Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: 5H+DVlV9cZR9p71j2UreWCMRh+zG5imW69m2YLnQ4iw=
Subject key identifier: B0:38:52:76:19:93:75:FD:26:03:15:4A:D1:2A:05:94:63:49:8C:E0
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 019FA82B6A5712D831914E8C4B522DDC06B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 10:00:45 +0000
Manifest this update: Tue 28 Jul 2026 10:00:45 +0000
Manifest next update: Wed 29 Jul 2026 10:00:45 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: 3giK3Obm8dE4w85GaIsqSgBnhpQI4SE1lh6DJdoz6FE=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:6a:57:12:d8:31:91:4e:8c:4b:52:2d:dc:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Jul 28 10:00:45 2026 GMT
Not After : Jul 29 10:00:45 2026 GMT
Subject: CN=b0385276199375fd2603154ad12a059463498ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:a5:8e:08:1c:93:46:7e:2d:43:56:ec:77:
aa:60:96:0f:31:f1:3a:51:3a:60:ab:30:f6:4f:9a:
3b:df:97:7d:81:28:b4:b4:d2:77:b3:92:d9:c8:9f:
9a:bd:a3:73:00:78:73:95:8c:d0:27:fd:05:b6:ff:
63:42:e7:58:7f:8b:81:27:1d:ca:98:dc:b4:cc:b8:
55:2e:be:1f:86:8a:74:01:6f:22:f3:49:57:f5:8a:
a1:b8:fc:6e:2e:7b:07:97:46:bb:fa:8b:99:cc:98:
d7:7b:a3:50:54:9b:6f:d7:a9:07:3c:20:5d:b7:d9:
a5:fc:4f:eb:1d:59:2d:5d:f1:ab:48:e8:9b:60:0e:
04:2c:ce:9c:4b:77:99:00:a4:e5:1c:97:79:cc:8e:
52:6e:4e:32:f5:94:5a:4e:e1:e6:45:44:4a:40:65:
cc:b1:ff:01:96:46:1b:9b:ba:33:f4:3a:fe:96:77:
a0:09:53:36:ad:3c:05:b1:9f:7e:b4:07:18:75:0c:
95:1a:72:99:a0:67:6b:e9:bd:9f:9e:fd:1b:93:61:
2e:72:a8:f6:b6:09:86:23:a9:d2:98:b6:00:14:b2:
f5:19:89:68:36:90:72:29:1e:e0:2a:df:a0:c5:bf:
73:bc:4f:c8:5c:bb:40:f2:df:03:36:76:56:00:ea:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:52:76:19:93:75:FD:26:03:15:4A:D1:2A:05:94:63:49:8C:E0
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:7d:2c:f1:d8:6c:6a:3c:4b:5f:f0:bc:ad:22:60:4f:b3:
d3:39:f4:7e:14:1e:c6:25:27:f9:8b:a4:91:b8:d8:52:df:70:
40:6b:6f:66:e3:4d:5a:a8:49:f7:51:e1:cc:22:36:c7:d8:80:
3d:f4:81:21:73:19:28:ae:69:bc:ff:90:e2:2f:d3:eb:54:bf:
1a:32:d9:25:68:96:be:f8:42:6b:2a:28:ed:e3:36:ca:7f:2f:
f1:ff:70:ca:06:20:94:89:3c:45:a9:54:b7:a4:cd:47:5e:fa:
b7:d0:74:39:8e:89:8f:60:ae:e1:8d:04:a0:7a:d2:9e:57:a6:
19:67:a2:fa:a1:91:28:e7:97:e6:72:04:39:f9:62:03:29:18:
34:a5:1a:46:bb:ad:9d:a8:a9:c4:ed:f2:4a:48:e3:11:a7:19:
71:f8:9b:6b:93:b9:a7:f3:dc:62:32:08:b6:43:13:1d:95:67:
fa:4c:cf:06:fc:a0:7c:50:b8:65:3d:f5:e7:48:d3:87:d1:03:
ac:e8:c5:cb:f7:91:5c:24:5b:90:5d:9d:fc:96:f2:e2:c6:00:
b4:11:27:67:18:e6:7d:9b:51:15:4e:3b:bb:e2:b4:b1:90:12:
f8:78:a5:2b:ac:50:40:f7:0a:28:52:d4:59:06:c7:ad:21:d3:
5b:97:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:18 2026 by rpki-client