Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier: RGDROnWT53nMxkeqFYPiIWsMTP6Q/jsyBjJF0iSuik4=
Subject key identifier: 51:27:FF:B8:22:A4:F7:2F:41:EC:7D:A2:14:A2:22:B1:67:37:BD:E0
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 019F92B62051018FFB97120E4154A29371D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number: 01B2
Signing time: Fri 24 Jul 2026 06:00:36 +0000
Manifest this update: Fri 24 Jul 2026 06:00:36 +0000
Manifest next update: Sat 25 Jul 2026 06:00:36 +0000
Files and hashes: 1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: hyEBWyUoIhZh6Mm50FDLSHSB0DnBXWC41rFmHE2qBF8=)
2: gymKXorNDDp8x3PYy2044v75QFA.roa (hash: 0rzdf9ANtdDtf/hP67m2732x5lm9z0lPUGsmoQ5Cu10=)
3: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
4: wlE-n-v4vhVQ0V8BrCRy7vygKkk.roa (hash: GtlwHi8+nqqIfT+DJBH/zU6X+J1M23P7PC88GLuf8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:20:51:01:8f:fb:97:12:0e:41:54:a2:93:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: Jul 24 06:00:36 2026 GMT
Not After : Jul 25 06:00:36 2026 GMT
Subject: CN=5127ffb822a4f72f41ec7da214a222b16737bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:81:27:6e:3d:18:2a:7a:7b:a1:ff:d2:ac:
03:3b:35:37:d1:80:fc:ea:e2:6d:d2:8c:bd:13:eb:
0c:7a:bb:bd:5c:e1:f9:24:3b:1a:77:df:52:06:fd:
50:be:ae:9d:af:b8:e7:5d:5c:f0:91:70:0c:b0:56:
4b:81:6a:96:ec:d5:89:c4:74:b5:80:3e:52:f7:58:
75:b0:09:47:d0:35:59:cb:cc:a6:74:14:4d:e8:b0:
89:4a:95:d5:96:8b:ef:26:4e:43:3c:c2:43:20:77:
9a:0f:8d:c4:70:43:74:b6:79:66:ab:57:2d:30:d7:
f0:dd:91:6e:66:a5:a1:d7:8b:e1:41:e0:a8:50:dc:
4e:9b:62:4e:06:4f:08:a2:06:e1:5f:c9:ab:f7:ec:
eb:1a:30:2d:f5:6c:df:b9:57:38:3d:50:c7:ba:bc:
4d:97:98:db:1b:a4:92:37:37:6f:fb:ba:10:81:b3:
31:3a:01:27:f6:04:54:49:d2:06:c4:ea:fb:b1:10:
a1:f0:73:f4:1f:9b:31:bd:10:3d:25:9f:ba:ac:25:
b4:ef:17:28:90:60:07:82:02:de:8d:14:6f:3d:e2:
57:28:e8:fe:71:95:60:50:aa:00:e4:43:e0:c6:9b:
ba:07:f5:8f:a4:2a:a5:4b:54:01:0d:96:20:5c:d6:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:27:FF:B8:22:A4:F7:2F:41:EC:7D:A2:14:A2:22:B1:67:37:BD:E0
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:06:be:9a:f5:e6:6a:ca:95:49:25:20:31:e3:75:07:98:
4c:13:12:4f:50:df:f6:34:9a:0b:e2:4b:42:1a:27:0d:d9:75:
93:01:24:50:6b:07:53:09:67:6b:63:4f:4b:47:0e:49:08:20:
29:53:e2:d9:52:ea:a3:28:85:ae:5f:db:76:3b:0f:7a:87:11:
5e:68:02:7b:eb:28:d3:25:e0:b3:1d:9b:b1:d1:97:5b:74:a7:
73:b8:b2:95:36:58:32:6f:28:20:dc:33:da:f0:f6:07:c0:1f:
fe:aa:6e:61:97:1b:d4:0d:52:e2:4f:b8:27:6c:bb:d3:c1:27:
3a:a0:1c:6e:ae:21:0c:44:3b:4d:6d:d3:f4:e8:eb:0c:61:b1:
12:f8:63:32:11:f1:a2:c5:61:bf:74:ea:29:0b:20:d3:73:f2:
36:ae:e8:11:41:11:6a:04:48:5f:e3:7c:73:09:d3:11:0e:2b:
22:ff:7a:72:9a:f0:04:a9:b5:14:09:dd:33:73:a6:60:a1:4f:
99:56:6a:22:a4:b2:05:88:6e:58:32:4e:3c:86:09:93:32:df:
8c:95:9c:db:ec:06:d4:cb:60:01:ad:70:be:05:b4:ce:41:6c:
d6:4e:e0:8f:b1:5d:a7:32:81:85:a2:80:bb:85:5d:30:82:ea:
a6:a2:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:54 2026 by rpki-client