
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: DIOnv0JR6WKe6oMGgC2yprTOMJQaB0/lQRGQ3jZ467c=
Subject key identifier: 4B:3E:21:F9:37:84:63:0C:43:79:C2:A5:10:64:79:0A:3A:37:E1:5E
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 01A001388B8F3B1CF66C21CD59EC4B5B93E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 12D3
Signing time: Fri 14 Aug 2026 17:01:17 +0000
Manifest this update: Fri 14 Aug 2026 17:01:17 +0000
Manifest next update: Sat 15 Aug 2026 17:01:17 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: GxpfGwhU/bkiIbaaRUqya2YiTx20UjwiRnnWUi9GS/A=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:8b:8f:3b:1c:f6:6c:21:cd:59:ec:4b:5b:93:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Aug 14 17:01:17 2026 GMT
Not After : Aug 15 17:01:17 2026 GMT
Subject: CN=4b3e21f93784630c4379c2a51064790a3a37e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:cf:55:93:35:50:0a:e6:9c:d5:3e:f4:e4:
0f:ce:82:d0:eb:6b:3d:29:51:72:0e:cb:74:97:da:
83:eb:5c:0f:1d:0a:32:2a:ea:b3:69:95:80:ba:04:
cb:72:61:31:e0:c2:37:37:a7:2f:08:90:ef:92:c4:
47:f1:37:c3:b5:35:81:c1:04:20:0a:88:7e:d2:62:
9b:54:a7:e3:41:c5:e2:2e:08:7c:fe:e9:ec:44:b2:
4e:ae:f6:23:fd:4b:b4:07:11:4f:78:56:7d:7e:60:
11:86:a7:f3:8d:09:e6:83:0c:35:0a:2b:12:9a:00:
2d:4b:ce:53:94:d1:6c:98:ac:ee:4d:cb:26:31:48:
66:5f:40:b0:d2:78:8f:f1:a0:83:e7:05:02:f7:ae:
94:a2:48:56:7c:3f:d2:dc:71:26:37:1f:1e:86:a6:
e5:a1:b4:54:7b:12:26:08:66:f7:9e:f1:09:2a:33:
e2:e8:01:ec:99:0e:09:ed:bf:cb:0a:51:79:e3:67:
1f:83:85:2e:ce:2b:32:3c:e0:ce:bf:05:6b:1f:d3:
08:27:08:4a:4b:0c:02:3d:f0:56:f5:60:74:f4:96:
e8:de:05:8e:47:3e:16:36:9e:d4:89:05:91:5d:0d:
e0:89:83:93:87:84:da:f4:99:f8:51:3a:dd:b8:d1:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:21:F9:37:84:63:0C:43:79:C2:A5:10:64:79:0A:3A:37:E1:5E
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:0d:5f:d3:77:0b:1a:c2:ee:71:15:98:5a:00:34:24:2c:
5b:97:5a:8f:16:dd:bb:42:17:8d:d0:30:4f:17:cd:5f:26:f0:
0f:a3:1b:5c:db:5a:39:a1:7b:88:c9:4c:0e:5f:e7:ba:30:c5:
e6:be:4f:27:b2:01:5f:92:41:5a:bd:4d:d1:74:bf:9b:3e:33:
ab:1f:ab:a5:47:e7:07:d5:1d:60:ab:67:ca:0f:27:88:69:c1:
73:0e:66:9a:f1:28:ac:30:28:83:e1:55:59:e3:4e:fc:4a:76:
92:81:83:71:4f:37:06:84:8b:94:cf:c1:8a:00:c1:3b:c0:67:
11:7b:a6:18:8b:1b:21:33:00:89:5c:d8:cc:7b:63:ad:b3:d2:
70:aa:be:5d:6f:b7:60:c5:65:92:fd:ff:21:c7:bb:bb:c3:25:
9b:39:c1:c3:be:ab:99:b9:62:a5:24:72:9e:22:dd:d6:24:5a:
00:ca:67:2d:79:29:cf:01:2c:40:3e:c7:3f:b3:48:1d:d3:c0:
53:3c:dc:a0:18:59:36:b3:09:93:2a:6a:a9:92:a7:0f:58:08:
79:07:d0:1b:c6:c4:f4:3f:c7:65:e7:98:c1:86:76:55:19:3e:
14:88:f3:cc:3d:24:4f:fd:4e:13:24:d2:ef:c2:df:cf:e7:93:
16:c6:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:22 2026 by rpki-client