Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: LfXA0yHTZy4iLo+DMF4LSESrkipjWU4JkHPv0EbNiGo=
Subject key identifier: 17:29:44:BA:23:7A:1F:FA:C0:33:46:6E:6C:5B:35:14:63:4A:E7:E0
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019FA9074EFE3FC0A3C92D1D5DB9533F036F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 0A84
Signing time: Tue 28 Jul 2026 14:00:56 +0000
Manifest this update: Tue 28 Jul 2026 14:00:56 +0000
Manifest next update: Wed 29 Jul 2026 14:00:56 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: iWIA96Z7gPiXJxfowge9Yy9MAxLf2TRwQl0Gwe6Bnec=)
2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:4e:fe:3f:c0:a3:c9:2d:1d:5d:b9:53:3f:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jul 28 14:00:56 2026 GMT
Not After : Jul 29 14:00:56 2026 GMT
Subject: CN=172944ba237a1ffac033466e6c5b3514634ae7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:e0:89:dd:11:fe:c9:89:c2:a4:7a:34:7a:
f4:b2:fa:22:53:07:cf:ca:ac:08:81:21:bb:80:a1:
74:ca:d1:50:7f:8a:9c:9c:81:6d:71:b8:91:52:2a:
8f:0f:7f:07:7c:54:72:c8:1c:46:8b:8e:61:95:60:
75:8d:ed:68:1e:8d:99:45:c8:ea:55:6c:bc:72:7b:
33:25:f0:f5:c0:ea:66:03:7d:7c:c0:03:0e:07:77:
1d:bc:a1:d0:4e:41:7c:2b:4f:e5:05:39:92:11:b8:
49:fa:5b:04:ad:fa:15:5d:69:ce:fa:3f:e2:11:0c:
a5:26:ab:09:93:81:3d:f3:e1:7b:13:19:f4:64:ee:
d9:bc:d5:d5:ee:e5:39:45:26:f1:40:c9:eb:a0:3f:
65:43:6a:98:af:32:ed:ef:d2:43:34:0a:ac:ad:7d:
78:00:ea:c2:2a:66:ed:bf:59:03:f0:b5:0b:d9:dc:
21:7d:b0:46:20:80:9f:e3:83:2d:2c:64:6c:4a:cf:
69:c3:0d:ee:5f:fb:05:da:1e:d9:11:cf:f1:d5:f1:
60:40:ca:46:c0:d6:6b:21:80:a2:99:60:35:b8:10:
2f:c7:b4:de:ca:4a:12:55:c7:80:66:5e:5e:3e:0f:
43:84:7c:a1:27:fd:7d:30:a8:3f:d6:59:5f:76:53:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:29:44:BA:23:7A:1F:FA:C0:33:46:6E:6C:5B:35:14:63:4A:E7:E0
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e1:4b:e6:64:fe:bd:96:8e:95:64:52:98:d7:bc:dc:f4:af:
b4:62:f1:f2:45:a1:e4:ad:96:b6:6f:12:70:ce:da:d7:72:17:
0d:52:75:0e:02:ef:f4:f6:c7:cd:eb:9c:7b:57:68:f6:16:39:
d9:45:1a:c6:2c:6a:03:f8:a6:7b:ac:b7:94:c6:0c:d5:b0:0b:
26:92:cc:ed:c9:3f:86:ec:1c:75:37:59:bb:af:21:ce:47:7e:
01:03:1f:63:01:c7:f9:3d:b8:4f:6e:56:a0:7c:b2:a4:6b:18:
5f:43:ce:02:6f:16:e7:9a:a6:c4:9e:54:d5:95:31:28:af:19:
2c:4c:7d:46:a8:9e:2f:ea:3c:d0:a1:53:93:0b:a4:c6:3b:86:
3d:4c:51:5f:5b:e7:ba:84:c1:9b:3b:65:09:dd:df:22:ce:ff:
a6:3d:98:ec:2a:bd:87:db:d1:d6:57:bb:4f:b8:61:86:b9:7b:
74:b4:51:24:74:27:f6:1b:06:0d:8c:bc:85:23:8d:79:f5:b4:
15:77:5f:92:61:a1:84:7a:2c:cc:4e:de:18:15:3c:e9:b0:53:
c4:29:cc:d9:99:df:14:51:96:a0:0b:65:6e:75:d1:ca:16:1a:
4f:5f:4b:eb:19:3e:c0:f1:e1:ba:ae:38:47:04:18:72:a9:ec:
d1:98:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:13 2026 by rpki-client