Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: KfmTeyl6lfwQDztAKzfBuNR1EJPmZIs3YER/uriHqko=
Subject key identifier: 74:78:38:8A:26:3A:66:39:35:B1:BD:E7:F9:11:FE:78:0C:2F:B5:37
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 01A001DD19969ADD8232936CB249FE6D9702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 17C4
Signing time: Fri 14 Aug 2026 20:01:02 +0000
Manifest this update: Fri 14 Aug 2026 20:01:02 +0000
Manifest next update: Sat 15 Aug 2026 20:01:02 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: wVubnDmSYcmPmHelRn2gPDRtbFttz+KsLlbQsd49UwE=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:19:96:9a:dd:82:32:93:6c:b2:49:fe:6d:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Aug 14 20:01:02 2026 GMT
Not After : Aug 15 20:01:02 2026 GMT
Subject: CN=7478388a263a663935b1bde7f911fe780c2fb537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:74:0b:88:9b:26:76:f8:4c:5c:90:8d:6d:
a7:20:c9:f7:fe:ec:66:a2:48:4b:51:34:dd:ab:e3:
2c:9c:b4:9a:69:8d:18:3c:6f:be:39:7d:44:28:aa:
06:e3:7f:80:a1:7a:0a:b3:e8:e3:82:ee:95:d4:f3:
59:7f:9c:ce:ef:b5:55:34:da:59:f0:d4:74:6b:dc:
02:45:cc:65:9a:09:ea:72:84:01:c0:6a:05:be:31:
ae:6e:56:1d:58:b2:dd:35:6b:a1:a6:05:1e:10:81:
81:f4:cd:c9:ef:c5:d0:6f:01:5f:6e:8b:12:0a:7a:
80:1a:cf:3f:02:33:45:56:f0:06:0e:68:7d:2e:e8:
11:1d:2b:f1:5f:82:93:02:81:9b:04:c5:7d:d3:69:
01:1c:4f:4d:0c:2d:20:73:7a:37:17:38:78:5d:4f:
23:a9:17:36:9d:4f:14:96:eb:4e:1c:9e:86:f3:31:
b9:77:21:13:a3:52:fa:50:21:cb:31:77:76:7a:6e:
aa:9d:9b:3e:5d:f5:7b:d7:7c:e9:ad:b4:3a:a6:3a:
e5:e0:09:ec:b7:5d:12:0f:1f:45:d0:46:5d:b6:21:
3f:10:27:26:96:d2:8c:99:70:ed:bb:17:e6:d0:bc:
40:25:9c:a2:dc:e4:9d:12:31:2a:5a:22:d3:9f:d0:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:38:8A:26:3A:66:39:35:B1:BD:E7:F9:11:FE:78:0C:2F:B5:37
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:32:1f:8a:1a:d4:cb:aa:9b:c6:07:e4:e2:44:39:39:51:
e0:fb:01:5e:92:46:33:12:5f:37:df:63:d3:fc:c4:91:ae:b5:
f2:19:5c:12:92:f3:fd:a0:4a:ad:b3:43:90:f1:37:f1:bb:8e:
0d:fe:5e:8a:21:c6:3a:fa:c2:7c:2d:fa:84:8b:5a:6a:cc:53:
8b:11:a4:d2:d6:96:c9:82:6a:c9:a2:21:cd:34:90:77:91:cd:
1d:9c:61:6c:15:7d:e8:7e:b8:ec:7f:10:90:33:47:31:5d:f1:
07:ae:83:78:e7:fd:9b:54:e9:5e:08:d9:ec:36:42:64:41:b1:
14:40:15:59:5f:2e:c7:0f:37:de:08:3c:71:57:36:01:e8:c3:
10:1e:bc:28:b0:83:2e:e1:5f:32:b0:57:4a:62:3e:08:8a:4e:
19:af:4b:e9:6b:fd:81:77:11:d8:e4:31:8f:d9:53:ba:ca:cc:
56:12:fb:d2:ca:ed:ef:b1:85:71:2d:6c:61:19:b6:6a:f0:2f:
91:69:78:84:ae:f9:3f:f1:e5:85:4a:5a:d8:de:16:61:36:a5:
10:f6:b1:7a:e9:0d:a0:c4:e6:90:74:26:4c:50:18:2a:52:bc:
ec:45:0d:13:b4:fb:65:1b:57:bc:59:3c:d1:99:1f:07:8a:a9:
46:f5:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:32 2026 by rpki-client