Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: SDKjpNCRZOunFOpALVKH9lnEapC1TUDsP8Y0/vqgc2I=
Subject key identifier: 06:59:E4:B5:8F:B3:92:34:74:FC:9D:46:D5:84:AE:2E:C0:0F:B8:AF
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019F905A38A12A0BBD911E94324011D72E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:00:59 +0000
Manifest this update: Thu 23 Jul 2026 19:00:59 +0000
Manifest next update: Fri 24 Jul 2026 19:00:59 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: fZiedwTzioiiqZ0mKifwsZhhLAgldboLPy2Jf2Yg2C0=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:38:a1:2a:0b:bd:91:1e:94:32:40:11:d7:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jul 23 19:00:59 2026 GMT
Not After : Jul 24 19:00:59 2026 GMT
Subject: CN=0659e4b58fb3923474fc9d46d584ae2ec00fb8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:b5:8c:1e:ab:d4:b0:53:b0:e8:05:5f:30:
7b:7f:ec:e5:10:75:ee:83:4b:d5:a2:dc:62:40:41:
00:40:14:c3:91:f5:76:32:82:48:cb:8f:e3:a0:8a:
10:11:c9:69:d0:44:76:7a:82:2f:ba:37:a1:16:c3:
19:aa:37:5e:da:9d:b1:b3:49:48:16:a1:57:ae:4e:
7d:3a:cc:61:af:55:85:c3:b8:d1:a4:6d:50:5c:ef:
1b:95:aa:06:e2:d1:b5:77:bd:3a:67:bd:39:ab:5c:
f5:a9:90:5a:e1:56:1e:03:e1:51:b4:e9:f8:6b:d8:
78:dd:9d:39:b6:38:17:94:56:a1:a6:ef:cb:cc:bc:
24:fd:df:57:1e:74:01:0e:dc:ad:37:2f:78:88:c6:
95:63:bd:16:cb:3f:0d:32:7e:5b:4a:8f:60:8d:60:
05:f9:78:b0:c8:c3:46:83:7f:d0:7c:44:4e:cf:83:
79:d7:6c:db:b7:2b:4f:41:00:2e:f9:6e:6d:64:78:
fe:6d:83:68:f5:4a:f5:e8:fe:57:b4:e0:67:f1:b3:
1a:b4:04:96:8c:fd:90:e8:bf:40:02:8e:bf:f3:04:
99:7a:db:70:ce:a7:a2:78:81:4d:f3:41:39:90:36:
00:e5:b5:23:4f:0f:5c:82:65:55:3e:f0:cf:79:dc:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:E4:B5:8F:B3:92:34:74:FC:9D:46:D5:84:AE:2E:C0:0F:B8:AF
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b8:42:53:ae:da:e1:91:6d:36:83:76:4e:f8:d4:f0:d3:52:
76:f2:50:0f:c0:85:a3:b4:6f:13:e6:00:aa:15:d2:f5:15:ab:
87:fc:2e:43:0e:27:10:1e:25:23:59:6a:8c:d0:36:45:d2:33:
2e:67:d5:72:a9:d7:6c:f9:49:21:66:69:bb:09:04:19:f1:7f:
c0:48:78:e3:c8:ee:3d:c9:e2:1c:77:1b:df:61:78:49:1a:2f:
22:d7:8c:9d:a6:f1:cb:e7:d7:2d:e4:a9:2f:8b:6e:f8:de:71:
c8:5a:bb:f4:50:5b:d1:a0:65:61:ba:ee:26:98:9a:24:be:04:
1d:3b:5e:31:93:bf:ef:33:31:66:6b:85:c9:98:5e:ba:fb:91:
80:ed:15:b2:f3:f0:4d:89:62:f6:a4:1a:30:f2:d5:9c:cc:9c:
1a:29:6a:d8:76:87:af:e7:4c:50:f4:45:d9:35:07:9d:b6:4b:
20:da:22:fd:bc:17:92:59:d5:43:16:a7:73:24:f1:62:e7:09:
1e:91:96:c7:df:11:e5:0b:d8:de:ad:dc:dd:9e:e5:b5:92:60:
87:27:79:c9:20:9e:df:5f:b3:4a:b6:01:c5:e1:1a:8f:aa:6e:
10:b7:9a:87:36:e4:c4:3a:6e:9e:cb:1d:4d:88:f2:13:41:16:
d5:75:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:43 2026 by rpki-client