Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: iD4E7vcuvU888CIu59JK9NMJDW8AphOGCNlZ19hGtiU=
Subject key identifier: D0:F2:F5:27:A1:78:B2:A2:5F:D1:C0:94:37:32:08:1E:00:8D:AD:C8
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019F190C9136D7DD4FCCD1B0C8903FE62E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 10CF
Signing time: Tue 30 Jun 2026 15:01:21 +0000
Manifest this update: Tue 30 Jun 2026 15:01:21 +0000
Manifest next update: Wed 01 Jul 2026 15:01:21 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: DQORExTJwR7T5SN3gvoBXlYnkq29umtQGtuvFheV578=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:91:36:d7:dd:4f:cc:d1:b0:c8:90:3f:e6:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jun 30 15:01:21 2026 GMT
Not After : Jul 1 15:01:21 2026 GMT
Subject: CN=d0f2f527a178b2a25fd1c0943732081e008dadc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:f4:fb:ab:af:c7:94:6b:47:89:58:0e:74:
d1:77:a3:f5:83:d8:aa:b8:c7:bc:d1:51:64:ed:05:
e6:7e:1a:5c:f0:20:26:83:85:3c:95:ba:d1:a1:a5:
51:91:ac:83:29:71:21:2a:af:80:c4:08:d7:7b:f7:
64:bc:c1:6a:f5:95:50:5d:d3:14:41:99:ad:0d:32:
6a:81:fc:7d:af:c8:d2:90:ef:74:64:2b:33:02:5d:
12:d2:46:80:04:0f:7a:9b:2a:af:eb:95:eb:e9:a6:
58:20:4b:84:10:c1:a4:6a:ae:a8:fd:78:4c:03:38:
f7:b7:0a:5b:eb:c4:13:2c:94:29:42:2b:ef:00:68:
f0:a7:d4:5d:c2:40:56:db:1a:f1:b9:c0:d5:d8:17:
59:c8:dd:60:f4:44:93:fe:5f:4d:27:cc:e2:24:be:
01:67:1f:46:ff:89:a8:0e:90:a6:f4:d6:ec:07:9d:
95:01:ab:13:61:1f:91:6c:25:df:6a:bb:fc:97:5d:
2c:33:4f:46:fb:02:f2:a7:9b:ac:3d:d6:6b:72:81:
ed:43:4f:07:8f:f6:66:72:07:16:41:43:82:86:72:
4a:eb:eb:fa:18:95:5d:aa:c4:13:ef:6c:c8:b8:40:
46:0b:2b:ed:00:52:cb:7d:24:69:e3:1f:95:8d:d7:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:F5:27:A1:78:B2:A2:5F:D1:C0:94:37:32:08:1E:00:8D:AD:C8
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2b:18:53:e2:3f:d9:a9:55:9a:af:52:c6:7a:04:b5:55:9d:
6a:20:b6:1f:26:48:53:6f:a0:74:75:fa:95:e6:0e:ce:c7:c6:
91:5a:c5:e6:86:3a:a5:63:e1:f6:3b:a0:32:51:87:b2:ca:34:
7c:b3:42:5c:ee:05:7b:be:6b:08:58:18:d0:e6:41:5c:63:59:
55:6d:5c:c1:11:21:52:1b:11:b9:57:1e:e9:84:65:b3:2f:84:
8b:8a:a4:fe:d2:27:8e:e5:20:39:78:30:ad:70:a5:0b:64:5c:
56:f4:58:27:0a:84:ef:6f:9c:fe:97:d3:04:a6:1b:9d:f3:88:
6e:05:67:75:e1:23:97:2a:fe:58:e5:3f:f6:e1:2d:41:1e:6e:
08:d5:6f:20:a8:ce:a5:83:4a:6b:3d:3c:12:88:93:fe:b0:48:
74:69:39:ab:01:fa:01:9e:45:7d:fb:07:50:83:2f:53:0e:0b:
62:76:e0:dc:87:b4:65:1b:d9:69:e0:f2:35:fa:ff:b0:fd:14:
a4:93:45:1a:7c:d6:67:f7:5b:bb:7f:7e:43:02:39:25:b8:6d:
e8:53:a9:15:4e:32:9e:d4:4e:8e:bf:86:93:83:45:06:34:9c:
a0:fb:67:93:28:7a:6d:bd:09:1b:c9:cc:57:0e:20:8f:18:78:
e7:56:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:16 2026 by rpki-client