Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: T3d8vPcI9ptOZReYUGMLZmV44cFcfQ5GBqcX20rVLbo=
Subject key identifier: 5F:05:99:8E:41:02:B8:0B:CE:DC:80:2C:97:A1:BA:FB:4A:B4:AA:62
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019F197A35692AC66E12483E2DAEEC9A095E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 17:01:07 +0000
Manifest this update: Tue 30 Jun 2026 17:01:07 +0000
Manifest next update: Wed 01 Jul 2026 17:01:07 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: 8qdx02lfkUX5/H3A8CccXvKIIVVt6DIFt44szRHIYqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:35:69:2a:c6:6e:12:48:3e:2d:ae:ec:9a:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Jun 30 17:01:07 2026 GMT
Not After : Jul 1 17:01:07 2026 GMT
Subject: CN=5f05998e4102b80bcedc802c97a1bafb4ab4aa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:01:d0:0c:ee:38:cc:24:74:a2:f3:53:03:
80:49:d5:8c:92:55:d3:18:9a:4b:da:c3:3d:32:ba:
32:1b:10:1f:29:c7:53:d8:bf:d7:17:6f:6d:ac:73:
a6:51:3d:28:83:bc:8c:0c:ad:67:1b:2a:90:e6:4a:
af:a3:29:27:af:bf:68:ca:ad:42:ef:8f:a9:e1:54:
54:a7:d6:64:f5:3c:46:45:e4:90:54:b3:a0:0a:d8:
85:58:e8:88:d4:f8:3d:c8:1f:fc:94:26:1c:84:04:
ed:e3:38:79:10:cc:df:2a:ac:54:ab:93:ac:ad:6e:
21:c0:46:f1:45:22:17:cc:57:a5:09:5b:8a:a0:50:
df:2d:c9:6a:2d:c3:e4:39:a6:c8:8e:b1:5f:fc:0e:
b3:72:8a:91:d9:ce:de:26:1b:ef:bd:4c:d6:2e:de:
73:80:31:b7:91:64:85:53:ec:46:11:01:6d:3f:af:
9b:ff:b8:3a:0b:18:00:e1:74:c5:57:5a:9b:e4:4b:
cc:a3:d1:ff:18:68:c0:24:ae:e3:6b:ea:24:ca:07:
bf:14:44:57:72:74:c4:a4:a5:f7:5d:2c:33:48:26:
78:43:11:8d:bc:96:0c:30:fa:17:24:af:5c:76:a2:
e6:f5:34:21:cd:b4:0b:cb:31:3a:7d:9b:32:c8:08:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:99:8E:41:02:B8:0B:CE:DC:80:2C:97:A1:BA:FB:4A:B4:AA:62
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3a:36:1a:71:66:61:01:30:50:f6:3f:57:4d:63:8d:fc:54:
f3:5e:d1:67:89:43:7c:d8:73:fa:0f:95:c2:0a:cb:d3:4d:aa:
29:3f:1c:65:27:7e:b0:00:20:cb:32:10:79:67:54:df:d6:7b:
5b:9a:df:af:43:5c:72:22:ba:8b:10:5b:89:6c:a8:06:42:d8:
fa:f5:22:c9:b4:d6:c1:c2:63:d5:3d:42:55:80:13:35:28:38:
4f:59:89:29:d9:66:b1:e8:ec:2c:f3:26:ea:e3:0d:10:be:b6:
24:73:5c:07:b4:8f:3e:0a:79:88:88:ad:c8:12:8b:a0:8c:5b:
6f:94:41:55:c6:01:2f:ae:5c:96:4a:10:84:9e:49:4d:10:3a:
95:c9:f2:15:77:e1:ee:e4:36:27:67:94:4c:3c:ec:af:4e:e1:
11:9c:a4:32:10:e1:4b:36:09:89:12:9b:cb:c8:41:f2:a4:ea:
a5:40:6d:0d:d3:d5:05:fa:92:c5:72:19:2c:c5:04:22:25:06:
f6:12:32:32:8e:49:7c:cf:cd:86:05:20:dd:16:37:34:a1:8b:
dc:a1:a3:bc:a6:47:6c:38:8f:fd:51:c2:9a:fc:c8:c5:9f:da:
07:38:85:85:ff:fb:15:2e:f4:e1:cb:5d:f8:fe:16:a7:e3:5f:
aa:34:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:45 2026 by rpki-client