Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: 8E53pWyjIrByzu4TccYpV7X4a7v49omGwmwREcknX44=
Subject key identifier: DA:2D:FE:54:82:C2:EA:39:E4:BC:3B:8E:6D:84:C4:9C:0E:9F:6D:06
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 019F197A054E94C81EFC4C22A6607D3A6BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 191A
Signing time: Tue 30 Jun 2026 17:00:54 +0000
Manifest this update: Tue 30 Jun 2026 17:00:54 +0000
Manifest next update: Wed 01 Jul 2026 17:00:54 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: 7krCVvCzv6zheLWo5j60XmOvk2/pvkhGAtBicHMKD8A=)
2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:05:4e:94:c8:1e:fc:4c:22:a6:60:7d:3a:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Jun 30 17:00:54 2026 GMT
Not After : Jul 1 17:00:54 2026 GMT
Subject: CN=da2dfe5482c2ea39e4bc3b8e6d84c49c0e9f6d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:cc:96:c6:43:3d:b9:1b:34:70:4f:e1:9d:
a7:d9:02:f3:3f:e7:e3:c1:6b:ba:40:9b:23:9b:e9:
6b:b0:ca:62:9d:f8:db:45:26:1b:91:12:12:05:80:
c3:57:0f:b5:58:9d:aa:e2:01:7c:2c:d1:3c:38:95:
21:14:6c:78:3e:71:b8:54:84:db:2e:38:40:06:c1:
cb:16:1d:82:22:10:00:8a:ab:c0:d1:99:87:79:63:
38:67:13:99:cc:dd:d5:b3:e7:6d:18:6c:3c:85:ab:
a5:63:4a:0a:46:7e:44:a5:a9:9a:c7:6b:30:5b:bd:
32:ed:2c:2e:0b:9c:d0:f5:49:01:73:4f:d8:bd:84:
72:4c:75:f8:e7:d5:31:aa:d2:2b:49:60:f6:1f:ff:
a1:87:20:5e:da:f3:ff:6a:f4:3c:2f:b8:cb:c5:cc:
d4:15:db:59:ca:0d:df:6f:1c:e9:04:12:e8:b7:d1:
7a:74:78:b5:7d:d1:37:fa:fc:e3:c2:f1:8c:f3:65:
2f:b5:a8:0d:fe:41:5e:c5:b9:b0:d2:cb:6b:5a:f4:
06:44:44:2c:59:41:dc:f0:89:b7:9f:fd:7e:39:70:
44:e4:e1:55:f1:7e:7c:3c:ab:01:7d:5e:f9:bd:3f:
1f:c4:7e:92:64:1e:6a:fc:14:a2:ac:a9:75:a7:22:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2D:FE:54:82:C2:EA:39:E4:BC:3B:8E:6D:84:C4:9C:0E:9F:6D:06
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:19:4f:b8:69:5c:fe:77:e3:ad:ef:f5:63:b2:8d:59:78:
34:7b:3d:f6:55:35:89:95:fa:af:f4:57:17:8c:0f:8c:cf:a6:
ae:5b:cd:74:d9:d8:ba:5f:34:77:d8:45:43:38:f1:ba:65:5f:
19:e4:c8:2f:7f:12:a2:a8:86:63:18:06:3b:15:8d:1a:c8:a9:
87:3b:95:c4:e1:57:ac:64:8b:34:75:26:f1:cb:7a:78:3f:89:
bd:3a:ea:c8:aa:f1:cc:5e:01:27:f6:70:39:f4:10:a1:eb:e9:
54:16:fe:bf:80:fa:81:02:37:60:20:3e:61:57:99:7f:fc:fd:
9e:dc:fd:90:88:42:a0:90:52:7a:43:d8:93:d1:fe:38:7f:79:
78:b6:61:40:a7:8f:b6:78:55:b6:3c:3e:89:07:e2:4c:bb:51:
fb:2a:76:67:e5:67:a7:55:38:9a:b5:14:53:82:92:ff:e4:fd:
f1:61:c7:19:4c:0f:53:b0:64:57:e7:a3:36:df:61:8f:c1:05:
09:ee:59:58:94:26:cc:62:0a:2f:81:2d:f0:e3:06:3f:ed:80:
b4:f4:a1:9b:04:a6:f0:20:db:48:fe:e0:50:78:ad:12:f6:0b:
07:74:d6:41:8b:dc:77:97:0e:14:87:d5:b8:03:e4:37:55:68:
56:4f:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:20 2026 by rpki-client