Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: sjqwt3mysM9uNhmNn9ByKUJMWG/Rj6ysMars1AcX7tE=
Subject key identifier: 02:D8:23:2E:36:DE:31:E7:E7:35:3F:EF:8C:B4:99:43:78:F8:85:A9
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019F8FB5230ECF9366E1CF48640418A30803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 16:00:40 +0000
Manifest this update: Thu 23 Jul 2026 16:00:40 +0000
Manifest next update: Fri 24 Jul 2026 16:00:40 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: b9g3Kmp3B2h8wbTsy5qeQypau6zH1Sf9NA07CpMX6cM=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:23:0e:cf:93:66:e1:cf:48:64:04:18:a3:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jul 23 16:00:40 2026 GMT
Not After : Jul 24 16:00:40 2026 GMT
Subject: CN=02d8232e36de31e7e7353fef8cb4994378f885a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:3d:89:22:d8:91:1a:8c:62:73:ef:a0:d9:
9b:53:ae:35:54:e7:ec:96:68:5e:16:7b:36:d9:e9:
87:32:18:da:40:3f:40:8c:c8:4d:fe:c2:80:70:f1:
ee:06:3f:31:c1:ce:37:10:a1:d0:a6:4a:7b:d9:d4:
34:ea:03:e3:0e:bf:08:78:ff:04:14:ad:24:45:c2:
13:2c:45:df:44:d9:95:1f:11:be:24:f2:7d:4e:cb:
7a:4b:5b:a2:ba:38:bf:6b:f5:b1:a0:ff:20:e2:cf:
61:5a:61:90:90:90:93:b1:cc:b6:74:e8:0c:64:d8:
7d:a3:20:dd:82:64:ac:22:5c:ad:27:2d:24:27:f0:
9c:bd:1e:a2:a2:7a:9e:1c:31:39:c8:b7:15:c1:00:
2d:17:b4:a8:09:ae:43:e6:2b:5d:68:3c:fc:6a:64:
a8:9c:14:44:99:15:00:15:69:5e:b0:0c:82:e3:34:
1d:22:56:05:ab:50:fe:1d:14:4f:d8:0d:c0:f6:96:
12:0e:1e:06:0f:dd:8d:13:f5:9c:f0:5b:84:23:b9:
eb:36:88:57:df:65:52:6b:4c:16:51:c4:af:24:be:
41:9f:5a:05:88:2e:6b:3c:02:4b:74:9a:ce:6b:fc:
b9:af:aa:48:d0:6b:e5:9c:ad:86:d5:9b:41:07:0c:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:23:2E:36:DE:31:E7:E7:35:3F:EF:8C:B4:99:43:78:F8:85:A9
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:22:7a:ab:ed:13:33:51:a5:ae:17:58:2f:d8:42:9e:e6:cd:
e1:ac:6b:1e:9a:3a:80:3f:ed:5a:44:a6:fd:20:42:39:56:3b:
e2:d2:ac:43:22:c3:c1:ac:65:f1:a5:5b:30:e6:ed:41:e6:33:
d6:48:a0:06:33:c0:55:18:44:aa:7d:9f:54:8d:83:61:a7:4b:
b7:bc:e0:53:c8:46:4e:c8:5f:36:04:02:c5:85:11:00:76:e4:
e1:8b:f7:65:eb:65:d8:41:80:f9:aa:90:04:50:c7:1d:99:21:
8a:91:2b:28:3b:b1:d7:3d:45:0a:91:e8:4b:6d:ff:e8:a8:30:
ab:c3:a0:6f:8c:8d:d2:72:54:f5:5c:41:cc:f3:50:a5:fb:24:
72:04:49:65:c0:13:d5:76:c7:2f:ab:91:f4:4d:50:43:40:a8:
f4:6d:9e:d4:5b:ea:c9:d4:13:e4:1e:0e:66:c7:b2:c4:45:fd:
97:b5:89:15:0e:26:95:e8:52:28:45:4b:bb:8f:cb:3e:6f:27:
30:c1:d5:fb:d1:01:6c:7e:d1:ef:bb:87:8c:99:74:53:b3:5d:
fe:a2:b8:46:7a:65:f1:3e:38:8b:73:84:02:7d:37:24:b4:99:
7f:3e:f0:72:14:12:b7:63:6f:63:7c:58:bc:5d:8b:2c:df:9c:
c8:e1:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:32 2026 by rpki-client