Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: JDXcB8uHaKCn2GXXyCjfSzdEVDG0sElb4W/rYJejrMw=
Subject key identifier: 2F:B0:1C:BA:04:C3:6E:F5:0E:CA:0C:D6:6F:EC:07:34:40:58:44:14
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 019FA417A21C2AE8DD270EF3B6527D603306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 17D7
Signing time: Mon 27 Jul 2026 15:00:39 +0000
Manifest this update: Mon 27 Jul 2026 15:00:39 +0000
Manifest next update: Tue 28 Jul 2026 15:00:39 +0000
Files and hashes: 1: SlreLJKQ_DkqduATGqA6lqJDbOk.roa (hash: wESW+iKwV026/S9NWzhgpiTlKH/IB4iP5UQlySv5rfs=)
2: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: T3A3SRDKDDh5QiKCqN0xtnBPGj8iumGDX8MKW4UvhNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:a2:1c:2a:e8:dd:27:0e:f3:b6:52:7d:60:33:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jul 27 15:00:39 2026 GMT
Not After : Jul 28 15:00:39 2026 GMT
Subject: CN=2fb01cba04c36ef50eca0cd66fec073440584414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:13:a5:2b:f9:d7:78:e4:e0:0f:fa:91:de:
7a:71:58:8b:70:73:50:a5:34:57:1c:d1:a1:4e:63:
2e:c5:d8:ad:af:45:3b:45:b5:71:cd:da:35:46:71:
c3:2d:0e:10:b9:76:5d:5c:fc:30:87:fb:bd:78:5f:
e0:c0:3d:55:a6:79:dc:cd:a8:7c:be:90:0c:9c:3f:
1e:c1:96:00:cd:2f:b4:ec:ce:cb:43:be:f2:71:1e:
b3:8c:08:be:04:43:9e:0b:a7:63:b4:8e:2b:87:9b:
dc:2c:87:56:3e:33:33:ab:36:92:b5:4c:2f:ab:23:
30:fa:0d:71:9b:23:8a:a5:cf:35:b4:a4:bb:a5:1f:
69:63:7b:c9:2a:26:89:d3:d5:2b:19:f6:c2:79:9b:
27:3f:5b:c1:a0:8a:52:b6:2a:85:16:25:7b:11:00:
45:1f:40:ab:b5:71:81:ad:52:36:df:55:91:df:fe:
b6:0c:3a:fc:c6:45:f4:fd:cb:c8:cb:d8:7e:bf:96:
0d:4e:20:c9:6b:e2:8a:05:5a:a1:d0:b3:75:ba:2e:
4e:44:fb:27:70:ec:c4:59:f2:cb:2b:14:02:5e:23:
a9:22:cf:ff:09:a6:87:c0:37:dc:7d:62:4e:d0:17:
74:09:bd:1d:1f:c8:cd:da:67:05:41:93:9e:0e:3e:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B0:1C:BA:04:C3:6E:F5:0E:CA:0C:D6:6F:EC:07:34:40:58:44:14
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:92:3f:04:e7:99:3a:c5:8d:9f:94:c5:86:33:22:b9:78:f8:
59:d5:09:15:c1:08:1f:a2:c3:ef:b6:da:61:c3:7a:49:8e:e2:
f0:b9:e2:dc:bb:3b:dc:d3:a9:b9:cc:0b:7e:6d:80:7b:59:43:
55:d9:09:49:f5:83:1a:53:9a:03:8c:8e:9e:25:e9:ef:aa:b1:
18:24:4d:00:c8:37:64:e9:6c:69:d9:f5:93:92:cf:58:bd:74:
2e:c6:c0:22:6c:97:1a:cc:3c:7d:57:86:32:41:da:50:9e:f6:
27:f1:7c:52:dc:da:8b:b9:9e:ea:1b:5f:bb:ae:33:f5:d9:c4:
54:75:ff:4a:ba:5e:b6:b2:41:65:88:4b:4d:65:8a:61:8e:76:
b4:37:61:b2:cd:df:97:04:da:da:e6:87:1a:93:5f:97:57:0f:
45:e6:41:dd:5f:88:eb:2f:f2:99:7b:0b:20:d2:01:8a:a8:c4:
00:18:cd:ab:89:54:d8:27:1a:a1:f0:57:34:05:33:21:bb:d4:
1d:97:36:96:5b:54:e4:d1:17:30:dc:bf:24:a5:e5:57:fb:a8:
63:ff:04:80:5a:93:60:13:1b:ee:5b:c1:90:8a:9a:90:37:6c:
40:67:42:88:cd:f5:a1:83:34:0f:1e:8e:43:22:51:f7:6f:73:
fd:88:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:25:06 2026 by rpki-client