Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: OhPggbCjbWA1rxe7zFSo36yZtnCOlE/tYx14KmsFMd4=
Subject key identifier: D1:E6:39:9C:53:7A:54:B9:58:98:AA:7A:55:C5:9B:EC:97:E7:CD:B3
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 019FA907C289806E27467A3DE06D9EBA53C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 1796
Signing time: Tue 28 Jul 2026 14:01:25 +0000
Manifest this update: Tue 28 Jul 2026 14:01:25 +0000
Manifest next update: Wed 29 Jul 2026 14:01:25 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: jzZBYW6T5scyMWjgKzekXBQrMfS1crN3rq0sBwxzfbg=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:c2:89:80:6e:27:46:7a:3d:e0:6d:9e:ba:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jul 28 14:01:25 2026 GMT
Not After : Jul 29 14:01:25 2026 GMT
Subject: CN=d1e6399c537a54b95898aa7a55c59bec97e7cdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:cc:55:2e:00:a9:ae:25:b4:0f:f8:9d:56:
bb:2b:31:3c:2a:8b:ee:de:f3:ae:f5:8e:29:f7:14:
f1:4c:33:20:4c:8f:af:6c:be:37:75:92:8a:cc:62:
c6:ad:36:dd:6f:24:78:30:5a:a4:66:2e:e8:6c:4d:
64:6f:22:db:4a:9a:06:aa:4a:d7:ad:f7:02:7f:30:
04:7f:b9:68:1d:6d:81:06:5f:99:94:97:51:f6:6f:
3e:5c:44:07:a3:6c:63:b8:6b:87:cf:fb:f0:d4:6b:
c4:37:1f:d4:2c:a8:d8:e9:8b:65:ba:40:7d:25:ca:
a0:9e:a2:bc:15:aa:38:55:02:67:96:07:52:c1:d9:
b8:ca:fc:2e:02:ff:38:6b:3d:ee:5b:18:44:0f:f3:
ea:51:08:70:22:4b:b7:af:92:57:c8:c8:2c:0a:39:
d4:16:73:a6:6e:73:a8:88:9d:44:bb:97:d0:f1:de:
8d:3a:ab:76:52:9a:a4:be:0d:fa:57:d2:76:d7:f9:
6a:ca:a6:b4:41:5a:14:e3:f9:87:ec:3b:4c:b6:74:
67:d2:52:7f:57:3c:b8:a6:e2:7c:dc:7a:46:9b:90:
ff:f3:c9:98:41:74:12:c6:e0:ea:4e:2e:c6:93:94:
6e:fa:18:eb:ee:bb:c7:0b:7d:64:4a:e0:a1:72:82:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:39:9C:53:7A:54:B9:58:98:AA:7A:55:C5:9B:EC:97:E7:CD:B3
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:96:16:76:8f:a6:2f:3f:6d:31:01:00:9c:7a:ac:09:82:
f4:8b:f7:3c:e3:d0:69:d9:9a:d8:aa:67:aa:7e:56:bb:c6:7c:
6b:73:e1:54:e4:92:a5:e4:fc:11:96:8c:1a:31:c5:d6:91:70:
de:10:6b:d2:a6:af:f3:54:c7:51:11:e5:6d:eb:aa:eb:60:1f:
3a:81:94:d8:af:6e:2e:9d:ff:6d:14:a9:bb:ec:60:54:44:6d:
71:f7:80:fb:d0:bc:50:6f:0d:ad:24:a9:02:df:24:89:54:f3:
11:22:5f:f0:21:a8:02:7c:59:3e:1e:c1:a7:f2:cf:55:4f:51:
fc:07:d8:ec:f1:92:3c:23:94:a5:dd:6c:28:48:aa:d0:15:6a:
c5:ee:c3:4d:89:fc:ee:ef:b5:47:26:e0:f7:c7:de:a3:4d:78:
18:fb:bc:bd:7f:4b:9e:27:eb:31:dd:2f:62:9e:49:18:ff:4a:
b6:11:19:8f:87:94:bf:69:00:39:a0:32:8b:5c:2e:44:84:18:
33:4e:f1:be:d7:0d:8d:e8:f0:c8:56:11:37:eb:c9:04:f0:34:
82:12:ac:59:09:7c:13:84:12:4f:1f:1e:1a:58:b5:d3:47:c2:
d8:3b:d9:c7:39:5e:69:03:22:ec:5f:ab:13:b1:f7:c2:c9:52:
92:18:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:56 2026 by rpki-client