Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: bb23yGLj7XP4BLFdZE11G2FmPY4nH16RLZCLaFq+qWM=
Subject key identifier: 43:72:BF:7C:C3:46:03:78:A1:D1:A4:05:EA:CB:16:8E:ED:1D:91:18
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 019F8F46EE5DA5770C067FF5E69DD6EDE52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 1957
Signing time: Thu 23 Jul 2026 14:00:18 +0000
Manifest this update: Thu 23 Jul 2026 14:00:18 +0000
Manifest next update: Fri 24 Jul 2026 14:00:18 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: lFcXnk86/4f/sL4P9AvR5gIKEaZV2jN78AooLFtF384=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:ee:5d:a5:77:0c:06:7f:f5:e6:9d:d6:ed:e5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Jul 23 14:00:18 2026 GMT
Not After : Jul 24 14:00:18 2026 GMT
Subject: CN=4372bf7cc3460378a1d1a405eacb168eed1d9118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:5f:d6:b5:91:0e:54:1b:1c:e2:84:cf:97:
5c:d4:6d:80:97:22:ec:94:36:7d:78:d3:0f:fc:b3:
0f:4b:f8:1c:e3:92:3b:8d:7b:4f:94:f7:97:02:58:
f3:d7:b0:3d:e1:fd:1e:41:e1:6f:80:62:a6:71:07:
e5:16:68:88:0b:69:d5:03:0f:0e:6e:6c:3b:a7:62:
3e:c9:1d:14:ad:5c:bd:44:4a:01:b9:8c:25:1f:1b:
e7:dc:98:f4:d2:5b:1c:f7:e3:44:72:12:69:87:2d:
83:44:96:12:ca:0e:e8:10:dd:ec:c5:c3:99:99:63:
c0:70:1e:a2:d2:a9:6c:9d:69:d9:45:95:d1:1e:95:
da:27:fe:96:66:11:51:74:9f:57:f4:e4:e8:94:80:
b0:9c:a0:e0:42:a6:db:50:b1:ac:ea:47:90:31:6a:
54:00:f6:68:c7:28:fa:0e:13:4c:e6:c3:2f:1e:de:
20:bc:44:c1:a7:99:84:ce:83:47:01:a2:a2:f9:2f:
84:d0:be:a5:63:4d:67:40:ff:c6:de:10:8e:0b:59:
91:96:63:83:2e:78:22:f4:55:a2:30:3b:99:f4:b5:
ce:78:07:c5:e3:87:c7:89:4e:94:55:c1:d6:14:b6:
ac:b7:b5:02:ae:3f:a9:f9:f6:8a:58:4b:5e:34:d8:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:BF:7C:C3:46:03:78:A1:D1:A4:05:EA:CB:16:8E:ED:1D:91:18
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3c:73:59:bf:c7:96:3c:bf:a7:51:50:48:61:af:17:c5:46:
bd:2a:c5:6f:54:37:f9:4e:28:89:38:10:a0:33:db:55:bd:9b:
f9:d0:16:85:e7:3a:da:85:33:1c:9c:8d:4f:8c:ef:98:cc:f3:
3b:f0:4e:85:5b:be:04:d8:a0:17:e3:c0:e0:5c:7c:ba:8a:8e:
1a:f9:ed:12:d1:aa:58:d0:bb:2a:87:35:ca:d1:30:b6:86:0c:
c9:2b:83:54:95:d7:a3:79:c4:05:fd:88:93:08:fe:56:54:a0:
bc:a2:d7:01:96:6d:0e:3c:20:91:24:f0:6e:8f:d6:6a:a6:32:
19:ab:57:05:de:7d:72:22:f4:7d:d9:a5:70:4d:d3:00:1d:c0:
12:79:12:ba:1f:83:ba:80:f7:0a:f8:fb:78:ca:16:30:52:13:
53:46:00:19:77:9a:8a:b1:8f:44:66:df:97:e6:bf:40:da:e9:
d6:bd:1b:71:63:00:88:4a:c0:72:70:a7:38:2c:47:45:71:f5:
df:b9:fe:8f:95:61:9c:6d:b7:db:8e:27:57:2a:8a:d5:da:f0:
f6:be:8c:66:61:63:39:2b:0d:77:f2:bc:3c:2c:8e:8e:c3:a6:
04:87:53:4c:de:ec:d9:e5:c6:b3:17:27:3f:0b:dc:0a:35:37:
f5:f0:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:46 2026 by rpki-client