Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: T3TeOi/U97oRYSLeQpMW2hS+QL2ssGHfAfVL7UYiRU4=
Subject key identifier: DE:CC:B8:C6:8F:CE:65:B7:89:90:81:9C:CB:32:90:5B:52:CF:22:7F
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 019F9135F31A9ADB465F6CDEAB3CCD0474ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 10CE
Signing time: Thu 23 Jul 2026 23:00:59 +0000
Manifest this update: Thu 23 Jul 2026 23:00:59 +0000
Manifest next update: Fri 24 Jul 2026 23:00:59 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: jCb+P/oWwlZboWJIBf86YgWvao24GebEPjUMqdWaKGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f3:1a:9a:db:46:5f:6c:de:ab:3c:cd:04:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Jul 23 23:00:59 2026 GMT
Not After : Jul 24 23:00:59 2026 GMT
Subject: CN=deccb8c68fce65b78990819ccb32905b52cf227f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:bc:bc:bd:cc:65:93:ac:f6:dd:ab:d3:bc:
a5:bd:a5:16:fe:33:42:c8:4f:06:10:56:f2:16:72:
48:18:0a:49:d2:7c:d6:59:bf:23:e9:11:b3:13:f2:
82:71:a6:a5:c5:65:9b:7a:52:48:e5:b4:6f:07:7b:
f3:f7:e4:c6:09:17:6a:bb:2c:41:cf:60:f3:bd:4b:
20:3c:ab:c7:0d:0a:77:f5:18:0f:85:6d:64:42:83:
4f:53:6c:60:f7:86:44:61:ff:46:b5:f0:4c:06:99:
1c:b5:a2:6d:6a:62:a7:bd:b1:8c:b0:1c:c0:77:bf:
47:5b:57:58:51:35:44:53:61:73:4e:51:b3:2c:2c:
a9:33:2f:b7:1a:5f:5c:18:96:e4:02:8f:63:8e:46:
1f:ed:03:b7:c0:6a:b4:9e:52:f4:98:00:d6:31:1d:
14:9d:a8:a0:11:12:36:32:f2:97:55:b0:8d:81:78:
33:8d:e6:b3:6d:d5:1a:29:08:78:fa:c6:c3:59:1e:
17:fd:a3:ec:19:b3:af:34:8e:ef:55:0f:a6:e2:3b:
ab:f5:4a:d0:02:51:bf:ab:11:f4:b9:4f:f4:66:36:
c9:a8:b4:32:90:36:5d:5d:ed:ae:af:aa:10:ac:5a:
a0:33:0b:58:65:07:7b:32:f7:94:a7:fb:65:97:4b:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:B8:C6:8F:CE:65:B7:89:90:81:9C:CB:32:90:5B:52:CF:22:7F
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:9b:0b:80:d7:e6:c1:d1:42:4a:af:a4:f2:bb:51:62:28:
ae:b9:36:d9:6a:46:f6:c7:36:c6:96:40:63:4e:3c:94:5e:61:
66:72:06:bf:6e:48:57:9d:a0:32:53:87:60:da:1f:e6:55:00:
8e:d3:21:14:23:90:2b:b4:24:39:dc:7c:44:18:1a:e7:07:21:
86:98:50:6f:84:52:11:6b:25:c0:ec:8f:10:2d:ac:f5:8a:66:
f6:e8:c3:71:77:b9:01:e0:62:8a:95:cb:c4:59:df:4c:42:3e:
f2:81:2b:6e:98:bc:bb:47:8b:d7:3f:a8:6d:01:31:50:46:15:
1e:b7:62:6c:8a:04:de:01:01:8a:59:56:b6:94:52:0d:bf:3a:
67:7a:61:9d:44:e5:c4:ac:fe:21:40:ae:ca:93:57:70:fc:60:
1f:b3:1b:83:d9:23:1a:0c:94:df:87:c6:be:5f:da:5e:8b:3a:
b9:01:68:7a:7e:bd:f1:d7:1d:02:87:a2:b6:f7:80:8d:d3:54:
2b:f4:7a:d0:e3:2b:04:0c:a7:81:4e:e3:69:0f:14:5e:dc:0f:
d6:5a:09:9c:47:c2:83:18:e5:c8:b2:6a:6d:79:e5:d5:c8:5f:
5b:1e:a8:bb:7d:ce:04:28:ca:61:c9:a8:55:9d:aa:73:a6:1a:
7a:6a:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:39 2026 by rpki-client