Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json)
Hash identifier: ZlJ8Ea3yCiaw8ertrkV6EYFQ+PzgIBrCNICn1lZW6e4=
Subject key identifier: CC:12:AE:66:04:76:5E:B4:91:0A:5E:F5:D0:96:63:0A:19:FB:84:96
Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Certificate serial: 019F90C7D740CF1C541A28AE3E60D965445B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
Manifest number: 0459
Signing time: Thu 23 Jul 2026 21:00:43 +0000
Manifest this update: Thu 23 Jul 2026 21:00:43 +0000
Manifest next update: Fri 24 Jul 2026 21:00:43 +0000
Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: sx768xdtlLB5E2ktGeiXFS75gZ20XPULzSRFCnYgM9M=)
2: VHbe_xOVGHCgQR5XnYgh-yKH6cE.roa (hash: 5VSEEsjJBUwWudxQvIdtRqUqe0PKutNTBibCMoL8Zoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d7:40:cf:1c:54:1a:28:ae:3e:60:d9:65:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Validity
Not Before: Jul 23 21:00:43 2026 GMT
Not After : Jul 24 21:00:43 2026 GMT
Subject: CN=cc12ae6604765eb4910a5ef5d096630a19fb8496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:75:56:67:23:88:9d:9c:c0:8a:83:2c:f4:
a8:7f:bd:ee:96:db:22:e3:7f:9f:bb:2d:bd:e8:b4:
5c:5a:a7:57:8e:d4:f4:80:72:d1:04:ae:1a:5d:ea:
f6:dc:fa:00:ef:40:37:ce:26:b6:07:f8:c5:f1:3a:
c2:a1:dd:6b:6b:8f:11:84:86:cc:e7:b7:42:f5:9f:
70:72:26:d2:91:4a:83:f0:1c:48:f9:c0:e0:a9:e8:
4e:1a:ef:7e:e6:53:18:ab:8b:7b:a6:96:93:fd:c5:
81:c8:e2:51:f7:75:b5:bf:15:b7:d5:7f:e7:aa:77:
8c:18:cd:e4:a6:de:64:21:a8:ee:b9:c6:d7:b9:5c:
f7:da:3e:31:16:e3:10:72:c5:5d:72:5f:39:ce:9c:
58:7a:96:fd:d4:67:a3:b0:32:23:05:c4:9b:bb:9d:
0c:8e:f7:5a:be:83:72:4f:68:62:4f:56:79:7e:46:
80:2f:36:40:5e:e0:77:12:e6:3f:de:40:df:a8:46:
54:74:c8:1c:4d:b1:56:bc:88:28:50:a5:76:22:eb:
f5:ea:c7:e6:c5:17:c0:a4:2a:34:04:1d:49:59:86:
aa:8a:cb:99:72:11:0a:de:12:5c:02:69:eb:5e:bd:
6e:2d:43:65:d7:1c:27:80:16:b2:65:13:83:cc:28:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:AE:66:04:76:5E:B4:91:0A:5E:F5:D0:96:63:0A:19:FB:84:96
X509v3 Authority Key Identifier:
keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b4:0f:88:0b:cb:66:c7:12:9d:36:76:b7:1b:0f:52:e1:9f:
be:59:22:e5:73:a3:48:e0:78:65:6c:a1:45:55:14:b7:e7:dd:
e2:40:30:cc:e2:26:81:60:7f:df:65:5a:a7:0a:18:fa:af:a9:
93:6f:ac:33:d4:30:49:94:b5:e3:39:f0:0f:f7:6a:c9:87:bb:
a4:2b:41:b0:2e:12:6e:79:4d:1e:a7:71:18:0f:de:c2:a0:1e:
9f:44:34:00:63:7f:64:14:6a:0d:40:41:cf:59:89:3a:35:d8:
81:5e:aa:82:83:dc:5c:53:b8:0c:ba:bf:7f:f6:55:28:f1:6c:
e1:48:7b:94:f1:22:34:26:b7:5f:c2:18:80:3b:05:71:ac:8c:
d4:ce:95:c1:df:42:d4:c6:77:77:f2:3c:ed:76:9c:b7:df:4e:
f2:d5:ca:d0:f5:32:fd:d6:7c:73:38:84:26:68:61:38:3a:4d:
80:1a:50:d0:0f:cc:a2:52:43:63:b7:8a:18:4f:1f:65:90:f9:
e5:ca:03:6a:35:55:2c:5c:c1:06:ee:63:73:48:fc:69:cd:a0:
55:8a:a1:b4:f2:c8:89:12:f2:05:d1:74:bf:07:2e:48:73:3a:
ea:d8:72:ec:79:0a:5b:ba:ab:26:13:bb:2b:a7:97:80:4d:b0:
99:f2:bc:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx9dAzxxUGiiuPmDZZURbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5
MDc5ZWQwHhcNMjYwNzIzMjEwMDQzWhcNMjYwNzI0MjEwMDQzWjAzMTEwLwYDVQQD
EyhjYzEyYWU2NjA0NzY1ZWI0OTEwYTVlZjVkMDk2NjMwYTE5ZmI4NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8F1VmcjiJ2cwIqDLPSof73ultsi
43+fuy296LRcWqdXjtT0gHLRBK4aXer23PoA70A3zia2B/jF8TrCod1ra48RhIbM
57dC9Z9wcibSkUqD8BxI+cDgqehOGu9+5lMYq4t7ppaT/cWByOJR93W1vxW31X/n
qneMGM3kpt5kIajuucbXuVz32j4xFuMQcsVdcl85zpxYepb91GejsDIjBcSbu50M
jvdavoNyT2hiT1Z5fkaALzZAXuB3EuY/3kDfqEZUdMgcTbFWvIgoUKV2Iuv16sfm
xRfApCo0BB1JWYaqisuZchEK3hJcAmnrXr1uLUNl1xwngBayZRODzCgyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwSrmYEdl60kQpe9dCWYwoZ+4SWMB8GA1UdIwQY
MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt
ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm
LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7QPiAvL
ZscSnTZ2txsPUuGfvlki5XOjSOB4ZWyhRVUUt+fd4kAwzOImgWB/32VapwoY+q+p
k2+sM9QwSZS14znwD/dqyYe7pCtBsC4SbnlNHqdxGA/ewqAen0Q0AGN/ZBRqDUBB
z1mJOjXYgV6qgoPcXFO4DLq/f/ZVKPFs4Uh7lPEiNCa3X8IYgDsFcayM1M6Vwd9C
1MZ3d/I87Xact99O8tXK0PUy/dZ8cziEJmhhODpNgBpQ0A/MolJDY7eKGE8fZZD5
5coDajVVLFzBBu5jc0j8ac2gVYqhtPLIiRLyBdF0vwcuSHM66thy7HkKW7qrJhO7
K6eXgE2wmfK8Tg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:05 2026 by rpki-client