Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
File: 2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft (raw, json)
Hash identifier: I/9qzFJitAt1712tCzId5wekx1tvWr7Y57jxDLbWu+w=
Subject key identifier: 7F:AA:8C:BF:E2:E2:A4:A3:6E:50:B3:FE:D9:27:76:F6:B9:04:01:23
Authority key identifier: DA:58:EC:DC:42:B8:C8:4F:A1:CA:B9:87:48:EB:40:B0:29:F5:BD:5A
Certificate issuer: /CN=da58ecdc42b8c84fa1cab98748eb40b029f5bd5a
Certificate serial: 019FF97ED8411E311C6165F97600A369E40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
Manifest number: 25
Signing time: Thu 13 Aug 2026 05:01:07 +0000
Manifest this update: Thu 13 Aug 2026 05:01:07 +0000
Manifest next update: Fri 14 Aug 2026 05:01:07 +0000
Files and hashes: 1: 1-tg3HHPldAFMM0LHjAGjj2b5W-Y.roa (hash: QOdgPXJXqMKhICPocmC5X2w4xSms330H0IB/Mg7h87k=)
2: 2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl (hash: Yd0rdwMhRgTOuvavSUONolWkudD71EDpLpcnnLAdCWs=)
3: l5lcoIjetDYRGCSJruAJlUhPhzQ.asa (hash: tCMKgxgZXOFldAg8OQl8wN4J2NAs4qBmgrOqehpXFco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7e:d8:41:1e:31:1c:61:65:f9:76:00:a3:69:e4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da58ecdc42b8c84fa1cab98748eb40b029f5bd5a
Validity
Not Before: Aug 13 05:01:07 2026 GMT
Not After : Aug 14 05:01:07 2026 GMT
Subject: CN=7faa8cbfe2e2a4a36e50b3fed92776f6b9040123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:c7:29:df:9b:df:7b:85:9b:73:35:dd:ca:
22:ad:d5:f6:5f:0f:4b:63:05:6e:76:22:e7:66:4f:
1e:76:c4:1f:01:a0:6a:29:1d:9a:75:6f:d9:3c:9a:
c0:a8:57:32:51:84:db:20:8d:52:d5:56:8d:b6:e4:
b6:78:87:c4:db:1f:87:df:c5:c7:bd:6a:7b:31:1d:
10:bd:3b:e0:18:c6:11:35:cf:2a:4f:8b:a5:55:e4:
80:c3:38:01:58:f1:5f:81:17:97:8a:51:90:b8:af:
e3:b7:3f:e3:7a:05:d7:71:04:4b:30:63:e7:58:e9:
46:3b:ca:d6:99:8f:3f:e8:d6:8f:b9:29:fe:46:03:
e3:60:72:b9:7c:63:03:6d:62:9f:e8:ec:e2:41:de:
bd:6a:cd:28:5b:5e:09:ea:45:e3:18:bc:2d:76:4c:
9d:d6:7f:12:e9:40:2e:51:77:02:f4:a4:6d:87:d3:
11:d7:47:4b:7c:5a:4c:88:f9:21:3a:de:16:04:34:
e3:2c:ce:ad:28:6d:2c:ad:81:d2:26:36:4d:44:06:
1c:cb:e3:06:ef:c6:47:da:7e:23:21:7f:f0:16:86:
51:f2:43:8e:73:5c:0e:29:a3:c7:45:90:56:9a:eb:
86:67:98:58:bd:b7:21:33:6e:27:df:28:25:fd:82:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AA:8C:BF:E2:E2:A4:A3:6E:50:B3:FE:D9:27:76:F6:B9:04:01:23
X509v3 Authority Key Identifier:
keyid:DA:58:EC:DC:42:B8:C8:4F:A1:CA:B9:87:48:EB:40:B0:29:F5:BD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:33:ef:81:6d:84:c6:48:5d:3b:47:7b:fd:d7:0c:ae:7c:
6a:a1:38:43:52:ab:73:be:b2:66:4e:19:9d:f7:d1:07:fd:a0:
ad:b3:04:2c:c7:b6:b4:e2:2e:19:0c:fe:b2:3b:a7:18:9c:9a:
51:de:32:d4:07:bf:72:2f:87:77:67:32:ce:7e:8a:c0:29:66:
3e:7b:7a:19:65:e1:96:95:b0:2e:bb:77:66:29:9c:2e:11:8b:
e0:7e:63:5a:c2:6e:7c:7f:9c:31:e3:81:2f:89:5a:0d:9a:ad:
b0:b5:7c:93:78:7c:40:89:70:45:15:f5:70:32:e0:97:97:ea:
6e:4a:a0:4a:05:a7:f1:4c:cc:7c:49:5c:e5:90:e7:c5:d7:8b:
2c:1e:36:e2:4b:ac:55:9c:60:2e:48:7f:52:26:4a:ed:26:11:
bd:4d:aa:04:80:f5:b7:53:76:43:38:a2:a0:b4:1e:07:3d:94:
3e:b7:3c:4e:8d:f8:db:7f:9e:dd:7f:46:3c:22:a6:a6:4f:a7:
69:6c:41:d2:27:2b:06:cd:2f:2e:f1:81:46:c5:f7:49:c0:6c:
36:67:e8:34:59:76:fb:f1:76:eb:71:44:d7:5c:96:02:72:66:
dc:7e:18:43:a4:36:e2:af:c6:bb:01:9d:bd:0b:b1:9e:24:bb:
a0:53:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:10 2026 by rpki-client