Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: JfcwnQBjJKGVw0Jd71Uwn95G7iYCjPxM5N4nhhvJSCs=
Subject key identifier: 18:40:84:CB:2C:9E:68:F6:C4:DB:E6:55:AF:80:ED:68:8F:65:5D:40
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019F83E7A171B5DC7318B5808E10591D1568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 09:00:23 +0000
Manifest this update: Tue 21 Jul 2026 09:00:23 +0000
Manifest next update: Wed 22 Jul 2026 09:00:23 +0000
Files and hashes: 1: N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa (hash: a7GxJ/DHXtzeo/5dQNp0athcwGWDpOFXNyta+KLkn5s=)
2: j0djN2P0pP4FekmDXul4LqL8vFc.roa (hash: Imh4k/3T8J0ucRVeJognqvvIOllYc40mbdeDTMcQJto=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: VCQUXQQKwPlON1/i2B6hP/LJQ+TfzmMOQPC2lqY6c88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:a1:71:b5:dc:73:18:b5:80:8e:10:59:1d:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jul 21 09:00:23 2026 GMT
Not After : Jul 22 09:00:23 2026 GMT
Subject: CN=184084cb2c9e68f6c4dbe655af80ed688f655d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:c7:30:e8:ee:f0:9e:54:d0:f2:36:eb:d4:
6f:08:35:09:8e:20:5d:f8:66:52:14:73:20:e5:91:
6c:5e:79:39:0c:c1:f7:94:b4:a7:38:a8:d1:75:91:
13:c1:ee:f8:ae:b8:ca:19:ee:0d:e2:de:e1:08:73:
95:1a:93:65:17:9a:3f:a8:bd:b2:de:3c:55:16:96:
f5:76:90:95:85:e4:13:79:61:2d:33:92:a2:e9:b8:
a2:98:35:7d:0f:51:fa:09:d9:ad:92:cb:7d:cb:89:
7e:fc:c9:3f:d3:8b:4c:72:6c:59:b3:da:37:00:ff:
fd:82:ed:d7:3d:78:af:07:99:f6:cb:5b:f2:2a:a4:
69:0b:8b:cb:7e:45:68:6c:4d:5e:c8:95:25:cc:f0:
0b:45:35:07:b9:f8:33:65:91:5d:b7:b3:32:ce:e9:
33:53:cc:e1:ea:ab:42:79:b1:e2:aa:18:b0:fb:ed:
9c:be:db:d7:5d:f1:ae:53:3c:9f:55:24:93:a9:1b:
b8:b5:e7:92:62:1a:a1:4c:05:08:f8:23:11:ee:dc:
3c:26:ea:02:d7:4e:d6:48:b4:80:aa:d0:1d:4e:ff:
25:87:d9:17:ec:1d:7f:30:2a:85:e5:f4:cb:f5:2e:
4e:41:17:a1:78:54:2c:e0:11:cf:44:c6:05:36:b6:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:84:CB:2C:9E:68:F6:C4:DB:E6:55:AF:80:ED:68:8F:65:5D:40
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:47:b7:e9:77:e5:c2:5e:e3:a1:84:fb:07:96:78:d2:51:
8b:5b:e4:e4:3a:d3:7c:71:a8:bc:cc:dc:8e:af:41:c3:98:3c:
6e:16:78:62:2e:8a:dc:ce:9d:18:b9:24:04:a6:64:d4:b0:cb:
63:ed:37:da:67:ab:82:0c:3b:cf:a4:f6:35:26:39:14:54:a5:
03:7a:f2:d4:88:f1:b0:7d:dd:49:39:1a:d8:35:7d:f3:e6:36:
91:25:0c:1a:f6:fb:e7:cb:22:48:44:04:bd:c0:7b:1f:06:1b:
25:b4:51:31:cb:a8:d4:6f:fb:41:28:38:cb:b4:3d:a7:36:9a:
af:89:c6:af:b4:bb:b6:d5:a9:ee:49:7f:7c:7f:00:8e:ec:4b:
23:df:5b:95:29:85:d9:51:49:c0:ef:0e:96:08:78:29:f8:e9:
c3:50:9e:f9:36:88:de:e4:f8:f0:cf:60:b5:0b:d5:a0:53:a0:
dc:23:f3:9c:c3:ad:ce:0b:e8:fc:be:b8:f9:ca:46:9b:28:14:
a4:3e:5d:7d:04:65:36:b0:1c:5d:57:ac:a5:76:a1:84:3c:29:
64:1d:02:0e:38:ac:7e:b2:06:89:6d:e3:be:73:43:98:01:63:
8f:5d:30:90:81:d9:c4:8a:29:62:9d:33:9d:f0:61:bb:d8:30:
c1:70:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:07:23 2026 by rpki-client