Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: wy6gs0cFFdBjgv1udtGHc3e4AHFiqU1H9ra8OrFSvZE=
Subject key identifier: AA:E0:4E:1C:A4:14:11:E5:62:71:F2:BE:36:97:D5:CB:68:FB:44:32
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019F9248CAB4336F32FD56A690C6C3F8569C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 04:01:11 +0000
Manifest this update: Fri 24 Jul 2026 04:01:11 +0000
Manifest next update: Sat 25 Jul 2026 04:01:11 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: ZauO4Tgs3SnXVtleqwk87e2E92iebk8f872bcAdyhAY=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ca:b4:33:6f:32:fd:56:a6:90:c6:c3:f8:56:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jul 24 04:01:11 2026 GMT
Not After : Jul 25 04:01:11 2026 GMT
Subject: CN=aae04e1ca41411e56271f2be3697d5cb68fb4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:f7:3b:6e:2a:b5:e2:7d:08:7b:a7:a8:14:
37:ba:eb:36:f6:da:f0:f1:48:95:2a:21:a3:91:8c:
96:16:ec:f6:87:15:82:85:2b:3c:43:72:b5:b0:a7:
e1:f1:38:a9:5a:9d:d0:4c:1f:58:d0:11:26:25:b4:
1d:55:d0:73:96:13:34:42:3b:a4:51:c9:6e:58:30:
a7:f9:f6:48:e3:d6:29:bd:2b:b5:70:10:88:5f:84:
86:b2:b6:52:ac:a8:a4:b0:45:91:87:c2:48:ca:5f:
57:07:48:d0:c3:bd:cd:16:b0:27:e9:9f:83:ab:59:
30:3f:7a:5d:7e:ac:4c:fb:68:0f:c0:0b:f1:86:1c:
25:49:d6:bf:4c:9a:78:6d:64:6e:f8:67:c5:49:5e:
f0:7e:a7:cf:9b:a8:7f:86:42:38:00:73:55:b4:28:
c3:a4:f5:f0:92:15:37:7f:92:e3:ec:dc:83:19:9e:
05:df:61:54:f0:1e:9f:25:36:cb:e6:9a:57:a9:e6:
a4:0b:9b:82:13:33:65:2a:9f:92:b6:37:9e:8e:9c:
54:ba:c5:b2:75:89:cd:4a:41:d6:bc:82:ff:8a:05:
ba:11:a1:1d:d0:55:2e:e3:bd:52:4e:a1:3c:77:53:
e6:49:48:58:a7:27:75:38:4d:21:e9:c2:53:c7:52:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:4E:1C:A4:14:11:E5:62:71:F2:BE:36:97:D5:CB:68:FB:44:32
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4c:29:8b:b6:ba:81:15:40:2d:f7:9e:ae:4a:3e:dd:70:93:
2a:19:4b:7f:d7:2e:84:95:8a:76:82:27:6b:fe:66:87:cd:55:
28:1d:1a:31:7a:4a:ee:ec:aa:dd:db:2b:5c:fc:84:9a:66:6e:
11:2a:fe:34:5d:7f:ff:7a:68:ed:6f:e1:50:77:2b:e0:95:73:
0a:0e:c6:75:41:8a:70:8e:2e:d8:ae:a9:37:99:83:74:a6:78:
26:c9:28:f5:a3:fe:da:e8:a9:b9:a5:3b:2d:a0:f3:d7:e1:3c:
c6:5b:2a:17:40:5a:0f:3d:be:bd:d2:dc:c8:a6:cc:f7:2e:f9:
4f:c8:17:f8:54:1b:d1:d0:8e:9f:bf:46:1b:a4:5f:02:23:31:
36:50:d5:7e:21:81:aa:34:ab:e0:a8:96:58:a7:34:fd:77:e3:
55:1f:ee:8a:b6:47:de:a8:5c:59:80:83:24:3a:e1:f5:e6:ed:
75:a8:c5:8a:1f:09:9e:ae:25:c5:54:90:3d:76:54:b9:84:c9:
68:c7:98:d6:ce:b6:0f:6d:ef:d5:c8:0f:63:22:07:26:27:be:
11:ca:5c:c0:e6:6f:4b:10:e9:7e:f3:40:e0:5e:63:7c:c6:a7:
57:83:1a:af:ce:22:30:00:4d:df:23:34:bd:b5:c0:55:a4:7f:
32:05:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:05 2026 by rpki-client