Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: m9M3i3n6F+y83ZIbRenR6YN0CZYi5ziGGGOkBPe4+tI=
Subject key identifier: CF:2C:F8:BC:A3:B0:92:AE:D5:27:BD:12:25:D4:E6:E3:AD:25:09:A2
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019F1377CFF43E3C7680C990927CC2B99E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 06D7
Signing time: Mon 29 Jun 2026 13:00:46 +0000
Manifest this update: Mon 29 Jun 2026 13:00:46 +0000
Manifest next update: Tue 30 Jun 2026 13:00:46 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: mvcw24dXdj7+D/lqZwBk2CsmgMNTRhtwTFtX4eSsyZc=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:77:cf:f4:3e:3c:76:80:c9:90:92:7c:c2:b9:9e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jun 29 13:00:46 2026 GMT
Not After : Jun 30 13:00:46 2026 GMT
Subject: CN=cf2cf8bca3b092aed527bd1225d4e6e3ad2509a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:d2:f1:34:a7:c5:62:84:30:0d:fa:20:cd:
7e:b2:84:89:ae:88:74:04:c7:81:c9:f7:da:36:31:
73:1e:a9:eb:4d:d9:d0:2e:01:71:06:29:f8:f9:9d:
88:3a:d8:b9:d0:48:28:a5:37:dc:1d:05:cb:0d:04:
56:86:58:35:f0:96:84:94:15:c8:54:14:b2:3c:58:
b8:84:cb:3d:bf:c6:ef:e1:7d:50:8d:c7:f1:c6:de:
19:6c:57:0e:c2:dd:12:b8:27:a5:5f:d5:cf:ef:2d:
77:14:00:c2:db:e5:ae:7a:fd:8d:e7:a1:2f:32:17:
64:09:e0:4e:3f:5e:c9:be:ee:8f:25:bf:0f:1c:29:
b3:b2:a6:e0:a3:5f:e7:12:37:46:47:c3:3d:69:5b:
11:e3:81:cc:80:d9:2c:eb:66:4f:3a:db:e4:40:da:
2b:39:5d:7a:1a:35:c9:ee:c8:d1:d6:a9:d7:a4:25:
e3:f9:18:7a:f1:8c:86:64:2c:1c:ec:e6:7a:e6:e0:
d4:a6:81:d1:cf:21:d8:56:cf:90:e5:4c:4c:49:aa:
7d:59:3b:7b:29:07:24:ad:0a:fb:78:7e:c5:f7:99:
d7:35:97:68:75:96:a2:45:b6:14:cf:ec:d0:54:65:
7f:f8:4a:aa:87:d3:c1:a5:38:d7:77:3c:9d:bc:39:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:F8:BC:A3:B0:92:AE:D5:27:BD:12:25:D4:E6:E3:AD:25:09:A2
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cb:b8:93:d3:95:a1:98:5f:26:fc:73:5e:13:ca:33:a0:9b:
fd:d1:72:91:39:02:5e:41:5f:96:fc:f4:13:65:42:b1:71:99:
47:be:ff:7a:04:ae:cc:e5:67:af:91:d1:ce:de:70:41:8b:2c:
3e:51:f7:13:d3:45:bf:d6:00:56:81:08:7a:86:79:02:e9:8f:
60:1e:fc:5c:1e:d0:21:bf:05:9c:43:20:85:3f:2d:4a:7c:61:
1b:2c:40:0d:f6:02:85:7f:8b:3b:27:d2:a6:e8:0f:07:91:af:
7f:5e:1b:a7:de:cd:c4:bf:f9:47:60:d2:29:e1:ec:ec:db:28:
e1:54:7f:75:3e:0b:32:de:c9:6d:00:ba:44:d4:02:a3:e4:8e:
55:7b:2f:53:49:9b:0e:c1:9e:c3:af:25:7a:ff:64:d7:ea:e7:
eb:4a:4b:0b:6b:89:1c:24:72:79:43:11:23:65:31:46:85:e3:
c8:5b:c8:b2:b0:1b:31:c2:a8:75:48:45:46:34:c1:6f:1e:b5:
d2:50:53:a6:e1:87:08:28:b5:86:a2:b4:00:e8:2d:37:ba:fa:
13:45:24:c2:0d:4e:96:3b:da:67:fe:49:8e:4b:4c:41:c4:d9:
d1:c2:a8:53:21:42:0f:a2:92:04:bc:1a:0e:70:e9:0d:2c:43:
f4:eb:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:33:26 2026 by rpki-client