Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: MQCdi3ZKzLCiblm5vyBavHIIF2vxtxu+kug3VjjRikM=
Subject key identifier: 82:D8:FB:14:AF:6D:DE:D4:23:A4:39:08:97:2A:F3:02:9C:F5:FC:54
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019F1867B06635D43642B49367D710BAAACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 1992
Signing time: Tue 30 Jun 2026 12:01:16 +0000
Manifest this update: Tue 30 Jun 2026 12:01:16 +0000
Manifest next update: Wed 01 Jul 2026 12:01:16 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: zomndd8FwGp9zsPBV0jIpVxI0c6W6Uad2QzpUGq51ZY=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:b0:66:35:d4:36:42:b4:93:67:d7:10:ba:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jun 30 12:01:16 2026 GMT
Not After : Jul 1 12:01:16 2026 GMT
Subject: CN=82d8fb14af6dded423a43908972af3029cf5fc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:d3:6d:fa:b2:70:12:6f:0a:d1:fe:b0:04:
a0:19:6d:7d:04:9e:39:87:25:92:74:06:36:bf:c2:
32:28:a9:84:a5:a4:7f:5a:08:3a:cd:0a:a5:58:fd:
74:7b:b3:75:eb:8f:18:9a:99:b7:03:c0:ab:b4:0c:
e5:8e:17:19:b3:dc:2a:41:58:f7:1f:0c:18:93:19:
ea:d0:98:5e:64:b5:f8:19:83:78:e0:49:3a:0e:4b:
da:70:7c:97:40:f1:a8:dd:ab:a5:a6:5b:eb:59:84:
a5:76:e3:3a:cf:a0:eb:a3:43:c4:89:f0:f7:34:14:
a5:15:6f:db:97:c7:c9:be:b1:06:5d:a8:ff:c1:1b:
ef:a3:b6:8c:45:55:dd:11:4b:6c:f1:2c:ac:f9:31:
3b:38:45:ae:83:66:56:79:61:d8:f2:b9:ed:c3:34:
f9:31:70:ea:c5:d7:bc:68:8c:ae:d0:03:4e:53:8e:
7a:17:42:73:ef:e4:9e:bc:5d:e9:29:3b:52:31:1b:
81:a5:d9:f6:3a:db:b1:5f:94:a3:21:1e:7b:e4:8b:
80:97:0b:ec:be:49:a3:53:cc:6a:f4:41:ff:7a:ac:
16:1d:d4:88:ca:4d:b8:ef:c0:b2:bd:b3:1a:3b:67:
b3:d1:28:ed:fe:80:31:62:56:e9:ab:c8:27:70:ea:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:FB:14:AF:6D:DE:D4:23:A4:39:08:97:2A:F3:02:9C:F5:FC:54
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:90:67:9c:8f:02:26:d6:48:87:c4:51:a6:92:9f:be:71:
8d:b4:c0:36:45:43:47:d5:64:a0:0e:a8:95:fb:61:bd:f4:27:
77:6e:9c:25:45:7b:2d:08:bc:29:d8:f1:d1:a6:cf:89:98:13:
7f:0d:33:da:2a:64:76:bb:da:ef:2e:ba:f5:b6:a0:a3:3a:94:
5e:d5:07:a6:29:33:25:6d:dd:15:1e:7c:e3:c6:3b:53:14:23:
5c:6b:df:ad:78:3e:2e:ed:a4:93:56:f4:0e:ff:e1:35:60:37:
78:48:b0:d8:1f:cc:29:be:15:f0:09:5c:8e:0a:4a:39:85:d3:
67:94:00:92:ae:ae:30:12:23:d6:e7:8b:e9:80:cc:f7:0f:74:
74:6b:44:fd:ab:59:33:c4:92:29:fd:80:6b:95:cf:32:0b:26:
87:6e:e3:e0:17:dc:5e:c5:a2:f2:e7:9b:0a:b7:ec:b2:2b:54:
18:7b:0f:59:ce:32:9c:a5:aa:4c:5f:bd:3a:0c:3e:1c:e5:f4:
7f:c2:0e:c4:24:ce:62:57:c3:f7:1a:9d:3d:21:27:72:f2:41:
a8:df:d9:51:8f:98:56:71:f8:5a:88:9f:7a:c5:c9:e8:13:82:
af:a7:f6:8e:07:81:94:5e:9c:3a:12:5a:6b:1b:33:a1:0a:a4:
b6:bf:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:04 2026 by rpki-client