Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: rymhByJFwe8A3AQR81n0oPYGclscng9FYG8smY1b45g=
Subject key identifier: 39:90:B3:34:5D:DE:9C:20:08:18:0C:71:71:27:F6:F0:C2:D1:DF:47
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019F1943DBBA082B71A558D4BBD133AA3789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 10CC
Signing time: Tue 30 Jun 2026 16:01:45 +0000
Manifest this update: Tue 30 Jun 2026 16:01:45 +0000
Manifest next update: Wed 01 Jul 2026 16:01:45 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: J2notJTEILueZMLN+2Vc1K2VMbHmvh6M9QYdmAdO2ps=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
3: kdld6jPS4h7qCb7yETrdIyonX4I.roa (hash: TsAE5GMjgX+T1Uu8DxhOV4EuhDXdBpOqPFL5SGq4GAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:db:ba:08:2b:71:a5:58:d4:bb:d1:33:aa:37:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jun 30 16:01:45 2026 GMT
Not After : Jul 1 16:01:45 2026 GMT
Subject: CN=3990b3345dde9c2008180c717127f6f0c2d1df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:69:78:be:99:5b:d1:4a:b9:8b:91:cf:39:
78:7e:66:2f:14:2f:3a:19:52:8c:13:b2:66:ef:24:
85:ac:d4:44:09:a0:8c:71:86:0f:b8:7c:ba:88:23:
e6:87:ab:a1:ec:8a:a4:41:47:fd:fa:f4:f2:23:9b:
cf:15:70:62:3d:ae:9c:c3:19:7c:3b:ce:98:d4:3e:
c2:2b:92:3a:b4:de:fd:26:41:bb:f1:54:3b:ce:de:
a9:5d:ec:b4:20:3f:10:44:cb:5f:16:bc:6a:fa:25:
e8:83:35:5f:49:8a:98:53:5a:58:9e:4c:83:de:41:
93:10:34:4e:dc:a3:98:85:54:e3:15:99:3f:35:7f:
7c:78:49:c9:6f:8c:82:bb:29:62:3f:71:55:3d:f1:
36:b8:ce:87:67:e3:06:50:9c:92:01:51:a9:fc:07:
dd:74:2c:ad:86:6b:d9:c7:e0:bb:50:1c:be:94:d5:
e9:5d:35:6c:cc:42:29:c1:86:e4:1a:5d:61:d4:63:
ee:47:da:89:ba:40:a9:81:8b:2c:7b:32:8e:7a:3d:
06:9f:39:76:87:52:96:06:98:0a:c5:a0:e6:6e:82:
a3:8e:af:62:6f:8a:ba:4d:c2:90:59:98:d6:3d:66:
c7:40:d3:a8:50:da:d1:5c:77:7e:d1:a8:00:8c:23:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:B3:34:5D:DE:9C:20:08:18:0C:71:71:27:F6:F0:C2:D1:DF:47
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a3:e3:8b:ef:97:4f:97:f4:a9:b5:d3:12:d6:4e:17:7c:07:
de:12:52:00:2c:32:24:0c:29:cf:6a:6f:dc:68:dc:f0:16:f7:
19:04:c5:81:e7:9f:66:48:75:15:00:13:09:05:89:87:09:10:
db:7d:1d:32:d7:2e:3b:ce:39:ab:94:36:40:df:fe:51:f9:8f:
45:2c:89:b9:67:49:a8:00:bf:dc:da:ac:d6:c9:47:32:1a:20:
fa:0a:77:a3:2c:4b:9e:2a:e1:71:f1:cb:14:de:cb:7b:e7:27:
ce:c4:51:1a:90:94:05:0d:1f:bb:f0:de:eb:2d:44:5a:5a:b5:
dd:e0:08:ab:37:1b:7d:43:53:df:e9:cd:73:c9:ae:16:f0:38:
da:55:ea:ff:37:e1:74:af:0b:9e:6d:a9:bf:4c:8c:14:70:bf:
cb:13:20:7d:93:5c:cf:7f:f8:f2:09:25:6b:eb:79:c6:8b:f5:
b5:a9:fe:dd:94:5a:cd:e6:28:57:72:ad:39:5c:54:d2:ae:4d:
7d:dd:bb:43:90:54:85:e1:67:70:14:b3:d8:70:0d:ab:e9:d8:
0e:b9:8f:ef:1b:64:6e:91:f2:a7:c2:41:a3:5c:11:31:88:e8:
fe:43:f9:13:ea:aa:34:15:7c:9a:b4:33:0d:ff:99:31:88:23:
19:3c:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:52 2026 by rpki-client