Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: T0a+kUrSiBb03UvOPjc2UE6qvjylpX3pqh0qMHQJcek=
Subject key identifier: 21:4B:2A:14:49:A5:5C:C7:A0:45:FE:98:F7:CB:F9:91:BF:44:66:11
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019F8F472BEA4049F29ADCA77F2EBD9E2BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1298
Signing time: Thu 23 Jul 2026 14:00:33 +0000
Manifest this update: Thu 23 Jul 2026 14:00:33 +0000
Manifest next update: Fri 24 Jul 2026 14:00:33 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: Iaoekn+DDLR1EDrj4Kbu9jrPu3FwdAO1eouseMqdFLg=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:2b:ea:40:49:f2:9a:dc:a7:7f:2e:bd:9e:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jul 23 14:00:33 2026 GMT
Not After : Jul 24 14:00:33 2026 GMT
Subject: CN=214b2a1449a55cc7a045fe98f7cbf991bf446611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:2a:a9:b4:c3:f8:bf:41:8b:7a:7e:f5:d1:
d3:3e:02:69:da:f6:df:35:dc:55:db:74:37:57:21:
97:36:b2:f5:04:fe:0b:ec:6a:f5:7b:f0:c6:63:8a:
bb:c0:68:12:25:b4:d5:5b:e3:84:47:86:18:67:f7:
d8:64:c8:26:8b:8a:0e:a5:e7:10:9a:25:62:53:41:
da:ab:bc:2c:83:2e:96:95:11:bb:67:95:96:38:69:
2d:87:28:84:21:e7:d2:00:ad:ad:08:e6:70:ac:b7:
55:15:ba:0d:20:ce:f4:f3:26:03:a2:c7:ab:64:2e:
7a:19:97:bf:bd:f4:12:9b:27:c1:3e:fb:d6:b8:4f:
b9:ae:ed:b7:d4:d6:8c:d9:92:cf:5f:d0:ba:1a:99:
e3:56:3d:bd:88:bf:44:c0:fd:02:c3:bc:f4:7b:6f:
fa:8d:47:81:6f:9e:a5:f9:a9:2d:64:64:ba:6b:f2:
f4:bb:d9:c7:c7:eb:31:f7:b6:25:54:eb:1f:0b:0d:
b9:85:12:bf:87:1a:51:cb:b0:ec:ca:56:27:d7:b9:
bd:af:d1:35:cb:dc:40:54:26:21:b6:d5:9c:66:96:
e1:40:bd:a5:3a:75:14:49:ce:ba:af:18:e8:ff:ff:
6d:2f:e6:1e:dc:7e:b9:91:c4:5d:6d:16:05:10:d2:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:2A:14:49:A5:5C:C7:A0:45:FE:98:F7:CB:F9:91:BF:44:66:11
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:17:d2:93:0e:62:e1:3c:a8:69:f4:e2:39:a1:ff:53:e9:79:
3a:fb:42:a8:a2:d3:8f:b0:70:60:d8:19:8f:5d:73:b4:3f:57:
04:7e:3c:5b:94:71:d5:52:57:b4:bd:ab:3f:f2:d4:91:47:0d:
df:ff:58:c8:7d:81:ac:c1:2b:a1:c3:82:b5:3a:e7:87:e8:57:
81:00:39:c6:df:36:a3:f2:df:22:77:74:3b:dc:2a:ca:0f:56:
84:d7:9b:3b:a2:08:4a:28:c3:97:23:b8:36:64:48:cb:c2:4a:
04:e3:25:24:2f:7f:4f:43:9d:93:53:c7:f5:c9:aa:ac:cd:0e:
67:43:f6:ea:55:51:66:b1:cb:1e:65:0e:58:f2:b8:0c:02:1a:
9f:00:9d:85:e5:77:1c:ef:98:e6:6b:d3:fc:78:19:44:ed:7c:
95:0c:33:4b:f0:e4:cd:0c:cf:5d:9d:03:46:ad:e5:d5:8c:4f:
31:30:cc:51:42:2a:02:3f:9a:36:03:32:9a:5f:af:bd:45:03:
59:d5:a2:1b:59:79:8d:b9:bd:b6:95:64:9a:cd:e4:ed:1a:8b:
db:89:a3:c3:46:e1:da:13:2e:53:89:5d:09:b7:0e:0a:f8:36:
12:4b:4b:27:a3:ab:19:6f:01:e4:cd:6c:26:97:e6:b5:42:f9:
e3:60:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:26 2026 by rpki-client