Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: DvpjMHb9z9gzvGnigE46e6JBAKbSfhkoMMeURF7XunQ=
Subject key identifier: 35:78:63:9F:77:40:F3:24:73:51:0C:6A:D9:F1:DA:20:CC:B0:00:87
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019FA14E4DCE909DF6806191B3D0B619658B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 19E4
Signing time: Mon 27 Jul 2026 02:01:31 +0000
Manifest this update: Mon 27 Jul 2026 02:01:31 +0000
Manifest next update: Tue 28 Jul 2026 02:01:31 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: SpWmhEImHsmfm5hvSc4IgyNUKJsaGSgbFvehqsBw1Z0=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:4d:ce:90:9d:f6:80:61:91:b3:d0:b6:19:65:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jul 27 02:01:31 2026 GMT
Not After : Jul 28 02:01:31 2026 GMT
Subject: CN=3578639f7740f32473510c6ad9f1da20ccb00087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:18:30:0e:3a:84:bf:b3:12:63:9e:79:75:
8d:13:72:5a:09:8d:f3:83:10:d6:15:23:5f:68:30:
04:52:9e:1b:1f:15:ed:3c:f7:ac:78:6f:c5:e2:6b:
8b:03:64:a8:95:99:62:ca:38:49:ff:5a:6e:d5:5a:
54:95:54:74:90:81:99:e8:52:19:f4:ad:20:12:61:
3d:22:d6:67:d6:0c:99:3b:9c:9c:fb:07:f8:d4:c8:
2f:3c:88:c4:03:be:04:24:76:e0:8c:ce:c3:3c:94:
b7:5b:a9:7b:d0:1c:f7:37:9c:b0:24:9e:c7:f1:4d:
ad:0c:b9:2d:2d:63:57:a9:e7:73:9b:a3:a7:fb:01:
b8:2e:03:33:85:99:cb:89:c8:41:2a:cd:81:ee:26:
a9:c9:17:9c:fa:43:a5:39:2d:4e:d2:13:d7:3e:2e:
0b:f7:3a:72:2c:3f:d8:37:02:d1:40:71:e2:24:d2:
a9:82:9d:fa:cb:df:3b:2b:19:cd:5f:ab:bb:44:04:
f6:d5:b7:36:8e:54:e1:29:45:87:8d:04:e5:75:f7:
9f:e4:a9:06:11:2a:53:61:f1:eb:3f:a6:b8:9b:b6:
01:66:ce:18:a8:fb:0c:9a:3f:58:a1:ed:c4:73:98:
69:77:51:4d:53:c9:f7:a1:95:c9:73:ab:50:b2:f3:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:63:9F:77:40:F3:24:73:51:0C:6A:D9:F1:DA:20:CC:B0:00:87
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:6b:90:9c:f9:39:32:1e:c1:9b:6c:82:33:7a:e6:cb:1f:
44:67:1c:83:79:59:c1:77:5d:49:03:57:b1:48:e9:1d:49:eb:
d7:fb:fc:c5:43:26:13:f2:22:7a:f9:cb:c6:bf:e4:f7:31:b1:
37:7f:79:57:96:8f:db:60:4b:36:01:c9:5d:84:ab:7c:a1:ed:
79:63:6a:f2:32:53:dd:74:ef:c8:5e:57:ec:bd:a8:99:aa:83:
70:7a:02:71:d7:08:6c:f3:24:0e:dd:8d:d1:6a:52:53:a9:d3:
c3:75:b7:4b:90:2b:7e:57:52:c1:5c:3b:be:3f:3e:71:06:28:
ed:be:aa:9c:73:09:28:8f:23:d1:0d:75:92:81:b5:28:5b:ff:
a8:4a:19:ec:83:82:78:eb:2f:c7:55:00:9a:d2:05:d4:e3:03:
0f:d0:6b:63:ee:f5:1a:6e:ae:4e:31:65:bd:5d:da:08:2c:c2:
e3:7d:24:55:e1:62:df:e6:b0:e0:29:5a:99:ed:d5:f8:f5:12:
72:0d:f4:da:5b:0b:96:e4:14:bf:e4:48:de:cc:5d:63:4e:dd:
48:be:0e:6a:ce:fa:d8:38:6b:35:36:a6:7c:53:40:6e:30:7c:
79:f3:9f:fb:e8:7a:3a:54:f9:e4:79:dd:cd:70:93:5e:ca:93:
fb:7d:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:52 2026 by rpki-client