Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: kPzNS4CJIVrSbvoXdQtzgP1oTHk2UIX9NORsk5DWbPw=
Subject key identifier: 31:02:E1:86:25:AF:FE:15:01:0D:DD:E8:59:36:B0:C6:2A:9B:2A:CB
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 01A001DD61910F20ED9D1D3CD9EB5FA86AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 20:01:20 +0000
Manifest this update: Fri 14 Aug 2026 20:01:20 +0000
Manifest next update: Sat 15 Aug 2026 20:01:20 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: pMFCmlQnho3Ks7rHK0E/gJPD8QczQfc50ZfU03qaphc=)
2: YgBe7NidCuhBJDoY20do8_9nElw.roa (hash: ecBnWEQVtbA0KAJWO5J4k2Zn61yGu2c/SabXyONIBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:61:91:0f:20:ed:9d:1d:3c:d9:eb:5f:a8:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Aug 14 20:01:20 2026 GMT
Not After : Aug 15 20:01:20 2026 GMT
Subject: CN=3102e18625affe15010ddde85936b0c62a9b2acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:96:e5:c4:60:cc:8c:81:fc:78:50:cb:5f:
70:77:8d:24:47:f8:5d:46:81:e8:61:6c:36:28:a5:
46:01:29:0f:ac:93:68:f1:21:f3:9e:fa:0c:d7:5c:
8e:2b:ef:41:d5:d3:9a:21:73:e6:37:4c:5d:2a:76:
a0:ef:a8:83:27:e2:4d:35:ab:4f:78:0c:b7:eb:40:
54:62:f7:da:7b:14:22:ea:4c:e5:09:a8:7b:d0:b5:
f3:91:10:bf:40:3e:c1:08:37:eb:dd:89:1e:33:48:
fd:3d:c6:80:39:97:ad:ff:ba:72:b1:d3:a1:19:f7:
5a:94:f3:ff:f5:b7:1a:91:0a:a0:4b:c9:b7:70:10:
b8:40:4a:62:00:b9:d9:bb:ea:a2:96:10:c3:81:0b:
e8:af:b6:ca:2d:7a:c1:ed:d6:fd:ad:ea:a2:41:27:
4d:2a:57:51:35:28:51:a7:72:52:3f:c3:98:21:c6:
a4:a4:d9:1b:80:89:65:b2:71:f4:be:2f:0a:45:e5:
ea:c7:44:45:9f:e2:88:81:2e:40:5d:4f:bd:cd:a2:
26:46:8e:ca:41:db:11:b7:46:01:7d:26:e9:ca:6b:
bb:a1:e7:95:4f:1e:75:f6:f4:19:8d:ac:9d:fd:a3:
3d:99:1d:ab:79:e2:49:8e:7e:22:b0:27:f9:65:16:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:E1:86:25:AF:FE:15:01:0D:DD:E8:59:36:B0:C6:2A:9B:2A:CB
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d1:dc:fa:e4:cc:6e:6a:bc:23:8b:13:ac:f5:17:46:87:4b:
92:69:e0:9d:7f:88:6f:15:79:97:e8:00:26:57:c2:8b:61:ab:
d1:11:b5:f0:72:42:f0:b6:fc:1a:a9:b2:38:0c:a2:06:c9:06:
fb:10:ae:7d:e1:91:69:4e:2e:45:b1:2e:c8:61:32:40:61:96:
a9:af:08:19:2e:0e:d6:ca:86:d6:e8:32:07:89:3b:2c:3d:ce:
81:be:81:86:ee:ec:74:a6:74:28:dd:ba:7e:aa:1c:8b:e0:e0:
6c:a0:f9:34:f4:09:80:46:bd:e5:6b:af:b5:a9:54:9b:66:18:
fc:1f:82:19:f6:41:dc:43:c4:79:8e:6c:97:fe:36:bc:50:4d:
34:0d:e9:e5:29:95:fa:4d:74:3d:38:66:af:c2:9c:f0:b3:d9:
e0:1d:b7:08:69:0a:02:25:26:6e:7c:6b:36:ba:36:fa:34:93:
f0:e7:29:a5:ce:45:4f:f7:15:b7:a7:3c:2a:45:a3:db:1f:ce:
f6:ff:23:25:af:cd:8a:b7:4c:38:aa:d6:fc:66:f5:b0:f7:95:
81:7a:43:2b:bd:a2:7a:7b:fd:4e:c3:a8:2b:4d:57:17:29:10:
42:1a:9b:85:b0:74:4a:f1:d3:b0:0e:87:ee:5c:d2:22:ff:f2:
75:82:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:35 2026 by rpki-client