Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: R4JPV8hHOF0+CjGQ31tqgvTWzu0fWIJUpTjWfipWGGM=
Subject key identifier: D4:84:6C:83:5B:29:A6:B4:9F:FC:63:04:19:E5:1A:1F:D7:5E:CF:98
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019FF8A35D2C2F78E57C800FE9D32341DD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 01CA
Signing time: Thu 13 Aug 2026 01:01:23 +0000
Manifest this update: Thu 13 Aug 2026 01:01:23 +0000
Manifest next update: Fri 14 Aug 2026 01:01:23 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: 0gn2O/DypzDkylsxtkKHv4EVcR8l8SdXYRdBb96/TOw=)
2: RDMuJFUVpRTfjUV_uKreWSEDbJQ.asa (hash: npb1ZPrAdc0F36Du7VzbNSITtgjkjYoCxnKV2J1JMgg=)
3: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:5d:2c:2f:78:e5:7c:80:0f:e9:d3:23:41:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Aug 13 01:01:23 2026 GMT
Not After : Aug 14 01:01:23 2026 GMT
Subject: CN=d4846c835b29a6b49ffc630419e51a1fd75ecf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:24:6e:b1:ad:00:a6:2a:71:93:06:47:d8:
8a:67:21:bc:39:af:d5:b9:b7:fe:c5:d2:1d:ae:92:
9a:57:0f:74:02:2e:23:3c:30:20:41:8e:f7:6f:7f:
82:8f:ec:8f:d8:90:18:04:cc:36:be:93:5d:01:a7:
3c:95:63:e4:9f:9f:77:71:a3:54:59:83:c5:47:fb:
7f:0a:41:8a:c6:e9:85:9e:05:8a:df:30:15:d1:e3:
c9:a1:b5:7d:fe:67:c0:4c:be:06:21:bf:bd:3e:6f:
f2:12:06:c7:ff:df:db:9c:15:4e:b4:ce:3a:90:50:
97:0f:1f:fa:f8:2a:71:d4:23:72:53:6c:7a:48:b7:
49:51:1d:e8:3b:cc:f6:3e:cd:6f:1b:94:8d:ab:4c:
7c:7c:4d:f1:07:5c:50:4c:84:64:a9:d3:92:e3:dd:
97:3f:42:b5:a6:7c:2f:c7:d5:2a:a4:42:65:a4:00:
12:c6:5b:f4:8e:96:d1:8e:19:2f:c8:21:ff:4c:d9:
f9:e5:b1:fc:af:51:d0:cc:d6:7d:11:35:22:2a:27:
55:34:e6:fd:7a:65:51:84:6e:e9:eb:67:1d:91:d6:
ab:11:f5:a7:f9:14:70:82:31:bc:95:49:ed:2d:09:
1a:bd:d8:52:5d:38:3d:11:c6:bc:60:ba:fa:3d:ac:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:84:6C:83:5B:29:A6:B4:9F:FC:63:04:19:E5:1A:1F:D7:5E:CF:98
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:26:64:e5:bc:20:77:52:51:5a:3b:38:9e:62:c8:43:72:c7:
d8:3a:9c:fc:47:e8:a5:ef:94:54:43:79:57:d1:59:64:a5:b8:
d6:92:24:76:41:dd:95:fb:8d:0d:ca:20:58:08:b6:0d:9c:f8:
56:46:4b:f0:e5:4e:51:df:15:a8:f9:91:87:13:e7:67:bc:e0:
7c:58:63:45:b2:3a:5c:00:a6:52:3d:78:24:73:b9:97:6c:89:
0a:dd:9a:e6:e3:66:36:34:e5:5c:aa:a6:5e:ee:76:8e:9b:d7:
54:58:a8:08:e9:4e:1c:75:42:02:0d:20:ac:ea:32:4f:58:7d:
50:20:05:36:db:2d:de:15:60:4e:05:f6:1b:c3:df:24:06:81:
3f:b6:04:b8:2e:00:bc:23:5f:7c:51:1c:5c:42:6c:3b:81:08:
68:89:59:30:4b:b8:31:1f:a2:9d:dd:41:46:1c:30:35:77:58:
68:69:4b:73:de:66:62:85:6d:8b:5f:27:48:4d:c7:b2:79:f0:
31:55:39:6f:53:fc:48:34:af:06:00:63:cd:3c:c5:52:a5:fd:
e2:3e:f1:13:c5:6b:d4:44:37:b2:bb:17:e3:27:81:41:5f:37:
2a:be:97:39:dc:0f:b9:c1:db:06:2e:7c:41:10:7d:95:ff:ee:
1d:44:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:22 2026 by rpki-client