Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: uWlhkQk7Kqqfkj4R/wDrjdjyV+706XVtXWH48906hZ4=
Subject key identifier: 4F:A5:CD:D5:0E:D1:76:58:6D:AA:8E:54:6A:CE:B1:F2:1E:14:D9:F9
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 019F1830F682F36D5BF3E80EDE84C5447707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 11:01:29 +0000
Manifest this update: Tue 30 Jun 2026 11:01:29 +0000
Manifest next update: Wed 01 Jul 2026 11:01:29 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: XZTKC6UwRFeETwgFaQzXlIBbuw7rt07yi8mG1UnEs+Y=)
2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:f6:82:f3:6d:5b:f3:e8:0e:de:84:c5:44:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jun 30 11:01:29 2026 GMT
Not After : Jul 1 11:01:29 2026 GMT
Subject: CN=4fa5cdd50ed176586daa8e546aceb1f21e14d9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:e9:51:78:cd:43:ba:5b:48:5a:2f:2e:c4:
f8:d5:1d:58:bd:99:21:21:b6:63:81:4e:f3:ce:cc:
0a:78:ab:78:89:4c:7e:08:60:ec:1f:9f:2a:b3:6b:
f8:a9:b2:d3:cc:1b:63:19:3e:f5:a1:3d:a0:1c:dc:
26:26:91:4c:d0:2e:51:9d:68:82:ee:9b:34:e7:6f:
53:ea:79:6e:9e:1c:58:dc:c1:c1:18:c6:ff:be:11:
fa:c9:8e:fd:11:3b:ae:45:a0:94:dc:2d:47:16:71:
83:8d:87:2e:9f:65:0e:f2:be:c4:37:e6:49:ca:b3:
ba:52:76:07:1d:22:24:29:eb:51:09:f3:8f:8f:28:
65:52:9b:41:5a:30:ba:8f:d5:f7:5d:02:fa:93:b8:
ee:88:d9:a3:9a:a7:da:34:a8:34:14:6b:f2:5f:13:
27:60:9a:4c:86:13:5b:1e:71:ab:4f:e2:8a:18:c6:
4a:ca:c4:6e:af:0d:62:78:2d:4e:7d:05:53:18:58:
53:59:8f:f1:8e:ee:42:8d:70:15:4e:6d:69:23:92:
21:67:a7:69:2a:20:0c:10:c7:3b:c4:28:17:f6:f8:
38:cb:ea:a7:9f:e9:3e:34:9c:4a:c6:d7:81:bb:15:
94:6e:a9:91:21:66:13:41:a0:8f:34:16:7d:a5:c1:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:CD:D5:0E:D1:76:58:6D:AA:8E:54:6A:CE:B1:F2:1E:14:D9:F9
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:b3:f0:fe:7d:b6:09:a3:0b:b3:0f:f8:7f:35:fa:fd:ae:
b5:9f:c9:d8:95:ac:19:64:b0:e1:c4:92:5a:1a:9d:43:cb:a9:
cb:53:f3:bc:58:5a:b6:4e:36:5b:b9:9b:53:e5:b1:fa:38:8d:
c6:d3:88:2f:78:ca:2e:3d:c8:e2:5e:4d:98:23:8f:b9:c0:7f:
1a:e3:82:8b:6a:41:0d:e8:e0:51:a8:47:97:1b:e7:1a:ec:2f:
b6:97:2a:be:ba:ac:7f:50:35:d7:1b:77:17:ea:d8:9a:ce:f9:
25:6d:83:8f:de:34:f7:3b:c1:80:d5:c2:81:01:27:ab:f6:bc:
2d:dc:da:bc:44:ea:f7:13:60:eb:3f:2c:8f:72:79:d8:a2:99:
89:4f:55:f5:4e:0b:a6:a2:b5:97:cf:fe:59:e8:92:5b:b4:cb:
05:a4:b8:88:32:9d:2d:86:fe:9c:13:6a:43:fc:ca:d7:c8:99:
52:4e:3f:bc:4f:db:8b:65:20:fa:2e:20:7d:11:b7:e0:17:74:
95:43:2c:af:80:c4:8b:f9:d5:fb:db:e7:55:43:14:3e:d6:4f:
34:fb:9e:5c:98:51:67:73:5d:4b:16:8a:93:86:4c:1e:9b:ae:
54:9e:a9:29:dd:c7:06:d3:cb:93:bc:99:85:36:e9:2b:65:ae:
94:7f:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:28 2026 by rpki-client