Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File: _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier: NjgNn+UvPhjjgH2KkEs1kKTMrzsL9cY07mYgJzpK4dw=
Subject key identifier: 72:A0:B6:CC:B7:29:39:4C:97:C3:49:80:63:72:F1:30:5C:58:5B:EB
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 019FAC3F4874C554F4DA9EA0070C2223AC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number: 1937
Signing time: Wed 29 Jul 2026 05:00:56 +0000
Manifest this update: Wed 29 Jul 2026 05:00:56 +0000
Manifest next update: Thu 30 Jul 2026 05:00:56 +0000
Files and hashes: 1: PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa (hash: oUnwI/hWFydpEOEqwC9HOMZdSyF2a1xfxAbzlwQhdS8=)
2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: wuWAdZsLkyfnQk6JtDjfNr1a2jFi+KJBc7JRXteSHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:48:74:c5:54:f4:da:9e:a0:07:0c:22:23:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Jul 29 05:00:56 2026 GMT
Not After : Jul 30 05:00:56 2026 GMT
Subject: CN=72a0b6ccb729394c97c349806372f1305c585beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:d2:3c:49:72:09:92:9b:db:59:cb:86:7e:
3d:a2:43:00:03:01:80:58:5b:98:9d:94:1d:c1:e7:
fa:6d:8f:d7:c3:fd:51:e0:c4:13:f4:40:e1:55:31:
2a:6b:f3:3e:27:49:bc:dc:cf:7b:c3:13:d3:8f:46:
6c:71:66:85:a3:75:a2:66:cc:2d:b4:a8:c1:f8:0c:
43:48:7f:2e:07:f4:a5:d9:6e:74:fd:c3:4c:a5:a8:
a5:0f:3c:14:b9:56:d0:ae:4a:34:a6:8d:ca:31:ab:
ba:eb:d3:f8:2b:45:77:2b:00:9b:e7:a3:3c:7a:78:
38:9d:68:ea:17:c0:38:d1:a1:46:5e:9c:21:3b:39:
84:50:3a:5c:e3:25:ee:89:1f:0c:27:de:76:b4:35:
19:ad:dd:c9:93:40:97:19:ef:6e:e1:14:89:23:08:
ef:69:0e:f1:66:e6:19:c7:3d:16:be:ba:9b:3a:1a:
69:05:ad:25:64:05:0e:f2:ea:0c:4c:60:df:ab:a8:
81:a2:dd:53:e6:d3:a3:54:bf:d4:25:2f:fe:f0:1c:
bc:96:fe:62:34:58:b7:d7:74:7f:48:c0:29:31:83:
ac:58:95:88:ef:f8:d1:d6:d7:22:dc:88:18:25:5d:
d0:96:41:0c:39:e3:e6:32:c6:25:ac:44:fb:35:b2:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:B6:CC:B7:29:39:4C:97:C3:49:80:63:72:F1:30:5C:58:5B:EB
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:29:ae:83:80:47:f9:7c:c9:6e:bc:4a:5d:4e:2d:d7:36:
bc:36:95:b4:97:39:86:2d:f2:4a:c2:ea:79:b5:2c:e7:27:a1:
4e:cd:83:a1:f8:86:4f:3c:82:28:76:97:f2:02:a4:1d:41:39:
d7:ba:cf:41:a1:b7:64:00:9e:cc:9c:c8:b2:18:0e:e8:02:19:
4e:8a:36:bf:5d:09:8b:e9:aa:0a:cf:45:75:2e:c9:d6:af:46:
5f:a7:24:36:ea:8e:dc:00:32:26:30:17:cc:0e:f4:99:7a:fc:
1d:99:39:b0:ac:2c:15:5a:da:11:f2:f6:38:58:38:67:dd:6c:
47:cd:af:11:3b:ca:ab:17:07:49:e8:10:11:70:18:ad:3c:1b:
08:79:6c:fa:72:fa:33:67:b2:21:26:e3:d0:5a:18:35:c3:33:
71:4e:72:14:41:e5:0c:c4:7f:4b:f6:12:50:4f:7e:2a:7b:c0:
ab:53:b0:d8:9c:56:44:5a:17:bb:07:73:9b:7f:01:95:32:23:
f5:08:70:87:90:a6:85:88:20:15:24:23:da:60:88:e0:01:a4:
df:df:b6:21:3d:aa:e5:0f:ce:39:34:78:e7:4f:18:a5:1a:7c:
fe:ad:f3:9d:51:3e:a7:dd:f7:bd:43:10:26:36:0b:b6:c9:38:
b9:6f:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:30:46 2026 by rpki-client