Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
File: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft (raw, json)
Hash identifier: U5MjntUcTe2DSsg8CsaSbe2U63hYt1tokMHzY7P5YO4=
Subject key identifier: 64:48:33:EC:DE:EF:D9:53:3C:5E:7F:1C:DE:D2:3D:0F:64:E1:E4:FC
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 019FAA889DE46980FFD085B630ABEE65A778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:47 +0000
Manifest this update: Tue 28 Jul 2026 21:01:47 +0000
Manifest next update: Wed 29 Jul 2026 21:01:47 +0000
Files and hashes: 1: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl (hash: HeNMFz7Hlec+YU0nei/4cII+wo40FGIpHnPdf8+wIxE=)
2: 5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa (hash: 7yWAM4rRw5M/JV2A3HQ3yWCJTTzj2IN/RNPOITjQ4mE=)
3: EycWZ_dfGLG-EqHrgSZrTtUENKs.roa (hash: KJ1RAPm5hecF2qlfjfmX1AbYuEVtEPM/dltRx7gtvV8=)
4: JY1qhMWeHgfaGacafAu9A8pqPOU.roa (hash: vSlOo61MyUjunpp23wCdHaI75o9KFjuwDlia3rSNbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:9d:e4:69:80:ff:d0:85:b6:30:ab:ee:65:a7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Jul 28 21:01:47 2026 GMT
Not After : Jul 29 21:01:47 2026 GMT
Subject: CN=644833ecdeefd9533c5e7f1cded23d0f64e1e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:8e:9b:1d:d1:fc:57:bd:9c:7c:a6:44:4a:
41:7c:0e:a2:e7:b7:f9:da:43:47:8c:ad:39:6c:e7:
d1:f7:fe:48:d1:c3:fe:c3:25:82:00:ce:29:e0:f0:
83:6e:dd:f3:12:1c:40:0e:15:2f:28:92:aa:93:d4:
34:2b:cb:1e:33:ba:13:84:0d:44:13:bf:1d:0b:d8:
03:70:37:f7:08:c4:25:95:bf:13:e5:a4:62:04:96:
bb:c0:61:bf:ac:8b:55:b4:49:45:38:dc:32:c7:cd:
3e:82:10:78:cb:17:28:9f:f7:04:f5:77:b5:95:28:
72:3f:ac:b0:46:28:20:7e:43:fa:ae:3a:76:b8:a5:
46:26:4c:e7:a7:89:f7:17:d7:14:3f:e7:2a:9a:27:
5a:8f:72:e0:2a:b0:1f:6e:f4:9f:f8:f1:f6:b5:25:
61:b1:e8:fd:22:7c:cf:fd:4a:8f:59:c6:88:97:46:
7c:73:95:53:9a:a8:16:eb:85:a8:af:5e:33:26:a5:
e3:2c:1e:38:8f:33:ab:d9:e8:c3:c2:1a:78:e7:54:
35:df:d7:b4:58:5c:75:4d:89:c2:4a:77:fd:80:91:
b7:7e:5d:35:ba:4b:f3:36:aa:50:bb:4e:ac:6a:b7:
25:e5:12:cf:23:20:46:10:40:a6:43:80:55:f0:2a:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:33:EC:DE:EF:D9:53:3C:5E:7F:1C:DE:D2:3D:0F:64:E1:E4:FC
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:11:78:10:cb:4c:eb:57:c7:4e:7c:22:71:ba:f2:93:48:5f:
1f:a2:aa:7f:d2:60:51:a9:dd:54:c4:22:10:c0:75:c0:07:e7:
a6:2b:bb:0c:ad:65:f6:1b:ce:e8:1b:9a:37:d0:72:e5:85:07:
e5:5e:41:0f:24:26:6a:90:83:2c:3b:93:29:df:d4:9e:1b:6b:
73:df:35:a0:e9:c8:15:c1:53:29:fe:ee:3c:87:59:dd:af:30:
c4:61:6f:f8:3c:af:ad:f6:e3:d4:41:69:d0:e2:ec:87:4e:61:
5c:38:4d:81:70:3f:36:7b:57:92:df:2e:bc:67:bd:a4:4c:e5:
2b:c9:be:e1:f6:c0:1a:6a:25:6f:7d:65:36:89:ee:cf:3b:47:
09:09:83:58:5f:7d:76:75:a3:0f:fb:72:54:5c:fc:17:f1:8c:
39:aa:2b:5e:e9:49:54:4e:55:59:63:db:43:54:1f:a7:61:c3:
d4:ed:ba:3c:45:b4:db:02:38:63:7a:e7:da:bf:61:ff:73:52:
61:fa:85:e2:09:63:58:14:cd:f8:18:24:63:d4:25:ec:85:05:
a2:80:ae:3b:2a:72:ad:0f:81:c5:b6:b0:f4:aa:45:6b:2f:be:
45:0b:41:95:a2:1d:6d:5c:a2:d7:a8:1f:15:c3:de:a6:0f:b1:
67:10:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:45 2026 by rpki-client