Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: 4eH922Jlz8wnTn+BCqKe6WinB2owgX0y+lHlM9Rt5d8=
Subject key identifier: 20:2C:4C:30:AC:46:AF:03:46:13:F0:E5:CF:DE:5A:EC:A7:26:C1:54
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019F935AF6F86AC773C9B5B9E9EEFCF1CC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0D91
Signing time: Fri 24 Jul 2026 09:00:39 +0000
Manifest this update: Fri 24 Jul 2026 09:00:39 +0000
Manifest next update: Sat 25 Jul 2026 09:00:39 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: DDPV2+mgWSr2uGxn/5LXt8cFSOvFLtyNjp99nwS7SJ8=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:f6:f8:6a:c7:73:c9:b5:b9:e9:ee:fc:f1:cc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Jul 24 09:00:39 2026 GMT
Not After : Jul 25 09:00:39 2026 GMT
Subject: CN=202c4c30ac46af034613f0e5cfde5aeca726c154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:73:bd:35:0b:90:da:0f:60:b9:90:bf:4c:
01:dd:48:aa:be:74:00:d9:83:ec:99:86:49:ca:17:
1b:50:aa:0e:5a:26:45:01:76:7f:ea:3b:e5:8a:1e:
cf:14:14:44:40:d6:c6:04:2d:65:37:b3:14:af:4a:
b0:89:25:20:c7:8f:42:cf:3d:1e:2f:d1:14:f4:80:
5f:cf:f0:dc:ab:48:23:07:24:79:cb:38:f3:41:84:
03:de:28:32:87:09:a0:b5:e2:1e:8f:ee:bf:82:79:
a1:b4:6b:80:df:a9:e2:2d:b0:65:20:a3:90:2a:36:
a5:d1:50:e3:42:c7:4e:6c:fa:36:42:ad:be:8d:86:
9b:2f:9d:2c:6f:9b:4f:c9:27:43:b5:e9:3f:70:0f:
be:99:aa:9d:36:53:9b:c1:e1:ed:9d:28:e6:6d:18:
9c:5f:8b:3d:8b:be:27:51:09:1e:8e:63:f3:11:07:
58:d6:49:30:cf:35:b3:ee:45:67:8c:d2:74:ca:c2:
15:d1:df:f7:d2:fe:10:40:67:50:0f:3a:9a:34:b1:
f0:5f:1a:af:1b:db:75:53:96:6f:e2:49:b4:d5:85:
31:c2:43:1c:22:88:4c:9b:a6:89:fa:2e:72:8e:28:
4a:26:13:5f:1d:9a:19:c7:aa:4e:31:07:e2:ef:c4:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:4C:30:AC:46:AF:03:46:13:F0:E5:CF:DE:5A:EC:A7:26:C1:54
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9e:47:6e:7e:46:7a:14:e8:84:bb:2f:88:73:ab:be:cd:3b:
81:66:2e:3a:9d:9c:7b:dc:6a:e5:2c:61:9a:e3:75:58:55:c1:
35:7d:9c:e9:01:19:3c:5a:03:33:f6:de:f7:7d:ab:30:fd:c1:
4d:78:06:6f:0e:08:ef:53:62:23:77:01:94:5f:75:f7:3a:fb:
ef:11:69:4c:74:5f:30:4d:ff:62:cf:28:b4:b1:9b:b8:a2:ef:
0e:e1:f9:35:2f:36:b6:59:26:99:be:1e:70:01:43:f9:ad:56:
b1:d9:77:9b:e7:ad:b3:4d:72:53:d2:99:72:f7:74:83:f0:a1:
b3:f7:44:b4:8c:77:ec:82:82:db:73:95:55:bf:de:de:bf:ae:
cf:85:78:68:97:4b:ce:43:97:a8:af:fc:ce:0d:41:d3:4f:07:
87:ee:68:59:bf:38:5c:d0:f7:98:d0:87:e7:9c:f8:e3:7e:c3:
3b:01:7d:6e:44:df:e0:ce:aa:2c:0d:8a:23:9b:52:ff:06:67:
a2:e7:56:f5:af:41:5f:b5:e8:fa:39:51:05:41:a1:77:cc:0d:
90:e3:ba:33:a1:4e:d7:69:cf:22:92:39:69:9a:61:05:5a:3a:
c9:bb:60:6c:ce:45:df:bf:d6:ba:53:03:35:d6:36:68:30:58:
70:a9:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:56 2026 by rpki-client