Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
File: Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json)
Hash identifier: hObkLuJiJTluX+7b3tKdrsSUVRFPC6xMFgA98tTnNVw=
Subject key identifier: B2:03:D6:42:64:43:CD:B7:F2:9F:17:96:A3:22:13:8F:2A:F9:4E:B5
Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990
Certificate serial: 019F6539B44BBD8D43BE67ABF47AB5D7B0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
Manifest number: 02A7
Signing time: Wed 15 Jul 2026 10:01:48 +0000
Manifest this update: Wed 15 Jul 2026 10:01:48 +0000
Manifest next update: Thu 16 Jul 2026 10:01:48 +0000
Files and hashes: 1: DUhtAD3_xxy9gOvcTDplBUTPnms.roa (hash: v0tLLjc7rS1SBtzsfai4mMe4+DHfyEXAvDNb2xkmOp4=)
2: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: fs8eSQjisHTaat1N2UYqoLkXZFQl03sbELT41crQvHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:39:b4:4b:bd:8d:43:be:67:ab:f4:7a:b5:d7:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990
Validity
Not Before: Jul 15 10:01:48 2026 GMT
Not After : Jul 16 10:01:48 2026 GMT
Subject: CN=b203d6426443cdb7f29f1796a322138f2af94eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:61:a1:e2:7d:db:38:7f:f4:94:c1:a9:8c:
05:ee:b7:78:4e:3f:df:88:0c:e6:61:74:7b:69:28:
d6:0a:7c:7a:9e:25:f1:f9:0b:9d:25:a9:da:16:22:
90:11:a7:33:26:bb:b9:0b:b7:16:fd:07:28:e1:c7:
82:a2:1e:fc:f5:0e:cf:e8:c8:33:22:16:17:78:6b:
a3:d9:c7:9c:2e:84:83:c4:94:b2:2a:96:54:08:16:
90:ec:1b:6d:26:84:8a:ef:70:2a:94:3b:fb:9a:99:
be:c0:db:09:80:cd:5e:01:c6:9c:81:29:91:ba:15:
60:98:3d:e3:52:9a:1c:52:ee:6a:13:c1:e5:cf:e6:
85:f1:a8:d8:c7:c1:bc:7d:c4:e4:42:50:43:a2:f4:
f5:5f:49:65:5c:97:f5:e0:e5:a0:40:11:69:cc:19:
c6:4e:9d:01:93:e0:5d:81:e3:91:e2:be:df:4f:1f:
2c:b3:50:26:88:38:47:95:b5:8a:cf:81:0a:d0:64:
09:59:23:a1:02:9f:91:e3:a8:0c:0b:4c:cd:d2:23:
d2:4d:6e:5c:e1:69:fd:ea:d5:49:d0:c4:36:e2:2e:
9b:6a:30:1b:41:d2:4d:c7:21:54:21:f4:28:53:6d:
2b:96:aa:98:14:a0:31:6c:b2:d2:55:8d:22:7b:e3:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:D6:42:64:43:CD:B7:F2:9F:17:96:A3:22:13:8F:2A:F9:4E:B5
X509v3 Authority Key Identifier:
keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:cc:50:43:d0:5c:d1:9e:36:18:74:62:80:96:e7:31:dd:
45:fc:b9:7f:c9:31:ef:f0:5a:22:0e:5e:6f:27:15:53:bd:9f:
62:84:17:53:39:3e:5c:a1:ae:42:a2:85:25:c4:91:f9:59:9d:
41:fd:f7:75:37:ae:2c:71:4f:6d:30:97:6d:a1:c1:86:aa:a4:
c3:69:31:1f:1e:f5:90:6d:83:47:a3:6d:19:f6:23:82:8f:26:
6f:81:58:6e:ef:c4:2e:d9:01:34:a4:02:5b:8a:17:a6:44:26:
2e:d6:ba:c9:08:30:90:75:c0:4b:04:01:5c:61:12:dc:28:09:
72:77:8c:e9:e7:72:6e:fc:0c:a7:54:fc:d5:d3:55:36:59:3e:
fa:34:87:a2:af:72:0e:fa:06:e7:de:19:ba:9f:0f:7e:3b:0d:
c9:1e:73:3a:8a:42:51:22:56:1c:70:70:49:a3:04:b0:5f:bf:
b9:1e:08:2a:08:08:b4:2e:98:09:a5:a8:cf:c5:86:06:f2:93:
28:a8:95:2c:3f:3a:cf:da:eb:bb:49:f4:ea:fa:20:97:5b:0a:
b3:a5:1a:7f:f1:b1:f5:eb:20:62:d8:9d:47:ea:ee:84:95:5b:
ab:25:87:23:3e:03:29:38:07:28:fe:de:6a:86:3a:1e:a0:fd:
d5:1b:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:31:09 2026 by rpki-client