Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json)
Hash identifier: 64XVHbGzL0VrOIddSIcdvje3RtFpYMcdJEAvZDlHqZk=
Subject key identifier: 05:E9:E8:A8:76:10:90:D9:88:48:B7:37:4F:95:3B:BB:D8:76:3D:9A
Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Certificate serial: 019F859F72ACAF490116E9C85AA70DED9107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
Manifest number: 0203
Signing time: Tue 21 Jul 2026 17:00:46 +0000
Manifest this update: Tue 21 Jul 2026 17:00:46 +0000
Manifest next update: Wed 22 Jul 2026 17:00:46 +0000
Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=)
2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: nVBDKrKQCZol8p4EutPC5RfR2nJ54H58nSX0q/8bjxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:72:ac:af:49:01:16:e9:c8:5a:a7:0d:ed:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5
Validity
Not Before: Jul 21 17:00:46 2026 GMT
Not After : Jul 22 17:00:46 2026 GMT
Subject: CN=05e9e8a8761090d98848b7374f953bbbd8763d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:8a:c0:a8:b2:39:44:44:65:f4:1a:bf:a0:
05:83:63:d7:57:de:a1:26:bb:b4:17:a5:95:5f:21:
89:82:cf:84:db:8d:1d:65:6e:59:14:24:e4:d7:67:
e2:45:c3:8d:66:2f:b6:ee:29:f7:ad:d9:00:34:81:
98:38:7a:27:c6:04:92:bc:69:2f:d1:3c:41:18:95:
c3:ab:1f:43:45:ef:ae:bf:e2:8d:ef:0e:38:51:12:
d6:d9:ed:3b:44:c1:17:cd:81:09:87:39:a4:36:58:
25:bc:d6:63:15:88:8a:f0:18:26:c2:66:61:7c:0d:
b7:20:ac:20:ad:56:97:a2:86:27:69:d4:7b:a5:75:
3c:1c:6e:31:e7:10:1e:5d:80:cc:20:e3:b1:ad:6d:
03:81:b7:be:71:df:4b:d8:ea:1d:bb:56:54:44:9a:
bb:f4:48:db:22:4d:c0:25:d6:70:c2:e5:1e:0b:4a:
95:9f:9e:dc:69:7d:2e:d9:3d:b9:d7:85:17:43:96:
5d:e7:04:74:37:33:d1:24:ab:42:f2:d7:24:28:7e:
ca:bd:57:9f:27:39:b2:7e:bd:ee:bb:9d:88:12:e7:
64:c0:16:29:f4:2c:5c:b7:c8:9d:82:59:d8:e9:c2:
8c:ba:9d:f6:8d:35:63:e4:22:b2:63:7d:fa:1b:4e:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:E8:A8:76:10:90:D9:88:48:B7:37:4F:95:3B:BB:D8:76:3D:9A
X509v3 Authority Key Identifier:
keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:05:6d:46:c4:04:d6:6c:d3:fd:91:cf:30:17:76:dd:a6:1c:
85:b1:ad:0d:9f:f4:34:a1:77:f8:88:c1:a2:4a:eb:90:f2:37:
4d:55:81:94:3b:2e:4b:c4:c4:93:56:96:44:d0:f7:dc:5d:e6:
9f:18:16:e3:bc:5e:c0:9d:9a:66:8a:2d:30:ba:48:5f:56:91:
25:f4:eb:c4:47:cb:f4:12:59:5e:41:92:c6:f2:7a:10:ae:40:
61:f8:a2:50:e5:de:73:91:9f:66:23:fe:e7:c7:14:ba:98:23:
a8:b7:f1:85:4e:40:e1:f0:10:f5:ed:5f:1b:d6:c1:4b:99:3d:
ca:61:49:bf:c1:5e:c0:d9:7a:48:f8:35:5b:31:84:b2:47:5b:
fe:8a:4e:48:72:bb:37:22:85:13:02:6b:27:6b:0e:78:51:92:
c7:8f:f8:d2:b3:ef:c0:c8:65:58:3d:46:d3:81:ef:3c:e5:44:
15:3c:d6:e8:70:9c:8d:cc:4e:df:10:c8:a2:76:a5:be:8b:35:
f2:60:fa:09:56:a4:51:d1:d2:fb:9c:4c:6e:99:a0:fa:7d:02:
d2:3c:67:1a:ad:44:af:9a:74:5e:42:bd:c8:42:e0:4f:8d:60:
24:24:8e:be:f4:99:e1:b4:d0:88:82:5e:59:26:15:79:b2:07:
83:f2:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:43 2026 by rpki-client