Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: RTyV4FF9bGpUF8FvJbIYwaFYKc9App2b/ktnboNI/po=
Subject key identifier: 48:A2:C1:2E:47:49:8B:D8:3A:C0:5A:A2:10:35:E1:06:11:03:20:39
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019F84C40EE428BF24DE9A7CBE332EF9EC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0DF2
Signing time: Tue 21 Jul 2026 13:01:08 +0000
Manifest this update: Tue 21 Jul 2026 13:01:08 +0000
Manifest next update: Wed 22 Jul 2026 13:01:08 +0000
Files and hashes: 1: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (hash: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=)
2: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: LJk2NKvdsIhBtw4HaccmTseHvh5iHdx0YDInYoQuLf0=)
3: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:0e:e4:28:bf:24:de:9a:7c:be:33:2e:f9:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jul 21 13:01:08 2026 GMT
Not After : Jul 22 13:01:08 2026 GMT
Subject: CN=48a2c12e47498bd83ac05aa21035e10611032039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:46:30:ae:0c:10:5d:2f:4e:5b:66:43:ba:
cb:00:6b:f7:ed:d2:0f:14:61:d6:27:a2:d8:5b:01:
97:e0:f4:9e:88:be:a7:16:8e:e6:94:7b:10:04:cc:
19:6e:3b:37:52:2c:e0:34:77:ca:17:b4:e1:8f:ce:
89:61:73:18:5f:f3:6d:f5:cb:50:e7:83:dc:12:5a:
fc:2a:5b:f1:b6:52:fd:60:0a:f0:48:1e:94:d7:88:
80:aa:52:91:05:eb:fb:0a:e8:44:37:b1:94:57:72:
41:99:4e:66:91:61:ac:bc:75:d8:62:dd:b7:05:63:
66:11:62:49:c1:62:61:bd:35:b2:b8:e0:b4:b5:59:
fc:73:4f:42:16:d8:77:60:2f:b8:4e:35:07:01:a3:
3a:be:4d:70:e6:62:a3:cb:14:cc:e1:ee:6a:58:df:
36:2c:0f:d5:f4:a3:8d:60:dd:cc:f3:d8:00:fa:5e:
82:aa:8e:43:34:ce:6d:5a:98:d6:bd:18:79:25:0a:
2b:eb:9b:9c:ab:3a:12:e9:74:2c:1b:a8:f6:38:e9:
b8:f7:0b:a3:07:34:0c:25:5e:4e:38:5d:4e:1f:ac:
8b:5c:bd:33:6a:31:bf:46:e8:b2:f9:a2:06:55:f6:
4f:3b:17:36:4b:bb:e1:96:fb:18:40:34:38:34:65:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:C1:2E:47:49:8B:D8:3A:C0:5A:A2:10:35:E1:06:11:03:20:39
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:7e:10:93:74:70:6f:40:67:bd:03:93:29:2a:0d:cf:c4:
15:f1:a9:83:60:ae:78:7a:02:54:45:4a:0e:34:7d:e4:7e:9f:
4f:cf:70:de:20:42:f6:9d:32:29:55:b2:d5:d0:b1:2c:e1:a0:
57:99:b8:5a:e9:75:2d:31:b1:93:58:33:e6:b9:0a:87:b6:f5:
06:80:5a:1b:48:c0:03:c6:3a:c2:11:23:c5:95:fc:68:ad:7d:
bf:51:90:ef:11:72:a9:43:7b:27:ea:42:f3:76:36:4b:49:41:
ab:2d:ba:df:99:30:5a:ee:5c:f3:81:92:df:16:90:26:7c:e9:
24:8a:dd:12:c8:90:d1:31:35:6c:d7:c7:32:56:98:b7:99:32:
46:2c:94:f4:e2:89:d5:87:2f:0a:02:a1:5f:60:f0:96:dd:23:
2e:14:6d:3a:30:27:04:92:0c:38:84:c0:ff:6d:50:3b:0d:7f:
2d:75:b8:f9:6d:14:e5:37:9d:c1:6b:6f:63:7b:07:e6:3d:f9:
5a:43:32:f9:7d:93:d5:b1:25:72:e0:ac:9c:3a:92:19:1f:b6:
3f:5d:de:37:be:25:de:28:fb:f3:bf:f7:2b:aa:3a:04:d4:27:
74:3b:b7:b9:81:eb:8d:09:c6:80:6a:30:fc:53:cf:90:22:7b:
06:92:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:20 2026 by rpki-client