Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
File: 2KPKzfjzNRS-Or3FLFDshkZ16VU.mft (raw, json)
Hash identifier: /REDoxQuHHTC4tIeMNIjgoQIfcp/8K1oS35eNG9pFAM=
Subject key identifier: D0:87:97:D6:0D:95:05:89:A2:BA:6D:EB:C6:E8:99:2A:18:CD:1C:6B
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Certificate issuer: /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial: 019FA93DB4BDE7BB04FE5FE830EF61AF111E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
Manifest number: 0F2B
Signing time: Tue 28 Jul 2026 15:00:21 +0000
Manifest this update: Tue 28 Jul 2026 15:00:21 +0000
Manifest next update: Wed 29 Jul 2026 15:00:21 +0000
Files and hashes: 1: 2KPKzfjzNRS-Or3FLFDshkZ16VU.crl (hash: Hjyq+Tvbv9MSnxkx8Kqz4CSzpPOczLeueaTWbRptqJ0=)
2: 55I-KJfDZCQf3-WIzaOmHLDw0UA.roa (hash: CHL8cZMB7OLAW5NGioo9AKdHll+9RPJn2SB7b3DCiOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b4:bd:e7:bb:04:fe:5f:e8:30:ef:61:af:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Validity
Not Before: Jul 28 15:00:21 2026 GMT
Not After : Jul 29 15:00:21 2026 GMT
Subject: CN=d08797d60d950589a2ba6debc6e8992a18cd1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:6b:7d:2f:74:2b:77:0e:0b:6e:72:dc:3e:
3b:31:dd:7c:b2:6f:a1:c3:f8:db:ec:f0:38:b6:8f:
2c:38:d3:b8:05:c1:ff:aa:51:f9:90:84:0f:2c:37:
7e:27:f2:2d:41:8a:7a:8c:8f:b4:36:5a:d5:45:80:
88:5d:a0:1e:bb:fc:93:23:b5:30:d7:32:7f:a2:74:
b4:22:d5:2e:7c:6a:9c:00:eb:98:7a:83:d0:c6:44:
ea:b4:00:68:c0:e1:30:38:65:ce:12:bc:38:77:47:
aa:75:76:a1:b6:87:ec:bb:40:2e:59:76:17:84:f7:
cd:e7:c8:ce:75:0e:e1:b3:88:10:cb:e1:d4:2e:64:
e7:76:fd:08:a4:9e:bc:db:68:d0:8a:ce:81:5d:72:
e7:1b:f6:25:5d:a7:17:24:5a:e8:87:d3:4b:b6:7d:
2c:f6:45:88:f9:7f:89:f7:b7:3b:c4:c7:a7:02:de:
56:49:5c:e9:67:d6:b3:d6:96:f9:fa:a3:66:ac:9c:
66:cd:55:7c:8e:e5:f7:b3:d9:09:e1:9d:63:bb:e9:
3a:2a:4b:55:f1:04:35:93:05:3f:20:d8:71:34:3a:
99:b1:d4:c7:79:21:b4:58:71:d1:c7:9c:ac:b4:2b:
d1:fa:32:ba:7f:c8:6f:14:eb:e3:aa:df:5d:ff:6c:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:97:D6:0D:95:05:89:A2:BA:6D:EB:C6:E8:99:2A:18:CD:1C:6B
X509v3 Authority Key Identifier:
keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f5:cd:ed:76:82:c7:73:b5:57:b7:b9:fb:ad:43:44:f8:bb:
3c:e1:19:a6:9e:bf:48:d3:d1:78:5f:b5:87:4e:db:3c:73:7c:
ac:38:3d:21:cd:4d:81:13:2a:18:d3:32:b3:83:a8:94:36:67:
bc:5e:20:49:5d:dc:94:b3:5c:00:90:bd:d2:21:18:8e:21:fa:
3e:6c:36:76:b5:e8:c6:1f:90:a8:2b:8e:5c:94:da:c0:1d:81:
b2:f7:e1:b6:65:7c:fc:19:de:28:06:ff:a5:f7:97:10:5d:c6:
45:89:d1:bf:67:c3:9c:8a:df:9b:c1:6d:a2:3e:92:53:df:57:
14:5a:72:5f:a5:4c:33:ed:b9:6a:27:1a:ae:ac:a8:5f:6c:29:
3c:0b:c7:ca:03:cb:e2:c8:aa:f0:1d:1f:d2:b2:fb:0f:8e:47:
63:68:c9:2d:6a:a1:fa:c8:8f:27:d3:0a:0c:d3:0f:25:7f:83:
9a:6b:8d:98:64:ec:26:49:95:93:a9:26:94:e6:a3:a5:40:cd:
36:66:a9:83:b8:d8:49:d0:d3:27:11:7d:53:9d:5b:1c:0b:a7:
ef:4d:67:da:5b:20:3f:2c:65:b2:be:3f:b7:77:f7:ca:09:ca:
29:f1:9e:6d:fd:e9:ce:39:2c:b7:5c:bc:c2:b8:36:b0:02:3b:
03:c6:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:11 2026 by rpki-client