Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
File: 2HGZiqFAq3wf8kDqsMkjWRPJboo.mft (raw, json)
Hash identifier: hyIAlY/VS2/ijfZVb5ai0LSeXL/3xvY2wuI/w/7iSgo=
Subject key identifier: 60:90:23:D5:2D:1D:84:25:FF:D7:48:08:78:DE:0C:3D:B8:56:34:62
Authority key identifier: D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A
Certificate issuer: /CN=d871998aa140ab7c1ff240eab0c9235913c96e8a
Certificate serial: 019F91DAF1638D48754610E8901C8A539C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
Manifest number: 16D4
Signing time: Fri 24 Jul 2026 02:01:12 +0000
Manifest this update: Fri 24 Jul 2026 02:01:12 +0000
Manifest next update: Sat 25 Jul 2026 02:01:12 +0000
Files and hashes: 1: 2HGZiqFAq3wf8kDqsMkjWRPJboo.crl (hash: lO5mh9MINPsH8fqDPi/V9mJwx9VSoysf3lE0KK59uqQ=)
2: ZVHQNn8NDHrKDlrXSjskIERGk-w.roa (hash: GPFXQQAYnCScqN6Tj+UkAGSIUrlH/xEf/by5WbPkz1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:f1:63:8d:48:75:46:10:e8:90:1c:8a:53:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d871998aa140ab7c1ff240eab0c9235913c96e8a
Validity
Not Before: Jul 24 02:01:12 2026 GMT
Not After : Jul 25 02:01:12 2026 GMT
Subject: CN=609023d52d1d8425ffd7480878de0c3db8563462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:94:e4:ec:9d:6c:d8:6f:12:b5:d6:0a:e9:
a9:94:bb:87:8a:eb:b6:7c:53:71:92:44:8c:89:e9:
2b:3f:84:62:51:6e:4b:0e:0d:75:8d:85:71:c7:57:
f6:22:76:53:57:0f:59:59:1a:c4:99:8b:63:20:ef:
5b:d4:98:ba:34:1b:2c:7d:63:81:38:19:92:bd:f6:
cf:af:d6:af:12:8e:ae:31:a3:29:9f:be:7c:9d:1b:
33:76:51:4f:a5:a1:80:a9:3c:d1:24:c0:3d:6f:14:
84:89:11:29:09:38:bd:d6:01:4e:bc:ae:3c:eb:78:
e7:44:7c:b6:47:40:ce:62:a7:51:15:b9:1c:8d:d2:
01:1a:ed:d0:16:24:69:b3:96:60:5c:2c:67:59:b5:
d5:de:80:f0:d8:de:69:44:93:fb:a1:8b:7d:66:d2:
81:e3:e0:93:90:b9:38:6e:01:88:61:23:27:40:87:
5c:6a:19:83:33:0c:74:8f:00:14:bd:7c:a2:6b:a6:
b2:7a:06:7a:1d:42:21:51:42:c8:ea:db:c4:3f:1b:
6a:47:ba:e6:e1:b6:71:22:00:0c:ee:f3:09:42:21:
1a:90:8d:a1:be:f3:a5:bd:34:c6:56:64:01:56:80:
35:5e:21:40:7c:34:44:37:f3:67:9f:aa:ad:f3:bd:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:23:D5:2D:1D:84:25:FF:D7:48:08:78:DE:0C:3D:B8:56:34:62
X509v3 Authority Key Identifier:
keyid:D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:50:35:0c:f2:2b:be:60:f3:30:8a:51:c8:b8:04:f8:4c:
76:eb:7e:f2:06:45:ea:db:1e:c8:54:06:46:38:ed:70:f9:e4:
28:04:1c:8c:08:24:ea:a2:a9:e9:68:66:fd:5a:41:3e:50:6a:
36:0f:55:0f:ee:37:da:d1:d2:62:2c:70:4f:96:23:77:23:c7:
f5:d4:5c:a2:71:bc:38:1c:3a:4e:c6:09:c4:31:1e:df:63:99:
e0:69:c5:4d:8d:53:98:15:30:1b:50:bd:35:a3:8f:52:c6:3a:
14:09:4a:84:4f:67:15:6c:49:44:47:49:08:95:49:47:d1:4c:
b1:2b:4b:41:35:9c:4f:ad:00:45:07:99:dd:bb:a7:01:84:9b:
33:3b:6f:c9:f5:4e:f5:eb:e5:b0:00:b3:1f:59:8a:df:c6:81:
6d:68:f9:96:03:d2:ef:f2:ae:43:8e:e9:6c:4f:55:7a:ef:7d:
b7:69:7d:9c:34:4d:34:43:74:7f:d7:be:3c:40:f7:18:ee:82:
56:16:0f:cc:71:8d:b2:31:86:d4:4e:2e:e3:5a:8f:50:26:a1:
cf:53:12:1a:ba:6f:2b:cd:83:0d:31:44:3f:be:35:f7:ee:9d:
e8:bc:6b:8b:c3:bf:60:b6:f5:88:9a:6f:3c:2d:3b:20:49:5b:
60:47:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:16 2026 by rpki-client