Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier: HNV+fU5XrxAVHjuJiNBNbdgHmLuCAi5Br50yXxcBBGE=
Subject key identifier: 11:C3:A2:66:78:E2:64:DF:D4:40:84:B5:B7:A7:74:AC:C3:87:EC:6D
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 019F1AFA9B3061A97BB5184843F641311AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number: 0174
Signing time: Wed 01 Jul 2026 00:00:58 +0000
Manifest this update: Wed 01 Jul 2026 00:00:58 +0000
Manifest next update: Thu 02 Jul 2026 00:00:58 +0000
Files and hashes: 1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: 8NJCK2x6fYvxVo78Xh+2u5UogHLvVUu8+6h/ccQVbVM=)
2: gymKXorNDDp8x3PYy2044v75QFA.roa (hash: 0rzdf9ANtdDtf/hP67m2732x5lm9z0lPUGsmoQ5Cu10=)
3: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
4: wlE-n-v4vhVQ0V8BrCRy7vygKkk.roa (hash: GtlwHi8+nqqIfT+DJBH/zU6X+J1M23P7PC88GLuf8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:fa:9b:30:61:a9:7b:b5:18:48:43:f6:41:31:1a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: Jul 1 00:00:58 2026 GMT
Not After : Jul 2 00:00:58 2026 GMT
Subject: CN=11c3a26678e264dfd44084b5b7a774acc387ec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:96:cf:64:95:e6:da:1d:7d:74:3f:37:8e:
31:b9:2d:ec:b5:27:95:b1:64:4e:6e:12:1c:1b:59:
3a:15:d9:9d:9a:47:d1:10:85:23:d7:0a:1f:d8:96:
25:0c:af:fc:a7:59:82:f6:cb:d4:02:b8:10:a7:c9:
d8:8b:0c:21:ed:bc:3e:34:61:fc:04:79:6d:e5:3c:
ad:13:d9:f3:96:48:1e:ff:35:8d:27:31:d7:8d:9f:
e1:3f:68:75:e8:68:d7:03:71:6a:14:bc:fc:2b:9b:
ba:9b:e2:d3:81:04:28:9e:61:6c:ca:9a:09:3c:df:
f2:0d:1a:e6:3e:c8:f4:11:15:06:b5:2f:3f:cd:7d:
f5:ff:d7:1b:3c:49:91:0b:da:d9:dc:e8:43:6b:62:
af:78:3b:66:58:6f:39:a9:c9:31:85:14:03:ea:30:
c5:38:54:97:22:80:59:43:fd:3a:d3:f0:e5:b2:9a:
d5:f9:44:59:c9:44:72:f0:49:27:12:7f:94:cc:86:
42:b3:b7:21:f4:d3:61:d6:52:45:aa:b8:05:06:15:
42:58:60:0f:4c:63:65:ab:96:80:ff:42:70:10:bc:
30:b8:ea:da:04:b5:27:fb:d5:4e:13:6b:8d:9f:b8:
a2:9c:49:de:ee:0f:94:e4:9e:44:48:65:92:89:e0:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:A2:66:78:E2:64:DF:D4:40:84:B5:B7:A7:74:AC:C3:87:EC:6D
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c9:e2:78:0a:f0:e7:c9:96:02:7e:4a:44:e5:50:37:3b:2b:
ec:30:ab:92:5d:3d:66:fa:de:3c:9d:05:33:52:e5:03:ee:ad:
43:aa:9c:6b:00:b7:ba:99:ed:1e:4f:c8:00:95:9d:75:af:d7:
82:bd:4b:a2:a5:9a:5e:09:7e:be:1f:eb:f6:4f:c5:c8:9b:dd:
2e:5a:cb:4a:c8:0a:e5:13:a2:d6:ac:a7:b3:03:be:25:d4:dd:
0a:64:71:2e:6b:07:7a:1c:62:6d:65:4d:67:e9:70:9d:76:a7:
1a:cb:33:51:d8:4c:95:ad:8e:bb:4b:81:df:4b:9b:9b:8a:ac:
00:9b:e7:db:88:be:af:64:78:b7:8b:76:8d:b4:78:76:d4:98:
91:9a:b2:5f:53:dc:95:71:15:bd:92:e8:7a:44:c8:b1:d7:9c:
24:36:2a:95:07:cf:7d:77:83:14:54:8b:aa:e7:4f:b7:ce:f3:
78:22:d3:00:0e:dd:e6:7a:c8:3d:5a:da:ab:e6:3c:19:8a:40:
29:79:7f:e5:a7:94:ac:8f:00:cc:60:0b:61:4f:bb:8d:9a:15:
cc:54:bd:00:be:cc:fb:5e:07:e5:12:b6:73:d6:c9:16:5e:1a:
16:6a:de:5f:2c:bf:e3:34:fa:d0:13:d0:59:02:30:a3:c9:7e:
c6:ce:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:18:11 2026 by rpki-client