Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: c2cFZoEAS41Iri4C9cCIQK5HfMVmqFI4Obc0sylBEas=
Subject key identifier: D8:9C:B3:08:3F:AF:E6:93:57:F7:46:69:FA:4B:31:83:D0:9D:C7:E3
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019F17F9A675FF8CAB3D5DCC6D44A1E9E2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0F79
Signing time: Tue 30 Jun 2026 10:01:04 +0000
Manifest this update: Tue 30 Jun 2026 10:01:04 +0000
Manifest next update: Wed 01 Jul 2026 10:01:04 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: 3il/PqI9WihR8uBa8T4fNGLeu1SpJgRlmKCD8nf9mcY=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:a6:75:ff:8c:ab:3d:5d:cc:6d:44:a1:e9:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jun 30 10:01:04 2026 GMT
Not After : Jul 1 10:01:04 2026 GMT
Subject: CN=d89cb3083fafe69357f74669fa4b3183d09dc7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:58:7f:bc:d3:96:5f:74:5d:01:26:0c:24:
36:7b:f6:55:be:e7:dd:ea:a7:f2:c4:f3:4e:c2:59:
aa:67:40:58:05:73:69:fa:6a:e1:72:9e:30:8f:69:
20:6e:5e:d0:87:3b:90:fb:ef:52:9a:db:8e:fc:42:
98:02:cb:af:1b:8a:3f:59:1f:f9:b6:7f:cb:cf:ff:
57:92:7f:0d:07:d0:6d:39:39:56:c1:da:ae:54:22:
64:f5:b4:37:13:c3:b8:34:0e:9c:ea:ba:9b:e7:bb:
87:5a:da:f0:1a:d8:98:ef:7c:1b:a6:ac:40:8b:35:
75:dc:64:5e:35:20:6c:40:46:d9:c1:7a:a0:c9:6e:
8c:96:7f:d9:d3:d4:26:2b:c5:52:1a:ba:3b:f5:4f:
30:03:eb:9f:42:62:4f:48:0f:a6:f2:39:7a:a2:58:
8f:dd:ca:3b:38:da:65:aa:3a:98:2f:c9:40:ac:37:
9a:72:3c:97:81:ad:be:4e:f4:c4:d4:8d:37:eb:bb:
0a:3f:4b:47:ad:d0:73:28:b5:e1:93:0a:f2:eb:55:
5f:23:6b:1c:95:ac:f9:79:99:48:7a:55:a9:85:e3:
ea:e4:a8:f9:ba:05:65:df:84:ae:fd:82:41:b5:5f:
fa:87:d0:76:d1:24:5b:db:49:69:33:79:aa:94:14:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:B3:08:3F:AF:E6:93:57:F7:46:69:FA:4B:31:83:D0:9D:C7:E3
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:83:92:17:bb:fd:e6:dc:91:8c:4d:00:b9:e1:65:00:43:9e:
30:78:93:02:84:03:0e:14:b7:51:c3:7b:99:4d:a7:b5:56:4b:
60:ec:c0:cc:5d:9f:d3:22:6b:83:01:42:f6:15:e6:56:bc:ca:
73:2c:cb:52:84:2d:67:e2:ec:f7:2b:f4:3f:64:ef:d5:c1:b0:
41:47:dd:19:f2:85:4e:79:b5:75:3c:96:4b:44:1a:44:8b:50:
9c:cb:f0:35:30:e7:e1:75:23:a0:16:22:6c:35:6b:9f:2b:fe:
45:1e:2e:d2:7d:f7:a1:7f:48:56:91:d8:c0:4b:9a:c3:cc:43:
c7:db:03:99:46:29:a4:64:ab:ae:d4:48:c4:d3:90:66:2a:f5:
3d:1c:a6:55:6d:31:97:b9:58:f0:f4:fe:f1:4c:66:03:f5:9e:
e7:60:5d:e4:cd:e3:98:2c:9d:da:16:1e:dd:14:ca:3e:25:1c:
5c:32:cf:74:f4:63:95:9e:ed:47:c7:18:70:a5:cd:4d:a4:7d:
e5:b6:8e:fd:d9:26:20:31:45:3e:73:47:53:7d:7a:5b:10:62:
29:2c:b8:cc:1c:ab:51:ca:59:0c:9c:c3:30:fd:40:b7:53:db:
f3:b8:94:94:63:52:96:87:64:0e:87:a9:f7:5a:f9:6e:02:bf:
81:98:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:30 2026 by rpki-client