Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: vhZme/O/mLMVJqPk3ifRUEVptZ7DDeJ6gqqNRrsd0KA=
Subject key identifier: 9D:1B:49:68:08:C7:1A:11:83:97:1F:EF:C2:32:85:E1:AD:74:C3:81
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019F3B61B31BBC54EDDD4733BBA6460B020B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 19A2
Signing time: Tue 07 Jul 2026 07:01:26 +0000
Manifest this update: Tue 07 Jul 2026 07:01:26 +0000
Manifest next update: Wed 08 Jul 2026 07:01:26 +0000
Files and hashes: 1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: uk4e8GDXnUNG88PYaPLQxFn0HbxU++eDAK8U9xPLlgw=)
4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:61:b3:1b:bc:54:ed:dd:47:33:bb:a6:46:0b:02:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jul 7 07:01:26 2026 GMT
Not After : Jul 8 07:01:26 2026 GMT
Subject: CN=9d1b496808c71a1183971fefc23285e1ad74c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:80:69:9c:8b:e6:aa:3d:fc:fe:5a:fd:8f:
15:4f:8e:a0:54:c8:11:33:fa:c4:c6:a6:0e:6e:9b:
cb:3b:16:35:29:f1:6b:30:72:db:3e:40:73:6c:34:
b0:2c:1d:e4:88:4e:da:24:d1:5f:f1:dc:de:d1:82:
76:c4:96:e8:10:a9:72:d7:d2:15:98:1d:34:e3:20:
25:81:f1:21:2c:0f:b8:ab:d5:b6:43:18:17:52:af:
6e:2d:9d:45:cf:74:63:ee:08:fb:ca:1e:91:c2:37:
92:bd:69:00:39:5c:1f:28:31:f5:8a:66:1b:8c:98:
c0:34:26:49:88:f8:68:05:f0:d1:28:36:13:62:f1:
6f:a3:96:fe:3c:17:d2:9c:bc:ad:28:98:b5:9b:99:
d2:e0:5a:8f:44:a3:09:b0:3f:dd:b9:03:fb:0b:ff:
d2:43:ae:a8:be:cc:fe:21:d7:fc:7a:23:0d:ea:c1:
83:c5:70:6c:c1:96:02:5d:f5:80:84:c8:34:db:d2:
b8:e2:70:c2:61:ac:41:a1:5e:94:fc:ae:6f:93:f4:
06:21:0e:44:ec:7e:03:a1:23:87:33:75:b3:cd:96:
5a:c9:d2:ba:4e:e1:eb:14:71:5d:f3:f2:f0:88:d1:
b4:8a:6f:f5:b7:8b:cd:fc:b5:0a:84:b8:c0:68:a8:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:49:68:08:C7:1A:11:83:97:1F:EF:C2:32:85:E1:AD:74:C3:81
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:03:3d:cd:09:48:12:08:e8:dd:5f:e5:d0:6e:1d:9d:7a:8f:
87:4d:40:cc:d4:2f:c8:f7:6e:6a:e1:0a:3d:75:8d:66:58:13:
0d:5f:68:e0:c4:e3:68:43:1d:22:46:f6:92:ed:ed:70:c9:20:
00:6e:25:9f:3b:37:6b:ec:98:ae:cd:e9:97:39:7c:fc:c3:2b:
e4:3c:a6:bb:4b:19:7a:ea:71:5c:1b:3b:a6:34:57:eb:ad:17:
47:75:26:5a:42:1d:2f:d0:1c:5c:88:15:88:c9:74:01:94:32:
3b:15:9a:42:67:c8:84:e2:5c:8d:db:9c:b3:2f:66:19:3b:de:
69:75:8a:d5:31:a5:fb:08:7a:16:85:cc:2e:93:ae:ba:5e:83:
b7:b2:45:e4:09:69:f1:5a:d7:78:48:dd:1e:46:54:32:b9:77:
4c:bf:39:89:53:b9:98:d6:61:53:be:62:01:8d:a8:44:8e:15:
48:57:29:32:67:66:b1:ad:30:6a:55:0c:60:bd:28:f4:44:d9:
8e:d5:2f:80:33:a7:88:3f:64:68:2f:01:c2:1d:6b:10:53:b2:
4e:9a:42:1f:d4:09:b8:1b:c3:70:1c:68:93:2c:d5:64:be:22:
94:42:59:95:e5:11:d4:64:51:36:ba:66:fb:40:30:17:01:1a:
f0:c8:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:51 2026 by rpki-client