Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: qzOz0U6CL3DtNfW3n1PrxCcFp7vXl+bjlt+u8s1y5oI=
Subject key identifier: A0:7B:88:A2:15:1E:C9:DB:E3:24:84:C2:64:74:5F:B2:D4:FA:20:9B
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019F90FF0841C0A426BBFE0B61594D241B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 0193
Signing time: Thu 23 Jul 2026 22:01:00 +0000
Manifest this update: Thu 23 Jul 2026 22:01:00 +0000
Manifest next update: Fri 24 Jul 2026 22:01:00 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: 1nwwh8v9ZlGe6WOxF13QwLue5tQyE3x3pO/Jvyrng3s=)
2: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:08:41:c0:a4:26:bb:fe:0b:61:59:4d:24:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Jul 23 22:01:00 2026 GMT
Not After : Jul 24 22:01:00 2026 GMT
Subject: CN=a07b88a2151ec9dbe32484c264745fb2d4fa209b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:41:5b:6a:46:43:6e:1b:75:67:11:8d:d7:
40:3f:fd:60:59:c6:c7:ed:5e:f8:fb:bd:12:c5:d7:
6e:6e:a4:47:94:cb:9d:9e:27:8a:22:78:3e:8f:6c:
3b:35:32:f9:e5:30:a8:35:53:06:27:e5:1d:09:4a:
28:40:79:a8:c6:e0:b5:b0:e3:fd:7b:a4:93:ab:76:
58:d1:e3:e1:52:93:b9:0d:4f:29:13:ec:6a:54:c8:
c1:0c:80:2b:90:e8:a1:e6:72:27:8b:1c:6a:c7:53:
eb:c1:59:2c:91:d7:e7:4e:9a:e1:da:a6:37:30:0b:
83:3d:dc:c2:4a:1d:86:9a:a7:a2:d9:a9:60:b7:38:
ba:9f:b4:85:26:6a:33:bb:8e:9f:4a:94:0e:a1:02:
a1:aa:6a:e4:90:5a:83:47:22:7f:b4:37:e7:53:17:
71:98:af:22:5b:2d:57:5f:43:34:48:f7:fe:ca:e9:
00:c6:4b:64:5a:7c:e1:84:09:a4:ee:dd:36:84:f7:
ff:1c:6a:21:ef:80:48:71:ab:6e:69:5b:ed:47:6f:
b1:03:09:d0:c4:fb:fa:99:78:0e:a4:77:57:6b:3a:
3f:cc:05:22:c2:2d:0a:4c:bd:49:9c:68:6a:c4:a0:
04:36:09:9e:1f:d9:23:19:06:05:ec:7e:45:09:df:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:88:A2:15:1E:C9:DB:E3:24:84:C2:64:74:5F:B2:D4:FA:20:9B
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3a:27:28:88:51:32:3d:d0:42:7e:5b:e3:64:33:e1:d8:e5:
bf:2e:f3:2b:d2:04:8c:8d:1a:09:76:f9:a6:12:ab:27:cc:45:
df:c1:bf:3b:7f:5b:49:09:66:31:db:f0:d0:59:94:27:75:52:
b0:b9:87:27:ae:68:41:12:bf:ef:9a:d1:62:48:db:2b:50:07:
3e:c3:ec:44:b1:ad:2c:2b:67:e9:18:16:ad:33:9d:18:96:51:
5d:e2:1f:ee:0c:ca:e7:83:6f:7e:b7:db:77:97:b6:c1:0d:24:
52:6b:be:12:ac:33:73:29:33:93:7c:22:4c:db:d6:7a:f1:ec:
8e:7f:e1:06:91:0b:fa:f1:9e:71:a9:aa:80:fc:2d:1b:e9:0e:
36:ca:fd:6b:d8:6c:80:b6:c6:50:6e:27:7b:0b:8d:d9:ec:da:
24:10:d6:a4:02:b2:68:e5:4e:c9:61:65:64:45:4d:de:34:af:
3a:e8:0a:21:ba:f5:04:93:3e:fd:4c:d9:85:9b:b2:83:aa:3e:
b7:e8:85:8e:54:8a:30:97:af:e2:d7:12:93:48:d4:c9:18:7c:
fe:b7:28:39:44:a6:aa:b4:1b:bc:cd:19:ae:aa:4f:0b:99:95:
a9:01:4c:ef:65:f5:36:dc:4e:30:b5:e2:46:a4:51:38:30:dd:
91:05:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:37 2026 by rpki-client