Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: S/7Nl7ypi0yXjVvYaeMzKXswnPvt0c17X+yaGM+26oY=
Subject key identifier: 37:82:E5:0C:B7:0E:1C:C3:F7:1B:77:BF:AD:C2:A5:CF:A0:4B:F7:6F
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019F8FEC8568F310D3825B9ACEF60F7FF1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 136A
Signing time: Thu 23 Jul 2026 17:01:10 +0000
Manifest this update: Thu 23 Jul 2026 17:01:10 +0000
Manifest next update: Fri 24 Jul 2026 17:01:10 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: QaX94UBK37Ge47NR7wPN+o6DTjzH3v3ScsTteRZp9f4=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:85:68:f3:10:d3:82:5b:9a:ce:f6:0f:7f:f1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jul 23 17:01:10 2026 GMT
Not After : Jul 24 17:01:10 2026 GMT
Subject: CN=3782e50cb70e1cc3f71b77bfadc2a5cfa04bf76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:55:44:46:e8:41:88:11:87:73:71:2c:72:
a4:ca:a8:b1:33:c3:6e:f9:4e:6e:47:9b:b3:a7:84:
dc:1c:9c:e6:a2:83:fe:bf:80:32:f9:19:d5:3a:b5:
ff:91:7d:14:41:5c:97:f9:6a:9c:de:1b:a0:e3:13:
84:73:0e:e4:5a:b5:bd:3b:5d:b0:32:cc:c3:db:b0:
65:00:3f:03:2b:25:4d:82:92:62:f4:c4:41:2b:47:
82:91:46:84:ed:7f:13:da:49:78:2d:c5:86:48:55:
cc:9a:d5:53:96:d4:5c:71:c4:6e:c9:5d:dd:a2:73:
77:86:0a:c4:8e:9c:90:4d:5c:2a:87:f5:6d:a4:1c:
97:80:89:fa:7d:23:e0:6a:8a:c6:83:b4:27:9d:0f:
7a:82:bf:0c:c3:22:40:fc:64:9a:c5:0f:97:bc:da:
76:35:ae:f7:eb:d2:00:c1:56:96:8e:7a:f7:9b:76:
63:32:1d:fd:c6:8f:30:b4:5e:4a:ee:96:e4:0b:0b:
61:2f:d9:e6:dd:fe:bd:09:29:44:cf:d1:cf:68:99:
10:c8:4b:bf:f7:b0:36:b4:c8:68:15:14:f7:58:cd:
43:fc:09:09:13:ea:fb:91:24:d3:2b:13:8a:a7:93:
37:06:ea:6c:6e:6c:18:6b:15:22:7c:8f:93:e4:82:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:82:E5:0C:B7:0E:1C:C3:F7:1B:77:BF:AD:C2:A5:CF:A0:4B:F7:6F
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:32:e4:78:99:bd:60:74:b1:9d:fd:28:f5:ff:36:bc:4c:
9a:8a:3f:66:98:35:8b:d0:6f:35:97:33:a9:38:72:e8:98:b9:
3a:e2:4c:d4:c5:27:68:bf:c0:c2:ed:a6:4e:df:51:ce:5a:eb:
0c:d8:4f:23:b3:c4:13:b1:25:b3:3c:a2:8c:7a:9b:c5:79:23:
4d:d7:21:3e:17:22:0c:50:49:f3:5a:67:6e:45:1b:a2:4f:5a:
5f:7f:2d:88:57:c8:c0:d2:e6:84:cc:0e:f2:17:e2:dc:a7:95:
ca:fb:0d:bc:0a:45:12:8a:26:ab:66:9c:63:e3:6d:6c:ac:2d:
e9:d5:9f:99:ca:a4:0c:84:07:1b:35:20:a5:7a:08:d3:97:97:
fd:76:60:e4:cb:dc:e7:ae:ba:3a:80:d4:32:61:d8:01:24:65:
a3:9e:4f:be:2f:4a:23:8b:7f:65:c4:75:9b:66:ec:a6:60:b0:
ac:85:bf:4b:df:11:82:cf:e5:97:ee:3c:78:6c:08:87:55:fc:
8b:eb:95:3a:90:fd:65:83:80:9f:2f:6d:1f:af:f6:ab:b8:9b:
64:d3:12:56:8c:e5:84:c4:ff:62:89:b2:69:72:7b:07:6c:14:
09:31:1c:41:f2:2c:f1:92:a4:bc:f5:9e:ae:3b:7b:96:1c:96:
be:5e:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:32 2026 by rpki-client