Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: kROU7JXZCYQ1TTAC3gE/ipOPpmczb+uDUjXgYJPUm2I=
Subject key identifier: 49:67:E9:8E:5F:5C:7E:7B:57:54:DE:44:AD:99:6B:54:C2:C5:69:5A
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 019FA907149F69BB837491636BD59077FC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 0814
Signing time: Tue 28 Jul 2026 14:00:41 +0000
Manifest this update: Tue 28 Jul 2026 14:00:41 +0000
Manifest next update: Wed 29 Jul 2026 14:00:41 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: rs7yXekdo2JIizhThmajwww63QDElCufW4KOOPFcy90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:14:9f:69:bb:83:74:91:63:6b:d5:90:77:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Jul 28 14:00:41 2026 GMT
Not After : Jul 29 14:00:41 2026 GMT
Subject: CN=4967e98e5f5c7e7b5754de44ad996b54c2c5695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:52:dd:86:8d:76:d7:98:f1:c9:4a:16:7c:
3b:8a:ce:51:b4:de:eb:e3:d0:9e:66:ba:8d:a4:1e:
13:7d:25:9b:99:89:14:02:6c:5e:b4:c9:4b:6e:5d:
38:49:56:85:98:a9:a0:e4:7d:3f:12:dc:72:b5:20:
21:af:82:06:75:dd:46:92:75:52:0e:ae:18:44:2b:
ab:0b:5b:e2:aa:43:0f:67:54:55:ca:6c:7e:66:64:
b5:00:01:6f:ee:81:69:83:c7:db:c0:d9:e3:9f:70:
ad:7d:2c:67:57:3a:a6:c8:de:e0:81:37:7f:0b:22:
cb:d3:e9:57:67:eb:57:c0:a4:47:3f:ae:3e:d3:cb:
73:fe:59:dc:ad:63:db:49:b4:b1:80:34:b7:df:37:
c4:f9:1e:69:8c:0a:22:25:bc:f5:18:2a:73:fd:fe:
ff:d4:d6:d2:50:11:3c:8a:9f:98:eb:30:1d:ae:0f:
28:49:9d:f1:7f:a8:6c:9e:56:3f:a7:be:53:1a:c2:
36:54:29:dd:2d:c5:86:85:49:c9:a1:1c:56:7a:0b:
ac:78:4a:5f:bf:93:2f:b9:7f:d0:5e:90:14:10:c1:
36:0b:16:c4:5c:06:43:a5:59:7e:e5:f9:6f:b8:9f:
5c:ea:ca:38:54:ca:03:4d:e9:e1:34:43:df:3b:af:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:E9:8E:5F:5C:7E:7B:57:54:DE:44:AD:99:6B:54:C2:C5:69:5A
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6e:00:f0:28:6f:9d:62:66:7d:68:49:3e:0a:91:df:c0:d2:
de:3a:55:d4:9f:bb:5a:ac:3b:a0:a0:10:0f:a8:c7:c4:50:de:
81:56:81:92:b0:3d:69:79:27:16:9f:fc:4f:06:37:d5:7b:fe:
0e:14:70:92:7a:30:4c:fd:cd:4b:0e:d1:ba:0b:2e:af:55:6c:
6d:73:72:28:e1:01:12:d5:07:a3:d7:2b:c4:c7:71:cb:90:cb:
69:a8:ab:fb:c7:8c:d3:6a:5e:d4:d0:3a:9b:66:9b:f4:64:ac:
5a:82:a4:fa:57:88:e3:6e:25:99:35:a5:27:17:6c:24:8a:e6:
ad:b0:c6:1f:25:0c:69:56:6f:36:84:b6:ae:38:6c:5b:bb:b9:
f4:b7:f5:f8:a0:8e:7f:97:cb:3e:d4:84:55:ba:21:25:02:08:
f4:ff:ab:c9:d3:73:2e:88:43:de:24:92:1a:5c:e1:44:5b:f9:
27:f3:64:fd:70:8d:c8:d0:ea:3a:88:a7:b6:3e:ca:76:ee:e1:
6c:7c:a3:fe:28:6a:16:6f:7b:66:f0:af:88:a5:33:d7:3c:9f:
04:bd:c1:ed:91:03:8a:a8:d4:c4:8a:40:01:f9:14:0e:1e:e0:
42:ec:42:21:53:be:62:93:71:ff:98:15:ec:dd:8e:47:66:cf:
69:a9:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:02 2026 by rpki-client