Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
File: 2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft (raw, json)
Hash identifier: 2mP+ZNkwGi48zHmxJFicoS4Z1aMI/VBDeqsMHXa+OPg=
Subject key identifier: A2:06:C6:3F:87:84:2C:EB:D3:16:5C:BC:39:1E:D4:87:C8:CF:4D:0C
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Certificate issuer: /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial: 019FF37D188F642B623DFCC20B291E793192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
Manifest number: CA
Signing time: Wed 12 Aug 2026 01:01:29 +0000
Manifest this update: Wed 12 Aug 2026 01:01:29 +0000
Manifest next update: Thu 13 Aug 2026 01:01:29 +0000
Files and hashes: 1: 2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl (hash: mA0oxMehzYq+1YsVkOG1iHpyJhX0AbzUjfOJeJCJBV4=)
2: D9_btYwl0fQhOMvvEzfg91IZ8P0.roa (hash: WuI7JG/DTFeMuDLWYMfuwcvhxvoBD8M0//z426pEYRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:7d:18:8f:64:2b:62:3d:fc:c2:0b:29:1e:79:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Validity
Not Before: Aug 12 01:01:29 2026 GMT
Not After : Aug 13 01:01:29 2026 GMT
Subject: CN=a206c63f87842cebd3165cbc391ed487c8cf4d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:e7:23:79:69:a2:5b:d9:00:3e:95:c9:ca:
7a:95:21:07:53:79:20:74:fd:67:26:6e:bd:0f:31:
50:da:99:e4:64:07:04:c4:c0:ad:66:b1:60:cc:1e:
2c:35:f5:eb:45:d8:27:2a:da:a2:0e:fe:d8:a3:2a:
db:fc:42:2e:f4:03:e2:9a:d2:86:50:d2:bd:4c:8d:
0f:96:9e:9e:c1:c1:ae:3a:77:9c:c3:5d:79:78:39:
b6:6a:eb:eb:7e:c3:8b:51:fd:ea:86:28:0e:b9:0f:
b1:43:e7:99:e6:de:5e:5d:e0:c1:7e:3a:3e:14:52:
22:00:0c:63:70:e5:2c:19:0f:b2:5b:26:6f:ad:99:
12:67:7b:98:7b:be:60:17:2b:e9:c4:69:a3:90:82:
a0:68:81:57:f9:74:24:cf:4c:63:85:85:5f:93:c6:
8e:a0:8b:05:57:aa:8e:30:36:51:40:92:9c:8a:b9:
26:c1:36:7c:ef:ac:c6:67:90:b1:0d:06:35:f7:f3:
7a:17:36:d9:be:fb:58:c1:d5:a3:46:38:80:62:25:
fc:c7:21:2e:1c:f4:b3:a2:29:60:44:77:f2:4a:75:
0b:42:8c:dd:1e:d2:d3:e7:5c:68:31:24:75:94:5c:
2f:05:ef:52:68:9d:85:59:d4:8f:68:3a:0f:12:0a:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:C6:3F:87:84:2C:EB:D3:16:5C:BC:39:1E:D4:87:C8:CF:4D:0C
X509v3 Authority Key Identifier:
keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1c:44:8f:9b:09:3a:71:f9:64:8b:79:d5:8e:86:de:6f:2b:
3f:83:bd:26:92:51:44:1f:23:98:ac:08:42:a6:2d:d9:14:4a:
00:92:5e:95:54:19:f9:b4:69:df:bf:43:8a:0f:c6:2e:44:eb:
1c:2c:20:53:4e:ef:2d:78:9f:c1:8b:ea:08:e6:dc:61:e6:5a:
92:a9:5e:d3:f3:ff:c9:1d:de:7f:b8:f5:9a:58:a7:f7:a1:7b:
34:97:c0:94:03:86:25:08:20:2b:11:9a:da:ea:2f:bf:60:68:
52:da:70:d6:e9:9c:2f:b5:ef:4c:99:3d:82:18:14:5c:f4:d5:
4a:fd:12:a7:a4:48:00:26:2d:12:df:2a:65:f7:9e:3f:33:46:
c2:a6:47:93:fa:13:23:7a:67:6f:60:0d:2a:91:51:56:5b:04:
2b:e1:a8:1e:f3:06:a7:19:eb:d6:9b:5f:07:65:28:57:c5:47:
d3:c9:e8:e9:34:07:62:44:3c:11:e0:f5:4e:8e:ea:6d:c8:49:
2b:f3:72:61:24:64:a3:ab:40:c3:e2:e4:6d:d4:5b:36:54:a2:
e0:32:46:b1:c4:c3:ac:98:b9:69:1d:62:86:a2:da:b1:9d:14:
98:23:ac:88:ec:7a:14:d8:83:86:cc:0d:47:e3:d2:17:bc:c8:
d4:72:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:14:31 2026 by rpki-client