Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: 8nyYIWzMHx92Bf4nwreCf4pJ4Z4a+VAYMpSoSRPQ2D8=
Subject key identifier: 73:2B:4B:A4:A0:8D:05:8F:E8:5C:E8:1B:84:7C:15:20:E2:FF:71:74
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 01A001DCE0CF236D673AA892ECFC869BCF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0B60
Signing time: Fri 14 Aug 2026 20:00:47 +0000
Manifest this update: Fri 14 Aug 2026 20:00:47 +0000
Manifest next update: Sat 15 Aug 2026 20:00:47 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: 1T/dEttXi6ce3w1gv0nyDM6t32+eZXMhBCAvBEDccz4=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:e0:cf:23:6d:67:3a:a8:92:ec:fc:86:9b:cf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Aug 14 20:00:47 2026 GMT
Not After : Aug 15 20:00:47 2026 GMT
Subject: CN=732b4ba4a08d058fe85ce81b847c1520e2ff7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:30:03:d6:2b:18:ad:29:82:70:4f:25:f7:
b8:65:02:d9:07:07:38:fd:89:63:94:bc:4f:fd:ac:
5c:51:d0:22:48:85:0c:2d:a2:6a:5e:b7:97:e2:59:
4f:71:18:5c:0c:23:23:c7:ef:3b:f1:aa:bb:46:13:
12:31:cf:b8:81:74:69:f1:4f:b6:a8:d0:0a:35:0e:
fc:bf:54:f6:54:c7:de:9e:63:41:2f:6b:ea:f3:43:
af:19:8c:41:b0:ca:51:2f:c9:a5:fb:a0:c2:ee:b6:
55:f6:24:17:94:0a:b4:03:a2:0f:4f:6b:5f:83:bf:
cd:7b:2e:10:ba:12:1b:55:b5:28:49:24:af:f1:b2:
c3:9c:cd:16:03:5a:a7:f0:3a:52:77:04:eb:18:2b:
a9:bd:62:5d:6b:55:9f:53:5b:60:66:03:39:d6:8a:
bd:8f:6a:dc:2b:a4:14:5c:11:1c:c4:41:e7:a8:d4:
08:af:68:bd:3b:ab:7c:ab:73:2d:f9:ec:76:0e:40:
63:8c:d0:47:f7:f6:c1:2d:88:b7:27:0c:27:ee:19:
d2:26:cf:55:d4:fa:0e:33:a5:51:4e:45:30:71:76:
44:4f:43:ad:f6:03:fc:3e:d2:b8:a2:4a:f3:9e:0a:
06:17:22:2b:06:e4:8a:ed:8a:10:e5:b0:a5:62:da:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:4B:A4:A0:8D:05:8F:E8:5C:E8:1B:84:7C:15:20:E2:FF:71:74
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:75:49:13:31:56:6e:f7:0d:76:5a:43:0d:c2:d2:28:67:3b:
85:ad:6d:a4:64:1b:99:93:ca:47:3d:9a:90:b9:29:b3:69:2e:
5a:d2:41:98:01:fc:4f:2e:af:be:2c:8e:ae:33:dd:42:3a:e1:
85:2f:61:d7:d7:40:b6:2b:83:6d:c3:4a:ce:a2:ae:ca:20:f8:
d7:fe:78:f3:39:87:29:91:23:08:78:06:a8:c2:49:09:20:a7:
91:26:3a:78:16:af:56:3b:7b:c4:03:e5:b8:bd:68:c1:98:58:
e8:fa:66:e7:f2:37:f8:dc:c5:11:ec:a4:1b:45:4f:24:e1:17:
53:10:ad:f5:ff:d0:14:6e:d1:59:67:47:9a:38:52:1d:a1:b8:
ff:f7:0a:ce:c7:94:4b:5d:23:a7:cd:75:b3:ba:67:02:ed:73:
8d:96:c6:c4:65:ce:06:ee:ed:70:f7:99:4d:b4:68:93:00:10:
e8:08:28:51:60:18:e5:0a:de:bc:18:ac:16:23:45:18:2a:51:
bc:d1:06:37:be:8c:c7:d3:d6:5c:f8:4a:20:4f:46:af:7f:12:
0f:c8:da:2a:4f:68:b9:f4:7b:48:2a:47:99:47:b1:fd:27:fa:
ac:b4:1c:dd:75:0c:d7:90:2e:7e:25:53:b1:eb:2a:e5:f9:62:
46:5a:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:15 2026 by rpki-client