Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier: 7TMTaDVW7HhCC9YG8BNLE7sFGbm59Q8IDdR04LL9MiQ=
Subject key identifier: CA:27:85:0D:E1:CA:D7:9C:3F:F8:8D:0E:51:C3:02:06:15:25:F6:6C
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial: 019F10E491B45EBB3B06B0D9CB48EC7C5BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number: 10BC
Signing time: Mon 29 Jun 2026 01:00:42 +0000
Manifest this update: Mon 29 Jun 2026 01:00:42 +0000
Manifest next update: Tue 30 Jun 2026 01:00:42 +0000
Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: tN/NmXvOBTRPCosYcyRggCCvVp58IS8BFaCx4SljzGQ=)
2: GTw1p6dp2oTAJwFXKyAJ9e_9LzQ.roa (hash: FDQLcvT4V2CG+9wZjgpFjWusMGtaovIUYoYdZ/3vEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:91:b4:5e:bb:3b:06:b0:d9:cb:48:ec:7c:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Validity
Not Before: Jun 29 01:00:42 2026 GMT
Not After : Jun 30 01:00:42 2026 GMT
Subject: CN=ca27850de1cad79c3ff88d0e51c302061525f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:ca:5e:ba:a1:d9:d6:da:4d:eb:a0:da:4e:
e9:27:b0:95:48:7b:ab:85:ef:9d:82:bd:f9:2b:8a:
77:34:fc:a1:28:eb:94:8f:c8:d5:6b:93:1f:83:18:
dd:82:57:21:34:27:33:d2:be:21:1a:6b:df:83:f3:
e5:90:b8:e0:67:92:80:61:ff:b9:20:da:22:8e:60:
2d:b1:ab:22:63:c9:05:de:8a:3c:f2:3f:f8:64:93:
cb:8c:6c:af:db:88:ec:28:7c:cb:32:56:dd:50:06:
f8:9b:74:be:db:86:c7:3f:5c:06:85:10:56:04:7c:
73:53:ae:1b:da:fe:59:73:f7:cf:53:d6:cd:ce:6f:
63:f7:ed:c4:4a:c7:19:b4:02:0c:7d:5a:e0:f7:f4:
b4:65:5b:da:6a:1c:10:c7:78:52:49:f2:25:71:d4:
b0:02:28:3d:fa:b0:2a:91:b8:0b:bc:8e:58:b3:af:
b8:12:a6:12:75:b1:c5:2b:54:52:da:fe:7a:2d:1e:
54:2b:7b:ff:66:76:39:a6:ba:5a:a0:23:7b:c3:11:
f9:02:4d:c5:59:4d:46:6c:4c:c6:05:e5:40:7b:70:
e7:7a:0a:34:e3:90:4b:68:6b:d2:4a:fd:51:7a:1d:
0f:25:2a:13:53:91:af:55:88:80:80:db:b2:04:8a:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:85:0D:E1:CA:D7:9C:3F:F8:8D:0E:51:C3:02:06:15:25:F6:6C
X509v3 Authority Key Identifier:
keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:e0:bb:b7:bd:83:8a:09:55:5b:27:b2:ea:21:b3:b4:b1:
bb:8f:82:29:b2:73:0b:76:7a:aa:54:a9:3c:8c:0e:0e:c8:63:
8b:e3:08:b3:21:02:31:47:a0:38:59:da:f3:14:a2:40:d9:0a:
e4:d9:c7:12:c8:2c:85:1d:d3:05:46:81:98:41:9c:17:5c:82:
ef:7b:df:b1:59:86:6b:58:6f:53:65:c0:2c:7e:bc:01:35:1c:
f9:c5:bc:0a:81:ca:56:de:8b:2e:25:bf:61:49:58:f4:86:54:
05:13:17:e1:4b:1e:c7:d4:a6:09:bb:d8:ac:73:6d:75:bb:d6:
b4:26:57:6f:75:5b:67:fa:14:a2:5d:29:9c:66:6b:37:6a:f3:
2e:66:0d:11:20:95:43:74:aa:6c:53:61:8b:7e:d7:a6:51:e3:
98:cd:4b:50:a5:78:f5:07:1f:d5:e3:77:b2:ae:23:de:59:c8:
65:66:59:19:b4:8a:da:04:5a:2e:fb:52:c9:6e:97:02:c8:a0:
a3:1f:19:1d:4e:64:2c:c5:3b:68:60:b8:cd:f1:8d:dd:c8:c9:
97:c2:91:b2:25:16:f0:41:01:9b:90:2e:d6:d6:88:0e:da:1c:
f2:9c:84:60:cd:3a:b8:3f:d9:92:7b:e0:e7:a4:80:7a:98:10:
d2:8f:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:41 2026 by rpki-client