Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: zdXZDGWJ4rpz/avFQtlScYo/RdwSjN01O9uzVSwElwg=
Subject key identifier: 1B:0A:D1:5A:EC:FD:65:53:F6:34:69:C8:22:2C:F5:B6:AB:E6:78:D7
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019F932403426CA18F204E5394927D43A55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 04A0
Signing time: Fri 24 Jul 2026 08:00:38 +0000
Manifest this update: Fri 24 Jul 2026 08:00:38 +0000
Manifest next update: Sat 25 Jul 2026 08:00:38 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: y+GgmNJTJd70mEWgSYtVlB/m2fw/icN3e3lCapsOtCs=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:03:42:6c:a1:8f:20:4e:53:94:92:7d:43:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Jul 24 08:00:38 2026 GMT
Not After : Jul 25 08:00:38 2026 GMT
Subject: CN=1b0ad15aecfd6553f63469c8222cf5b6abe678d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:8a:af:1b:8c:82:82:fb:7b:d6:41:51:17:
7f:ab:25:b7:f3:3e:6a:b6:b5:96:ab:90:75:a0:44:
c2:84:7f:5b:a3:2a:d0:a7:be:92:ab:f4:02:15:72:
ff:36:54:ab:f6:29:23:3c:21:8c:ce:63:22:38:49:
35:76:23:a4:1c:b0:60:18:9a:ad:4a:e4:b0:73:93:
b3:4b:c6:ef:88:eb:d7:5d:4f:28:15:6e:9b:2a:32:
ad:1f:7e:51:81:2d:02:f3:0e:83:95:84:fa:a0:ea:
25:89:c8:40:26:02:32:48:d3:cf:70:17:da:fd:bb:
8f:46:e2:91:1b:45:77:c1:6b:9d:b2:ba:f6:54:6e:
9c:75:d6:4e:81:f6:9b:c1:a2:78:33:d2:44:61:17:
95:63:18:3c:3e:9d:1d:02:3f:2d:36:76:5c:63:08:
9a:ac:69:80:67:6f:4c:38:44:cd:24:1f:bb:fd:44:
cb:dc:0c:6e:6f:76:03:5f:79:ae:18:39:89:55:a5:
f0:ee:74:00:cf:d7:be:29:71:80:6e:87:89:da:cb:
35:fc:d0:68:4e:df:47:71:2d:25:fb:49:99:3d:5a:
76:03:e2:79:49:7d:ee:2b:25:50:60:6c:02:0b:76:
e4:69:2f:d4:d0:df:48:8c:75:d4:55:e4:2e:e2:61:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0A:D1:5A:EC:FD:65:53:F6:34:69:C8:22:2C:F5:B6:AB:E6:78:D7
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:96:d0:a8:f0:55:4a:13:52:f4:34:a6:a9:0a:b5:88:8a:
0d:8a:f0:96:5c:1f:de:10:3e:89:a6:7a:61:a5:d8:ca:72:a7:
95:e4:84:a2:9f:15:d8:f9:17:9c:cf:90:c9:b8:6a:26:95:e7:
1a:17:56:eb:f6:ff:09:bf:15:aa:03:e3:e2:4f:fe:af:32:e1:
8c:44:61:7b:a4:4f:07:3c:f5:16:f4:5a:17:00:d6:79:d2:79:
8e:ad:b6:1b:3d:b6:a7:bf:81:ed:2d:a9:30:90:12:cc:4d:54:
4e:f9:51:e9:2a:9f:6b:0c:ec:f2:e3:17:c1:c1:ec:52:29:60:
7c:36:e2:7f:12:c6:5e:4f:a0:ca:41:10:1c:0f:57:9d:03:f5:
ca:db:ac:9e:43:03:29:7c:19:be:84:20:7b:13:f7:cc:5f:b0:
d6:75:5a:55:f1:73:cc:bc:42:3e:32:b5:03:da:78:01:82:bb:
9e:39:e3:09:fb:a3:8a:83:3a:68:b1:90:7b:b0:dd:36:60:fc:
b7:0f:ed:40:c1:1f:ef:8e:dd:5d:ae:73:d3:18:ea:9c:83:91:
24:9f:40:96:db:80:ff:8b:0e:e9:d1:9c:e6:b1:92:31:d4:e9:
35:ad:47:2e:93:ec:a1:e2:4c:3b:bb:b7:da:c6:95:a6:ab:93:
76:56:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:37 2026 by rpki-client