Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: t3y0qO9h/j0s5W2fEW0Qn0zpCZ33YwAAvZHKsG0ywGQ=
Subject key identifier: 0F:EE:99:36:76:3A:CB:40:BA:BB:94:EA:6E:08:4E:F0:A7:F1:AF:A2
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019F378507C08F43FFB9350FF3D5BBA6DF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0A0A
Signing time: Mon 06 Jul 2026 13:01:32 +0000
Manifest this update: Mon 06 Jul 2026 13:01:32 +0000
Manifest next update: Tue 07 Jul 2026 13:01:32 +0000
Files and hashes: 1: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (hash: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o=)
2: ew71Dr2hxhH6I9_RZhH0lsluIig.roa (hash: 0cm9urifI/2Uh0AOprLssITUSaMSxFAaeqTRzg9iNI0=)
3: jCJ22Fdf8SnbI8DcZqU35nF2Zew.roa (hash: JVckqbft6dBMO2AzO5LhlxSJUFnZrQ2XDuU3MVU82uA=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: IYG3Yw9y8PMV8bE7mrEGmKOZyeIZmtb93Z47wKfMsD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:85:07:c0:8f:43:ff:b9:35:0f:f3:d5:bb:a6:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jul 6 13:01:32 2026 GMT
Not After : Jul 7 13:01:32 2026 GMT
Subject: CN=0fee9936763acb40babb94ea6e084ef0a7f1afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:7e:53:d7:d9:03:01:06:41:63:45:7c:c0:
c8:6a:8b:92:67:63:ef:19:5d:53:cb:ff:9a:e0:58:
42:43:c7:e2:6b:f2:26:b5:92:85:48:f6:cc:d6:47:
d4:e3:08:2d:4e:6b:ad:19:82:cf:c3:9c:13:e4:89:
60:11:4d:68:ac:50:da:e8:7b:78:37:b8:09:5f:16:
40:e2:c7:9a:fc:6f:18:22:d1:66:8f:75:5d:a4:ee:
1a:05:eb:6c:12:f1:d2:f5:06:ef:46:97:d2:f9:2f:
91:41:4b:56:a5:86:91:4f:56:68:44:67:8f:2d:3d:
43:75:c4:00:ba:53:80:43:48:fb:64:00:47:d7:14:
05:4f:b2:7a:65:f5:2f:2d:e1:dc:9a:6b:3a:41:ab:
6f:08:4e:66:ac:ba:17:f0:4c:77:c9:c3:f2:c1:58:
a0:47:1f:6d:41:26:ef:65:c2:83:d9:2c:54:c6:3c:
3e:03:95:e4:0d:8f:47:76:08:7d:30:cd:d8:cf:c3:
35:e3:68:93:f8:27:00:ef:6d:89:eb:20:64:de:f4:
7a:b8:53:9a:ff:9d:0b:99:32:d7:07:91:32:d0:0c:
d6:1d:c7:9f:b2:6f:b0:4c:28:37:6f:ab:17:0a:8f:
69:e9:bb:ab:3a:50:ff:9b:96:35:b4:90:bc:ab:27:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EE:99:36:76:3A:CB:40:BA:BB:94:EA:6E:08:4E:F0:A7:F1:AF:A2
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0a:6b:e8:ff:0f:85:7f:be:96:63:02:ee:2d:69:c6:be:c4:
cf:aa:3f:fe:fc:f5:e8:48:b6:44:be:bd:d4:fa:8b:15:74:e9:
43:6f:a2:57:61:86:e4:ee:3f:02:f2:d7:7f:22:ff:12:f1:c1:
32:95:84:a2:6f:1b:ec:b0:76:d1:97:da:c7:be:88:1a:13:7d:
c1:9e:3c:43:c0:68:c1:95:62:5d:97:64:ae:4b:c7:d8:be:24:
f5:99:63:d2:1a:1c:bd:60:6e:90:c9:3b:87:69:49:59:b1:7e:
a5:e7:5b:93:68:7d:a4:ac:fe:83:a2:5f:67:f9:9c:04:24:e7:
a3:e2:5e:98:4f:99:73:10:27:4d:75:71:1f:2d:76:ba:2f:b6:
4b:03:db:6e:a8:54:83:7e:09:53:12:43:bc:53:72:17:21:7c:
1e:71:2d:3e:ca:a9:bb:1d:96:14:f2:00:6b:25:46:76:3b:67:
ba:7b:8d:eb:4b:29:99:72:a9:58:15:77:97:b5:0a:45:5a:2c:
41:b9:a4:e3:cc:47:3d:9e:3d:84:a5:e5:cd:62:e9:4e:5d:7a:
3e:45:12:d7:69:9f:d9:93:5b:e0:02:b1:59:73:2e:e1:e7:df:
71:d9:81:65:5f:2c:a7:fc:92:7a:f8:f6:17:f4:d1:b4:bf:e2:
c2:3a:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:23:52 2026 by rpki-client