Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: PCUcvm6mOkubfvTmhkaNXN6TQkGsMTar/L4rwnY4HYg=
Subject key identifier: CE:A3:2E:74:DA:9A:F1:63:B8:FB:F7:0E:43:B4:3F:5B:BA:B2:F6:19
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019FA899305790F29058665702C15D0BEDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 16DA
Signing time: Tue 28 Jul 2026 12:00:39 +0000
Manifest this update: Tue 28 Jul 2026 12:00:39 +0000
Manifest next update: Wed 29 Jul 2026 12:00:39 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: WuApext3D3tcJ8y02nKbCzOITMVdwvvmKHrEEmv/T/w=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:30:57:90:f2:90:58:66:57:02:c1:5d:0b:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Jul 28 12:00:39 2026 GMT
Not After : Jul 29 12:00:39 2026 GMT
Subject: CN=cea32e74da9af163b8fbf70e43b43f5bbab2f619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:7a:3a:d9:53:94:6b:66:a1:43:9c:35:59:
84:16:d7:73:89:99:91:e5:98:8c:c8:ff:60:d3:a0:
84:48:1d:55:11:26:5b:dc:e0:5c:b5:7f:89:c3:59:
50:81:63:fb:51:73:c9:a1:b4:44:0c:ad:57:cf:4a:
6d:12:e5:70:5f:7f:de:e5:a9:0b:22:44:55:f3:7a:
bc:b5:22:07:c4:43:50:1b:00:f8:13:5b:7b:cb:07:
ab:8a:ea:97:e8:47:09:c9:63:89:e4:9a:32:df:75:
b1:d8:9d:b5:c6:69:1e:a5:4b:97:25:34:20:bf:f3:
a0:3f:87:ab:1f:a1:4d:cc:40:59:67:86:b2:f6:0c:
43:63:30:38:30:e1:2e:5f:06:8b:d0:2e:91:fa:7e:
a5:75:77:14:5f:0d:61:74:dd:2f:43:0b:78:e7:70:
a7:3a:9e:77:d3:c8:c7:9c:23:9b:0f:3e:05:cb:0a:
88:34:fa:38:90:b0:d0:b1:2e:7c:eb:66:54:43:53:
f0:53:95:68:ad:4b:1e:2c:ea:cf:d3:d7:0a:ff:1e:
42:b9:ca:91:2f:0e:04:c5:80:08:21:1e:81:4f:c1:
9e:10:d4:21:ad:5f:d3:f6:21:f8:f7:67:f9:99:f7:
72:00:94:1c:72:1d:e0:fb:45:64:47:07:8d:f4:55:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:2E:74:DA:9A:F1:63:B8:FB:F7:0E:43:B4:3F:5B:BA:B2:F6:19
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3d:95:ba:71:2c:a5:ab:3b:37:14:8f:61:1e:1f:9b:65:81:
45:7e:27:50:64:e7:ca:17:90:2a:fb:77:04:39:92:04:52:32:
03:4d:de:ad:db:ce:54:ac:82:d2:bb:bb:f9:3b:40:7c:9c:71:
3b:59:91:00:bd:37:fb:e9:33:b6:a1:89:f9:9e:64:25:9a:75:
5c:87:0b:43:55:1e:b7:60:2b:43:7e:a5:c0:be:04:12:8d:04:
cc:a1:d3:04:16:8d:5a:fc:3c:77:8a:45:dc:ab:10:92:46:7b:
c3:5f:b1:05:21:0e:e2:0a:c6:a7:79:5f:b9:9e:ea:3d:fa:fb:
5b:74:70:9d:e5:73:1f:28:36:8f:59:00:54:95:5d:67:ce:ff:
a4:d1:00:c6:50:a3:50:55:60:ab:88:93:00:e3:c9:bd:6e:c9:
64:06:e5:a6:36:cf:30:5f:e9:5d:98:82:4e:e1:5b:f6:84:a2:
15:c7:e2:0d:7a:71:84:41:40:30:c8:07:99:93:7c:77:4a:a0:
a0:02:d3:c8:84:e2:8c:47:07:7d:00:d3:62:0f:dd:14:46:30:
42:1f:3d:7f:a3:ae:90:0a:2d:2f:a9:11:4a:bf:82:8f:46:38:
63:df:b1:65:60:54:96:b3:c1:65:25:0b:b2:52:3f:24:67:22:
b9:c9:20:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omTBXkPKQWGZXAsFdC+2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl
ZTUyM2YwHhcNMjYwNzI4MTIwMDM5WhcNMjYwNzI5MTIwMDM5WjAzMTEwLwYDVQQD
EyhjZWEzMmU3NGRhOWFmMTYzYjhmYmY3MGU0M2I0M2Y1YmJhYjJmNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Th6OtlTlGtmoUOcNVmEFtdziZmR
5ZiMyP9g06CESB1VESZb3OBctX+Jw1lQgWP7UXPJobREDK1Xz0ptEuVwX3/e5akL
IkRV83q8tSIHxENQGwD4E1t7yweriuqX6EcJyWOJ5Joy33Wx2J21xmkepUuXJTQg
v/OgP4erH6FNzEBZZ4ay9gxDYzA4MOEuXwaL0C6R+n6ldXcUXw1hdN0vQwt453Cn
Op5308jHnCObDz4FywqINPo4kLDQsS5862ZUQ1PwU5VorUseLOrP09cK/x5CucqR
Lw4ExYAIIR6BT8GeENQhrV/T9iH492f5mfdyAJQcch3g+0VkRweN9FXN6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6jLnTamvFjuPv3DkO0P1u6svYZMB8GA1UdIwQY
MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct
MGJmNTkwNWIzNWVmLzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm
LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT2VunEs
pas7NxSPYR4fm2WBRX4nUGTnyheQKvt3BDmSBFIyA03erdvOVKyC0ru7+TtAfJxx
O1mRAL03++kztqGJ+Z5kJZp1XIcLQ1Uet2ArQ36lwL4EEo0EzKHTBBaNWvw8d4pF
3KsQkkZ7w1+xBSEO4grGp3lfuZ7qPfr7W3RwneVzHyg2j1kAVJVdZ87/pNEAxlCj
UFVgq4iTAOPJvW7JZAblpjbPMF/pXZiCTuFb9oSiFcfiDXpxhEFAMMgHmZN8d0qg
oALTyITijEcHfQDTYg/dFEYwQh89f6OukAotL6kRSr+Cj0Y4Y9+xZWBUlrPBZSUL
slI/JGciuckgsw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:12 2026 by rpki-client