Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: i8Ro/cBfXoic4t/4B0z+s7FQGjjAhdyTk2lb1gBfFsg=
Subject key identifier: 90:9E:78:71:A8:50:35:FD:B3:E2:68:72:06:CA:C2:5B:4B:97:BA:24
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019F90C7D1D016BD24380BA83DE1F814C73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 110D
Signing time: Thu 23 Jul 2026 21:00:42 +0000
Manifest this update: Thu 23 Jul 2026 21:00:42 +0000
Manifest next update: Fri 24 Jul 2026 21:00:42 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: byn/Z1a7gE+w2kAREZBckzCgZuU23qa2ftguy/gcXZ8=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d1:d0:16:bd:24:38:0b:a8:3d:e1:f8:14:c7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jul 23 21:00:42 2026 GMT
Not After : Jul 24 21:00:42 2026 GMT
Subject: CN=909e7871a85035fdb3e2687206cac25b4b97ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:1e:48:e4:27:da:3d:33:4a:1d:33:51:9f:
46:79:23:90:fa:2f:cc:d4:9f:f3:f3:85:ca:46:f2:
04:0d:1b:96:bc:47:1b:2b:98:7f:f0:13:a6:6c:28:
4f:c7:7f:4a:5c:95:7a:72:0f:1f:c0:18:97:74:2e:
d0:a3:b5:cd:d5:fa:07:ee:74:94:29:fb:ae:40:2b:
a1:a3:f7:58:79:0c:97:0d:23:e8:5f:46:6a:99:e8:
9e:17:8e:fe:7d:11:f9:fa:9f:c4:fb:e5:47:82:33:
b4:14:a7:c9:05:f6:ef:bf:1e:50:c8:95:cc:3a:28:
59:d4:5e:3f:2d:8f:df:69:c2:4e:d7:c1:84:1b:19:
7d:0a:27:20:74:a1:e4:20:22:2f:53:33:5b:69:f0:
ad:a2:77:ed:c3:2f:38:1c:d0:f9:ff:9a:06:53:98:
84:ec:ed:89:c7:9c:35:95:bf:9a:e6:6c:10:00:cd:
63:c6:6d:29:37:fd:b7:d7:50:0a:d2:03:b6:0c:8a:
0d:5b:97:a5:3a:43:cb:07:fc:8b:e5:1d:56:91:7c:
9f:89:6f:91:93:c5:c5:3b:6b:c4:23:2d:d5:ef:ae:
3d:35:96:21:c9:31:9b:fc:53:b6:a7:ec:ab:78:62:
bc:0d:dd:f5:ea:45:d1:4b:15:57:e2:21:a1:dc:9c:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:78:71:A8:50:35:FD:B3:E2:68:72:06:CA:C2:5B:4B:97:BA:24
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6f:f0:74:77:0e:b6:bd:9b:08:be:b7:a5:b1:70:58:b8:57:
f7:55:6a:3a:73:b0:4b:3b:bf:6f:6f:98:7e:5e:15:ec:75:0a:
37:04:70:32:ac:9d:44:2e:42:ed:35:83:ff:d4:5f:57:5b:46:
fe:d1:0c:10:f0:b0:94:be:6e:a8:dc:27:2a:32:f1:17:cf:6c:
4b:c7:f1:ad:1f:c6:de:7b:31:4d:af:a1:f7:7f:58:28:5c:96:
1a:5e:c6:ad:0f:3c:9d:83:a3:74:91:c8:11:3c:9c:84:09:4e:
35:27:cc:ab:5a:66:f4:90:9f:3a:af:55:9e:d3:90:95:bc:b8:
f5:91:11:ce:d3:29:0f:68:2c:19:70:4e:50:b7:db:03:9e:0f:
79:c5:b9:a7:dc:c0:6b:e8:06:c3:00:27:db:68:20:bc:3f:93:
e2:7f:15:9e:a0:62:0a:28:f1:7c:06:8d:13:f1:77:99:cc:8b:
b1:43:b5:c9:8b:c2:e9:37:52:b4:c6:12:9c:d4:b4:4e:8e:ec:
80:1a:c4:23:ca:c6:4a:1b:41:f8:4f:f0:43:89:1e:b9:32:80:
53:47:d4:64:f0:33:d3:03:f6:b1:06:ac:73:fd:e6:73:09:30:
6e:4b:86:c1:ed:ee:ca:28:0c:f1:ad:60:61:9a:76:16:86:a7:
68:db:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:38 2026 by rpki-client