Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: Cw8DoFuFqK5KcMQbTW+JegDu0G7HILifC8nPFhzj0ss=
Subject key identifier: E6:38:79:37:89:9C:07:85:64:6F:BE:BB:31:BF:7D:3A:A1:5B:8E:88
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019F8FB535386CB7D5B3BC49C13BFBB0C9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 16:00:45 +0000
Manifest this update: Thu 23 Jul 2026 16:00:45 +0000
Manifest next update: Fri 24 Jul 2026 16:00:45 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: +6p69btIngWkXXN8es3830GJxVUT4+4fD13grGHFVqw=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:35:38:6c:b7:d5:b3:bc:49:c1:3b:fb:b0:c9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Jul 23 16:00:45 2026 GMT
Not After : Jul 24 16:00:45 2026 GMT
Subject: CN=e6387937899c0785646fbebb31bf7d3aa15b8e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:4c:1b:aa:55:93:ab:73:8b:3a:01:fd:90:
de:3b:e1:ea:31:22:96:06:9c:44:8e:92:30:7e:44:
09:3d:0c:90:28:5b:1d:d8:d6:9d:aa:1e:6c:8c:95:
0d:a5:d7:84:73:a6:51:38:21:53:a7:da:ed:95:69:
30:e9:06:ef:b5:2a:74:30:5a:45:9e:d7:cd:8e:44:
9f:ce:61:e3:8a:f2:26:c3:13:42:3c:26:fa:f7:a1:
ca:8b:e9:85:f4:d3:f0:64:5e:82:a8:5a:70:13:2d:
57:ca:35:3f:a5:f1:d6:b7:ec:c3:42:ba:14:38:cc:
54:2a:b7:74:7c:be:9d:ee:d7:8c:8e:be:42:dc:c3:
52:ba:92:ed:62:2d:a7:c7:d6:cb:7a:fa:76:67:be:
fe:dc:ed:7d:e7:99:8b:51:5a:e9:79:51:e8:9f:62:
69:c5:a5:ee:c6:36:49:c4:6a:ca:02:05:9c:1d:e8:
12:48:80:03:05:38:65:30:c6:12:78:c0:85:26:90:
3c:6f:4e:63:57:a7:67:e1:c5:61:57:98:38:02:8b:
d7:d7:0d:9b:fb:3e:52:b5:c6:38:3c:26:c3:48:36:
c0:de:78:3e:15:a9:ea:48:cb:7b:f0:09:61:1e:bf:
95:86:c9:73:d8:d8:2c:70:3a:15:c4:46:64:71:ef:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:38:79:37:89:9C:07:85:64:6F:BE:BB:31:BF:7D:3A:A1:5B:8E:88
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2b:cc:74:59:32:dc:57:9a:08:86:3b:9a:ad:2a:38:1e:bc:
86:48:cf:5e:98:c1:02:96:d1:8e:5b:05:a9:13:39:a8:59:78:
7d:4f:05:d4:f5:d0:96:48:d7:1a:9e:5f:1e:7b:9a:8a:8b:6a:
43:f7:f7:7f:43:8d:4c:fe:6b:b6:e8:1c:76:e1:9f:56:57:c6:
9c:1a:9b:81:7f:6a:9f:f7:bc:c7:60:de:00:fd:58:7d:86:77:
3e:2d:bf:8c:93:50:c0:8c:10:a6:bf:21:d5:11:04:28:22:4a:
b0:e7:42:c8:96:9b:d5:b3:dd:47:f5:d6:46:fe:7d:b3:56:13:
65:dd:39:4b:64:1c:9f:ee:cd:2a:fc:e1:03:f0:b5:27:99:46:
6b:fb:eb:55:aa:40:69:28:41:7e:10:d5:5a:51:e3:d6:02:d6:
52:69:b3:e9:99:01:e0:77:65:59:cc:db:57:6c:b1:e1:b8:a5:
28:ed:37:57:91:ab:8c:f9:20:2b:63:18:5f:4b:06:ed:10:62:
76:ab:2a:90:f0:a3:cf:06:f4:a7:8f:7d:f1:65:6b:ff:ad:cc:
c6:dd:bf:bd:ba:98:c1:9a:04:53:04:e9:5d:cb:3d:e1:1c:1f:
b1:4a:26:82:2d:db:0b:63:4c:13:55:4b:f0:88:75:97:55:cf:
9f:4d:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:35 2026 by rpki-client