Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: 1IskbTnpR171AiDSuQ/+S4zMMeA6AJQjioRtajP8FNE=
Subject key identifier: 97:B1:AC:48:15:18:CF:0B:B3:B9:34:4E:8C:C9:7F:E3:27:0C:FD:EE
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019FA03ADD6F352BD56C015A698A6EE8852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 21:00:39 +0000
Manifest this update: Sun 26 Jul 2026 21:00:39 +0000
Manifest next update: Mon 27 Jul 2026 21:00:39 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: evAIIoA0Nl/3EGTt04cVlgYos0rCSyI4367LQX5Kmjo=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:dd:6f:35:2b:d5:6c:01:5a:69:8a:6e:e8:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jul 26 21:00:39 2026 GMT
Not After : Jul 27 21:00:39 2026 GMT
Subject: CN=97b1ac481518cf0bb3b9344e8cc97fe3270cfdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:11:e7:02:3d:5c:6d:e6:72:b1:5d:cf:73:
04:a6:3b:1b:f1:54:11:72:40:68:51:88:c1:9c:2b:
56:9e:1b:4e:fe:34:f8:08:19:c1:5f:1a:de:03:65:
b5:8a:97:81:b0:9c:b8:6c:fc:72:10:c9:6c:b4:c2:
84:4f:35:ab:c1:4f:98:23:12:15:ee:1f:e9:0d:93:
f9:a1:17:d3:76:d8:6b:a9:44:bf:fd:ae:f4:7b:f2:
19:42:4c:86:de:a8:6a:30:ac:64:24:41:c2:d1:08:
5e:ac:34:0e:fa:d6:2b:c5:45:30:3b:27:9c:34:51:
a6:16:c4:07:9f:a4:61:b0:71:b8:5d:d1:a7:19:7a:
50:2d:3e:d5:d2:38:9b:7d:ec:19:2b:f5:d0:41:46:
95:28:80:e8:c7:d5:e5:af:50:81:b4:b7:c0:c0:b9:
3d:ad:ed:82:d8:61:cd:a2:c6:a4:92:f4:0a:55:7d:
b8:00:7c:eb:3c:85:3a:68:06:46:94:f8:d8:fb:a0:
44:8f:02:e1:27:d5:3c:c8:4d:02:e6:e9:70:18:f0:
3a:a7:20:d4:fd:63:c4:bf:a7:98:b7:0d:0a:8a:87:
98:17:7b:0b:19:9c:5e:52:cd:ed:62:10:75:2c:21:
34:62:ef:9f:b3:db:ca:bf:33:00:10:ec:e9:a8:f9:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B1:AC:48:15:18:CF:0B:B3:B9:34:4E:8C:C9:7F:E3:27:0C:FD:EE
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f8:ff:b1:f7:8d:b1:4f:bb:10:68:a8:19:26:9e:21:a4:06:
0d:c1:0a:4a:74:cb:5c:f4:e9:e3:0f:3f:9c:74:8e:47:1e:83:
3f:39:c2:55:45:83:cb:9c:38:44:11:c6:78:69:bf:89:67:57:
9f:1b:11:ef:2e:16:7c:06:f1:1c:4e:53:0f:6d:cc:38:3d:30:
7a:f3:7a:12:39:21:18:72:2d:d0:38:8e:b8:cb:45:df:94:a5:
83:ca:3b:82:ff:c1:8e:48:68:89:45:11:ef:40:68:98:8a:33:
3b:1d:49:09:f1:38:dd:a2:b9:21:1b:6a:bd:d3:1d:63:b3:c1:
32:54:2a:90:1f:5b:6f:80:2d:18:10:29:03:0e:ca:1d:a6:d9:
c0:33:c5:67:d9:6d:fd:45:32:6c:99:8d:4b:19:ab:9d:64:42:
b7:d2:2d:52:1d:0f:6b:19:a9:37:4b:dd:81:50:96:3d:da:d6:
73:14:92:65:2d:45:25:dd:15:fb:8d:46:d1:82:64:b0:de:cc:
6f:1f:f1:c1:c2:10:02:60:e3:79:f1:b8:81:b9:a3:d0:12:ab:
be:60:9f:4e:b6:d7:05:d9:01:97:83:8f:da:30:95:17:7f:93:
09:55:e1:0f:d8:37:e9:ba:ad:92:f1:6d:41:da:73:e8:a6:48:
19:8c:dc:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOt1vNSvVbAFaaYpu6IUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh
MmJjNjcwHhcNMjYwNzI2MjEwMDM5WhcNMjYwNzI3MjEwMDM5WjAzMTEwLwYDVQQD
Eyg5N2IxYWM0ODE1MThjZjBiYjNiOTM0NGU4Y2M5N2ZlMzI3MGNmZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkckR5wI9XG3mcrFdz3MEpjsb8VQR
ckBoUYjBnCtWnhtO/jT4CBnBXxreA2W1ipeBsJy4bPxyEMlstMKETzWrwU+YIxIV
7h/pDZP5oRfTdthrqUS//a70e/IZQkyG3qhqMKxkJEHC0QherDQO+tYrxUUwOyec
NFGmFsQHn6RhsHG4XdGnGXpQLT7V0jibfewZK/XQQUaVKIDox9Xlr1CBtLfAwLk9
re2C2GHNosakkvQKVX24AHzrPIU6aAZGlPjY+6BEjwLhJ9U8yE0C5ulwGPA6pyDU
/WPEv6eYtw0KioeYF3sLGZxeUs3tYhB1LCE0Yu+fs9vKvzMAEOzpqPkM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJexrEgVGM8Ls7k0TozJf+MnDP3uMB8GA1UdIwQY
MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt
ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2
LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvj/sfeN
sU+7EGioGSaeIaQGDcEKSnTLXPTp4w8/nHSORx6DPznCVUWDy5w4RBHGeGm/iWdX
nxsR7y4WfAbxHE5TD23MOD0wevN6EjkhGHIt0DiOuMtF35Slg8o7gv/BjkhoiUUR
70BomIozOx1JCfE43aK5IRtqvdMdY7PBMlQqkB9bb4AtGBApAw7KHabZwDPFZ9lt
/UUybJmNSxmrnWRCt9ItUh0PaxmpN0vdgVCWPdrWcxSSZS1FJd0V+41G0YJksN7M
bx/xwcIQAmDjefG4gbmj0BKrvmCfTrbXBdkBl4OP2jCVF3+TCVXhD9g36bqtkvFt
Qdpz6KZIGYzcAw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:45 2026 by rpki-client