Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: aUbOBzgqhE2FhUZ2/hxQFKm88l8A9wbBvjCww9zIylw=
Subject key identifier: C6:81:CA:92:30:83:29:04:7E:40:BF:81:77:9F:F3:BE:BA:72:3E:AD
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019FAA1957E5C4121582665642C41E2E9CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 19:00:15 +0000
Manifest this update: Tue 28 Jul 2026 19:00:15 +0000
Manifest next update: Wed 29 Jul 2026 19:00:15 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: FqZeJFD8ye75ZauCQJ9qa9NCdBgDwkzYXQCZg+fICWQ=)
2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:57:e5:c4:12:15:82:66:56:42:c4:1e:2e:9c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Jul 28 19:00:15 2026 GMT
Not After : Jul 29 19:00:15 2026 GMT
Subject: CN=c681ca92308329047e40bf81779ff3beba723ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:f7:ca:6c:b3:55:43:3a:2b:d9:be:6c:d5:
e8:1b:d5:97:31:b3:c8:41:82:c3:0b:61:93:de:19:
c6:4d:be:86:d8:0b:2a:ea:1b:fb:bd:57:93:65:18:
11:7d:ae:db:80:bd:32:5c:f6:3a:3d:02:7c:4a:62:
df:8b:4f:6e:72:06:bc:13:d6:e3:74:5d:f3:4a:09:
d6:db:c8:db:09:dd:73:f8:94:49:fd:e6:a3:16:ed:
c9:b6:7c:1c:8c:3b:7e:21:3a:df:92:92:52:f2:f6:
35:b8:60:c7:09:00:b7:a7:31:a1:e2:38:c0:fb:49:
c0:6d:86:b7:b7:09:a0:e8:6e:ae:f7:1f:f1:32:27:
76:12:1b:86:34:14:96:69:3d:a6:d4:83:28:8e:1e:
ea:a0:9a:1f:7a:60:7c:13:08:b2:31:8e:a0:3a:8c:
93:a7:96:41:22:8b:f9:a3:46:3b:a0:bc:3e:cb:1a:
16:e6:18:6f:e2:52:93:b9:46:c4:3a:d4:51:5a:43:
cb:24:4c:4d:86:e1:7c:dc:e9:40:cc:51:58:cc:55:
2e:63:c5:9a:53:b4:98:ac:bf:2c:1e:68:b1:aa:7d:
d8:6d:0d:1c:40:99:11:4c:60:e5:b2:2f:18:a7:36:
b5:a8:13:fb:6c:f9:45:19:b7:a1:98:fe:ee:69:51:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:CA:92:30:83:29:04:7E:40:BF:81:77:9F:F3:BE:BA:72:3E:AD
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bb:9b:c2:1d:d0:55:24:7c:5f:79:c4:b8:87:5c:eb:31:af:
bb:58:39:17:ac:f6:49:8b:b1:70:03:54:0b:73:bd:e3:4d:c9:
59:15:0f:84:de:66:9f:e8:38:04:87:4e:43:f4:0f:e3:cf:ae:
4b:dc:34:66:98:bd:79:8c:b8:be:21:83:37:e1:df:60:2c:66:
85:04:ab:b6:8e:b7:5f:ed:ca:8d:c7:e7:3c:40:62:2e:a5:d0:
e6:93:50:24:df:89:94:85:c8:54:f1:ca:b2:8f:44:d5:03:4f:
2b:e2:21:14:c4:3e:a9:07:91:da:d9:1b:85:a5:65:21:6b:d9:
24:79:7a:b3:09:93:61:84:de:68:5a:d9:36:1e:95:99:be:b6:
56:1c:7b:4c:b1:3e:01:6a:4d:f1:47:0f:d8:ef:1d:f3:b1:d8:
8c:47:bc:85:30:84:95:4a:a2:71:c5:9f:13:f1:41:9e:0b:61:
95:36:84:7d:a6:e6:dc:a6:d5:bd:1f:1e:5e:65:7d:d3:f5:ee:
b1:47:59:f5:1e:ac:49:df:37:62:ea:52:3a:43:22:c1:86:4a:
ae:0e:55:08:58:00:1e:29:93:af:88:62:00:a6:70:8f:81:7f:
90:2b:92:22:54:f0:a5:77:ea:5c:3b:a4:c5:21:3e:6f:0d:65:
10:05:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:38 2026 by rpki-client