Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File: _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier: wbIu0U111ve3NpckBOzjpzsxlck2sIYmJX/O0wQxiTs=
Subject key identifier: 6A:36:C6:52:94:70:5D:4F:3C:04:72:70:1D:7C:69:09:3C:4B:C8:F4
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 019FF790DC7789E505DE6264B42E80E6E845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number: 195E
Signing time: Wed 12 Aug 2026 20:01:33 +0000
Manifest this update: Wed 12 Aug 2026 20:01:33 +0000
Manifest next update: Thu 13 Aug 2026 20:01:33 +0000
Files and hashes: 1: PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa (hash: oUnwI/hWFydpEOEqwC9HOMZdSyF2a1xfxAbzlwQhdS8=)
2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: tFVhG+UbYwTTihSeVg0IA0ebik5I5H6A6UceVBhgdbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:90:dc:77:89:e5:05:de:62:64:b4:2e:80:e6:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Aug 12 20:01:33 2026 GMT
Not After : Aug 13 20:01:33 2026 GMT
Subject: CN=6a36c65294705d4f3c0472701d7c69093c4bc8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:fc:80:d3:27:d2:ef:f1:60:26:35:39:47:
64:f7:c6:1b:3d:3d:f2:f4:a4:76:c4:62:fd:48:74:
8b:a0:ba:d4:0f:ac:d8:ed:06:17:63:1d:be:b1:25:
39:b8:f1:aa:7d:f5:a7:76:98:d2:cf:1c:36:b5:cd:
ff:e7:52:86:b6:ab:e0:25:af:36:0e:f0:3d:e6:0c:
09:d0:92:58:70:12:5c:57:c5:37:09:ce:8d:9b:63:
3d:da:17:dc:20:65:04:b4:f3:95:8c:2f:97:85:d1:
1c:b3:fd:7a:a6:fd:51:c0:9f:4c:d0:84:92:ac:a3:
61:e0:81:c0:31:df:ec:ee:a2:f8:db:22:99:ad:63:
80:bc:19:0b:5b:9f:0a:73:1f:b9:cb:83:22:76:cb:
49:45:36:47:9d:65:94:ff:82:95:f3:f3:25:cc:31:
93:cc:66:b5:be:ba:f2:bc:6b:9b:bc:00:8b:83:29:
32:d5:3f:95:4b:a3:1f:7d:ed:29:dc:11:a5:ed:10:
5e:2b:8d:5e:ce:0b:33:8b:85:07:e8:7d:a8:c9:7f:
bb:6e:24:ac:3b:ba:bf:43:a7:c9:01:9e:24:af:cc:
1d:1a:22:46:e5:e6:96:07:1f:7e:92:d5:74:4b:0a:
60:07:c3:bb:12:c3:00:68:4d:b9:b9:b9:7d:fc:4f:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:C6:52:94:70:5D:4F:3C:04:72:70:1D:7C:69:09:3C:4B:C8:F4
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b2:ee:d3:4a:d1:2f:79:5b:c0:57:ec:33:72:23:43:62:d1:
32:7d:05:91:af:61:67:3b:ed:7e:52:3e:d6:46:cc:5c:ff:87:
6c:df:8c:1f:a2:9f:e9:cc:e4:ae:25:6b:de:55:e4:be:db:9f:
cd:3a:ef:51:b6:cc:c5:7d:d1:87:85:79:39:1e:b0:50:14:1b:
be:2b:ca:66:cf:ff:30:4f:49:58:c1:ec:12:e7:f4:72:09:48:
f8:84:b9:6a:e5:e3:db:4e:26:16:10:aa:a2:db:23:88:92:31:
53:38:9a:58:43:16:a8:10:31:fb:84:5f:0c:db:61:e0:97:73:
a3:03:1e:99:8c:c4:29:36:25:df:82:43:e7:b7:fb:ed:d9:b1:
04:3a:93:95:fb:95:c2:d9:2f:de:4e:df:fe:ca:22:37:a9:d2:
fc:71:87:ba:fe:14:ad:99:da:f9:fb:7d:b3:ce:ea:6b:2e:5a:
4b:b3:83:49:da:b9:92:98:f9:9f:72:d8:5b:1c:8e:52:9b:5c:
54:5c:7c:4a:06:8a:ab:91:08:db:b2:bf:84:80:ee:b9:3e:ba:
e8:7f:d7:2c:2f:8c:f0:0d:70:65:c3:cd:dc:19:30:5a:7e:1f:
31:41:52:06:45:3e:9d:6a:76:92:35:4c:25:79:10:92:8d:44:
c4:1c:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:33:40 2026 by rpki-client