Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: nrc6tn6HD1XPO6ANhcTPgpHS6Tc+huGfxTYAU7yL2rs=
Subject key identifier: 01:D2:65:36:3F:E5:57:3D:69:75:B6:51:85:F8:2E:26:0B:2D:7C:2F
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 019F1867BAD07E876EB9BC89EDB8CBC77DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 0839
Signing time: Tue 30 Jun 2026 12:01:18 +0000
Manifest this update: Tue 30 Jun 2026 12:01:18 +0000
Manifest next update: Wed 01 Jul 2026 12:01:18 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: fBoxpxkSjvrRugvuDdbwVTXJhokC3/SHGoAbX2nidyk=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:ba:d0:7e:87:6e:b9:bc:89:ed:b8:cb:c7:7d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Jun 30 12:01:18 2026 GMT
Not After : Jul 1 12:01:18 2026 GMT
Subject: CN=01d265363fe5573d6975b65185f82e260b2d7c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:8b:7d:67:c3:07:4e:f5:51:e9:0c:14:93:
6b:91:95:ad:06:7e:a3:63:a6:ee:98:31:4d:de:30:
01:f1:b5:76:43:b1:a3:09:90:d9:ac:e7:24:65:f7:
67:bf:e6:c2:82:07:1f:57:a2:f8:90:72:13:cb:6d:
06:ac:da:d3:28:75:37:f1:73:fa:0f:2c:4f:28:fa:
90:d4:46:0a:43:57:9f:93:8b:c7:c1:2f:df:84:c2:
ae:b9:db:d8:b5:55:1d:21:df:34:0d:9d:0f:98:cc:
78:7b:2a:db:52:88:67:74:59:5c:af:11:66:32:5a:
76:6e:29:4f:ae:4e:cb:d5:2f:71:f0:d4:93:67:4f:
fa:09:43:e2:62:61:ad:47:d6:95:58:1e:b6:07:c3:
49:8d:4d:84:bd:5f:7d:10:f4:9a:0a:08:e5:2c:09:
ab:c2:fe:ea:f7:2b:bd:b0:ce:1a:46:12:bc:2a:a4:
b8:69:19:de:31:88:a2:ae:8c:c4:85:e2:1c:48:1e:
f9:00:e1:d2:89:b0:4e:c0:53:55:8c:ee:88:bf:71:
54:8f:96:7c:40:8e:be:1e:ca:3c:a4:06:19:ce:e4:
e4:b8:74:27:41:f3:f2:d9:b0:d3:e5:2f:79:bb:35:
b8:a1:28:ca:44:72:b8:98:99:a0:40:0c:ee:b7:f5:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:65:36:3F:E5:57:3D:69:75:B6:51:85:F8:2E:26:0B:2D:7C:2F
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:48:b4:82:a3:46:df:3d:d7:ea:2d:2b:e1:12:4f:12:bd:
3a:2c:7a:af:62:a9:02:0c:8a:44:b3:63:8f:78:28:66:63:23:
23:f9:cd:64:e6:a5:8f:d5:11:4f:57:21:0d:3d:79:a3:6c:a2:
ee:21:11:65:13:9c:7c:9b:17:63:54:72:d8:c3:18:f8:93:4a:
26:d2:50:a0:00:9d:c7:54:d3:80:23:31:6c:6b:63:da:28:a9:
66:f6:c5:b1:db:57:f1:67:3c:eb:34:b6:33:fb:18:f6:1b:c8:
61:46:35:e6:7d:74:72:e4:4a:07:d5:dd:a9:fe:9c:7d:77:6c:
b9:dd:83:eb:26:9d:10:b8:7f:06:f3:0a:d6:28:4f:43:59:0c:
40:3c:e4:6e:73:5c:f4:c0:54:06:c3:42:d2:9f:c4:5c:d6:64:
50:35:3e:fb:71:11:8c:91:7b:da:43:6a:f1:cc:ff:ce:8d:8a:
25:6a:0c:67:0f:69:e4:76:d7:4a:e9:5b:20:f6:37:3a:f7:8f:
60:35:21:ed:05:39:6d:b9:b5:1a:98:cb:4b:63:db:8a:0f:cb:
2b:19:d8:da:df:0e:b5:97:bc:b9:e0:9a:4a:2d:f1:dd:0b:f1:
08:6a:53:5c:b0:4b:09:e6:51:3e:15:ee:f0:65:92:6f:97:d0:
b8:c4:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:41 2026 by rpki-client