Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json)
Hash identifier: fze+xZyXAjqrCL2LBnKiz0boAO8zD3cwlKhrs/H/sTQ=
Subject key identifier: FD:73:29:83:47:CE:A7:5E:42:4A:60:1D:B9:32:CD:94:AB:83:1D:77
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019FA0A8674B7E75CEC765A7E7DE1B86FE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
Manifest number: 0284
Signing time: Sun 26 Jul 2026 23:00:18 +0000
Manifest this update: Sun 26 Jul 2026 23:00:18 +0000
Manifest next update: Mon 27 Jul 2026 23:00:18 +0000
Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: dKIDAwj0C3F5/NodnpyYLUiHfQ3zfW/INis2quGOjzQ=)
2: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (hash: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=)
3: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:67:4b:7e:75:ce:c7:65:a7:e7:de:1b:86:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Jul 26 23:00:18 2026 GMT
Not After : Jul 27 23:00:18 2026 GMT
Subject: CN=fd73298347cea75e424a601db932cd94ab831d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:5a:d6:c4:39:bf:0e:24:3e:7a:a3:2a:bb:
7d:03:cc:ab:94:e0:63:34:46:ab:4e:3d:17:c2:20:
d7:e3:19:6d:e3:f6:c8:af:b8:f2:19:92:d6:c0:28:
22:cc:7b:97:24:9a:da:72:84:84:7d:03:df:b5:b8:
0d:f8:a4:ed:03:d3:74:b7:73:2f:91:f8:ec:ed:5a:
fa:9e:7d:ed:21:6c:b4:39:9f:f1:d5:1f:56:1a:da:
9f:fa:3c:be:67:7f:56:74:51:aa:73:5d:5a:5e:22:
0c:bf:91:4d:08:fd:a2:29:cc:13:1a:63:14:63:7c:
e9:2b:51:92:0d:ed:b2:09:69:84:62:d6:cb:10:2d:
5d:c0:93:58:d1:54:ec:8c:96:60:01:f3:6f:a3:64:
a2:f9:ec:b2:ee:17:01:48:04:e3:78:d8:c4:8a:cb:
ac:21:10:31:b1:a2:a3:05:db:ad:70:33:10:ef:2f:
c5:3e:fe:ab:f9:3e:05:d2:b9:35:f0:7f:b1:21:93:
b2:ce:3e:65:d0:fd:5b:3d:0e:ed:3a:a4:e7:61:2f:
a9:95:e6:aa:a5:6d:94:28:bf:2d:42:e2:dc:67:84:
d8:2d:0a:f1:6c:d8:39:ca:fe:94:14:c7:74:36:e5:
5e:60:2b:4e:1d:9d:9c:eb:61:02:d8:43:5d:51:68:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:29:83:47:CE:A7:5E:42:4A:60:1D:B9:32:CD:94:AB:83:1D:77
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cb:f7:a4:9f:e0:5b:00:a7:f1:ca:f8:2c:08:16:53:b9:b4:
e6:31:32:4a:62:ac:d9:23:16:84:c4:f3:f0:9d:06:ce:6e:e2:
f5:63:9d:4a:d8:b9:c3:f9:1d:7d:1d:5d:0f:41:f7:c7:c7:aa:
fd:7e:b1:91:11:af:18:09:d7:51:7f:3d:b3:f8:a8:d9:99:8b:
7d:18:50:f3:2b:d3:79:ef:a9:99:10:a3:e6:f0:33:46:8b:36:
29:28:2f:fe:ac:20:c3:28:a4:1d:2c:79:55:2e:31:24:99:90:
f7:08:ef:56:15:36:0a:2e:fd:3e:5f:68:0b:ad:2b:c5:bb:21:
12:a6:63:05:8e:d5:04:b7:61:e0:33:dc:cc:53:de:3f:07:b5:
e8:1b:06:d7:7f:9e:64:32:d3:19:97:73:c3:78:80:74:72:32:
f6:2a:63:e4:ce:83:7f:b0:eb:0a:9c:45:fe:ee:00:85:c6:16:
cd:be:e8:47:8c:bd:2b:f2:6e:9f:0d:5c:db:90:7b:12:88:0b:
ec:57:d7:2c:4f:f0:aa:39:a8:e9:d6:ea:4b:68:7c:cd:a6:fd:
c2:9a:eb:f0:c6:18:29:99:f0:54:f6:12:35:9a:55:92:6d:93:
19:3f:9e:c0:d0:83:2b:de:94:d6:e2:09:01:8b:9c:94:a3:b0:
a8:fd:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:03 2026 by rpki-client