZ4V8o+9cvMXijPGKh0QkXXPSR2izHYv7nfk8P2GMVJ1GhQ3jgJ5eMmBINrpX
dkMvz4PdAqEtA1QHMYgUE+X1VPOcOgDq9PR1POd2GkDneLApJnI3CdLfGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPRdrnS0MHK3SBTpvtf2py7kYZoMB8GA1UdIwQY
MBaAFNgHPQa1hlL4SfqLzzzsa5UJCb1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUt
MjMyOWQ3OWM0YWUzLzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUtMjMyOWQ3OWM0YWUz
LzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfHEvQ49
5QGLHx5sFhXfb2bRuSjop0Eji1NSSL3TG9zaDZ6e3UOVRR8Qckxkky55DtuKsP6s
L8kUhrlofY7xdL/3wMCcawkTNOSmUWaseuAyYd5W4+62R6bPrt91Ah8mv7Wfyk92
D0nlg6TddJn7X96LaqGSR1WzhBLPWoUyM4RalWM28RB3szDZ/FQ7LqsQDRpx6g0H
IJNePdrWHloNW/+SA6jFahdgiA2CfG2jvCh6UOBjBB7PUbL32ThWD/E+3HBpSfnM
kExAXRyHTRK4j2+KN71QGyNx8DeqYfO6LOAS3He0Hke+Kn3E+hxCwXCkcFS5lKO/
7II3rYF+e8rsDg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:26:42 2026 by rpki-client