Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: Q/0BpTWP0dnaKK/5Z/f+IiHOY+P5UOF8e6kRuI6bLc8=
Subject key identifier: 4B:30:4F:4C:5E:59:B3:F1:C4:B2:12:A1:A4:5F:AC:FC:75:6C:AC:97
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019EF3B66B33C233BFEC39921081B6006C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0CF8
Signing time: Tue 23 Jun 2026 09:01:18 +0000
Manifest this update: Tue 23 Jun 2026 09:01:18 +0000
Manifest next update: Wed 24 Jun 2026 09:01:18 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: HYe/98zvdNGorzBa8wBKrLW5zBO+EKahLlCNwgz6umI=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:b6:6b:33:c2:33:bf:ec:39:92:10:81:b6:00:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Jun 23 09:01:18 2026 GMT
Not After : Jun 24 09:01:18 2026 GMT
Subject: CN=4b304f4c5e59b3f1c4b212a1a45facfc756cac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:44:0b:9f:19:3f:78:70:aa:86:3d:38:fd:
a8:72:cb:28:35:a4:ea:93:b2:2f:6d:c5:6a:be:cc:
e0:de:f5:2b:ae:0f:03:9d:60:03:2a:f9:44:b5:68:
4f:3a:87:0d:cc:91:3a:cf:fc:21:20:7f:6a:c1:8a:
e0:d7:75:cd:46:28:74:6c:b7:f3:de:b6:71:d1:6d:
20:aa:fc:bb:a4:a9:9b:27:66:16:cf:54:61:2c:ed:
b4:58:17:f5:4c:56:87:27:35:4e:94:6e:1b:83:4e:
26:b8:e4:51:e2:eb:c2:9c:75:68:32:25:5b:e6:c5:
1c:75:5b:87:78:21:0b:9e:bf:86:01:08:14:54:5a:
fe:54:79:8d:ef:58:02:6d:9b:b6:ee:31:71:94:95:
cc:93:83:af:c4:ae:3a:d2:0e:8d:1c:a7:50:9c:89:
7e:c4:d8:7e:08:d3:58:3d:fe:6c:20:98:9a:97:2d:
91:6c:9d:6e:22:e0:b5:4c:58:b3:4c:90:48:74:a8:
b6:5d:9d:3c:0c:3b:b2:53:55:70:42:16:da:24:9b:
57:39:b3:c6:57:98:51:6e:1c:99:a5:6e:a9:ca:f0:
d0:cb:d7:db:e5:14:a1:8d:dc:c1:a5:0e:ac:74:cb:
68:eb:3b:ab:f1:40:27:17:a2:74:9d:f2:b6:c5:5f:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:4F:4C:5E:59:B3:F1:C4:B2:12:A1:A4:5F:AC:FC:75:6C:AC:97
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:48:c7:24:79:d7:58:49:31:f7:e5:5b:8c:9c:5a:c7:92:
48:8f:12:8a:b1:f9:8f:a4:cf:11:82:89:46:77:1c:c6:9f:f5:
5f:4c:bc:52:45:cc:54:89:f8:9c:d0:68:4c:e9:06:18:2c:02:
9a:b5:51:74:68:99:bb:42:a5:92:05:bb:f9:7e:d6:9d:14:96:
f3:31:eb:c3:a0:39:3f:67:b7:97:c2:d2:73:a9:b0:77:53:88:
1f:e2:30:96:56:c7:1c:7f:d2:67:52:94:4f:97:46:e6:d8:d0:
65:34:01:96:a9:ce:b4:13:b0:f6:98:24:63:74:b2:19:77:8e:
26:36:90:05:eb:1e:93:9a:e5:a3:46:8f:1c:d4:93:a7:b8:7d:
53:e2:30:b0:71:e8:de:0b:81:a1:47:f3:d9:ed:a3:d9:3e:27:
0f:8c:37:1d:67:c9:a0:c3:25:5d:10:2b:81:4e:fb:c4:7c:6a:
2e:44:07:de:cb:d4:66:8f:5c:09:f0:82:35:29:4e:27:8f:61:
c2:44:73:54:b9:7b:3e:47:d6:e2:f3:f8:3d:ee:c6:e6:54:19:
00:01:4b:79:07:60:8c:2b:ae:b8:27:9e:fd:b8:02:e7:82:70:
2f:33:16:ba:ef:34:69:f2:57:c6:97:47:50:97:0f:60:ae:0a:
2c:43:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 15:45:26 2026 by rpki-client