Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json)
Hash identifier: au7Hl0+QGdEQTpj8JV37VY8cf7789pThw+R1ErRKRKY=
Subject key identifier: 12:58:A1:61:5A:63:73:51:B1:08:83:4B:1C:23:6D:4A:0F:C8:B7:F3
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 019F91A36955C687ECA295BCC1ECFFF790D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
Manifest number: 0431
Signing time: Fri 24 Jul 2026 01:00:33 +0000
Manifest this update: Fri 24 Jul 2026 01:00:33 +0000
Manifest next update: Sat 25 Jul 2026 01:00:33 +0000
Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: mNoqZXNWzwd5PANq7HcM2S0mhMIaFEmd289Xinnk8AY=)
2: n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa (hash: ApevewrPNzMKwdZYmudK6D8Ih9aFuZDtkDlyK/2Y0WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:69:55:c6:87:ec:a2:95:bc:c1:ec:ff:f7:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Jul 24 01:00:33 2026 GMT
Not After : Jul 25 01:00:33 2026 GMT
Subject: CN=1258a1615a637351b108834b1c236d4a0fc8b7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:7a:ce:bb:33:e7:65:dd:bb:67:2f:e0:00:
cd:82:cd:e8:90:d5:6b:37:c8:3b:15:9e:56:a6:9b:
53:42:be:9e:21:16:74:51:3a:d9:57:2e:d1:73:51:
e4:52:d4:e2:fc:94:df:4b:44:df:82:38:db:4f:aa:
b0:f2:d6:ae:eb:e7:b9:04:d4:5d:bf:73:69:6e:62:
d3:b0:15:49:89:3a:a0:e1:d8:2e:ed:45:b8:10:0e:
ea:18:fa:cb:32:dc:88:e4:bc:99:f4:d9:36:95:69:
10:27:bf:6e:2e:79:43:41:72:ad:21:39:0c:b7:f6:
87:40:a9:44:e0:48:34:77:80:d7:b7:f3:8c:23:cc:
ff:4b:49:51:2e:44:b1:e9:da:be:ad:07:52:3a:98:
71:6d:0c:d4:c9:d8:19:d2:27:f3:90:5c:d4:af:8b:
9a:54:0d:70:a4:0a:49:1e:d7:a2:80:79:78:c4:05:
dc:b7:76:a7:3c:89:c2:2c:ee:63:2a:70:70:4a:3c:
fe:a0:71:69:29:19:6e:e5:73:d8:64:e1:c6:40:f3:
2c:0a:e3:09:94:4e:9d:62:97:49:1f:cf:98:84:b1:
3f:d6:f2:da:8a:d6:dd:dd:02:7b:70:ad:c8:44:b7:
f2:7b:62:76:4e:83:c4:ed:d1:78:66:02:74:f7:91:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:A1:61:5A:63:73:51:B1:08:83:4B:1C:23:6D:4A:0F:C8:B7:F3
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9d:9f:cb:65:68:71:a9:00:4a:96:81:23:0b:94:d0:24:0b:
c5:48:f7:a9:9b:d3:a7:c3:e4:7c:c5:96:37:f9:ae:8f:81:6e:
56:bd:9a:b9:c3:c3:85:3f:b2:ca:13:95:d0:00:4e:ce:ca:e6:
1b:97:29:6d:a8:9e:d6:ed:62:9d:c5:c3:63:c6:e0:81:e4:19:
79:2e:4e:b9:34:39:69:c7:85:04:86:46:25:50:17:6e:b0:05:
ce:a2:63:69:34:af:c6:e1:9f:72:53:b8:17:ee:83:b6:14:f6:
e7:5a:ae:01:64:7f:9d:97:b8:da:fd:ce:ff:51:47:f5:41:eb:
04:46:28:f3:41:02:0f:99:49:db:5c:66:00:e6:45:9f:aa:c3:
9e:90:2c:17:69:26:c6:7a:cb:ea:7e:21:d9:47:33:2b:41:e5:
bb:5c:20:cb:3b:9c:19:e8:ea:83:4b:de:4c:f5:48:a8:72:ea:
3a:11:13:74:cb:6a:d4:2f:b4:79:32:b2:bb:c4:e9:05:68:46:
9c:01:70:03:49:44:b7:c7:3a:a7:27:79:4d:3c:a1:16:08:44:
5c:57:91:7d:87:fc:d2:97:ef:e9:09:56:be:96:2c:14:3d:89:
f1:1f:c9:73:3b:fe:02:95:aa:25:de:a3:8a:11:f0:0c:f4:87:
0a:10:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:27 2026 by rpki-client