
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: jWtycNsFrFvEb51fVBv+D+dwMIHf7BSt9pp6IhDPMx0=
Subject key identifier: 4B:5E:34:DD:1F:15:AC:C3:CB:C0:47:36:1F:B6:DE:68:52:D2:73:80
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 019FA14D7963B7BEF5627610BC49B390BE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1960
Signing time: Mon 27 Jul 2026 02:00:36 +0000
Manifest this update: Mon 27 Jul 2026 02:00:36 +0000
Manifest next update: Tue 28 Jul 2026 02:00:36 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: Gjywu60txoFVny1cbpR4U1mbxp3TUGuRyOYXC+eO9xo=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:79:63:b7:be:f5:62:76:10:bc:49:b3:90:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Jul 27 02:00:36 2026 GMT
Not After : Jul 28 02:00:36 2026 GMT
Subject: CN=4b5e34dd1f15acc3cbc047361fb6de6852d27380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:a2:00:1c:2e:92:6f:ef:6f:a0:3f:ad:e3:
5b:5e:e4:8b:78:c2:d1:7b:f5:37:76:26:78:8c:07:
f6:70:08:64:0d:b0:66:c7:6c:2c:d0:93:6d:1a:d4:
b1:3e:b9:a8:6a:e0:29:d9:48:2d:63:c2:cb:77:58:
20:48:d9:46:9a:43:81:0d:59:79:27:b1:9c:9e:1b:
5d:78:72:f2:71:e2:df:9c:4f:4e:c2:5c:b2:ff:6d:
c0:0a:c1:0f:5b:79:25:44:e3:c2:6a:d1:10:64:4e:
da:82:2d:04:9c:cd:8d:89:17:4a:c8:c3:5d:3c:c5:
7d:17:47:3b:15:53:e7:51:f9:e8:e9:dc:f5:1c:5b:
88:44:23:43:5d:cc:32:b1:14:21:69:5e:92:ee:7b:
2f:46:1f:32:d6:3a:d4:ad:6f:ea:2b:3a:fe:d8:74:
f2:07:20:e1:c5:5d:b3:08:b3:aa:85:d6:41:2b:af:
7f:6c:eb:7c:71:5e:08:9f:5d:7c:c8:6e:ae:b4:22:
91:3a:60:f1:40:87:15:2a:12:9a:73:63:e9:93:38:
63:14:37:0c:9c:19:b7:08:ef:6f:9f:57:b0:3f:57:
66:c2:c8:22:37:d1:45:b4:94:86:21:17:84:cf:40:
69:19:35:be:20:f3:d6:55:2a:54:48:d7:b1:80:d7:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:34:DD:1F:15:AC:C3:CB:C0:47:36:1F:B6:DE:68:52:D2:73:80
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:98:7a:73:61:70:cf:63:90:55:8a:6a:9e:5a:e1:f2:90:
03:d5:9a:a2:77:3e:69:6f:23:52:2d:0d:bd:da:94:22:c2:00:
3a:27:87:75:23:5f:45:1d:dc:f3:93:14:5e:c1:70:40:b4:f1:
51:81:02:6d:84:44:43:e1:32:c0:0f:d2:9e:a6:94:92:1a:92:
df:c4:cf:cb:e5:6a:0f:62:21:02:1f:b6:41:cc:24:09:68:fc:
6f:f1:21:39:f8:ae:22:a8:c2:f6:c1:ae:8e:b9:f9:aa:50:d8:
bc:1f:7c:7f:64:e9:36:63:13:a3:be:41:15:b0:86:4d:1c:58:
3a:24:11:f0:e2:9f:0d:17:07:a3:88:d2:fa:fd:f1:d7:b5:26:
dd:56:16:11:ab:3c:ad:fc:2b:9d:3e:5b:03:ca:10:2f:37:05:
cc:99:ac:a9:7c:cc:4e:0a:21:bd:98:11:51:43:a1:c7:af:a9:
10:6e:e6:5b:e0:59:ae:d9:65:8f:28:e5:15:09:39:28:0d:b6:
6e:83:82:14:f2:71:8f:68:8b:d4:26:31:40:83:85:cb:99:09:
ed:1a:19:be:b4:1e:30:c3:14:50:41:d5:5a:58:93:39:44:d5:
18:3b:64:5b:84:31:62:3b:db:c2:91:92:13:fd:14:6b:3c:ed:
b7:47:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:09 2026 by rpki-client