Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: wxLbL4MZzlgJuRlt4hXikHS0+36cZo2fixsTvA0AEOs=
Subject key identifier: AB:3C:5E:5F:DE:DD:0D:56:D0:D1:2F:4F:52:79:CA:9A:5A:43:6E:06
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019FA907A8AD9F12E0373E506B8C9D835473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 19E8
Signing time: Tue 28 Jul 2026 14:01:18 +0000
Manifest this update: Tue 28 Jul 2026 14:01:18 +0000
Manifest next update: Wed 29 Jul 2026 14:01:18 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: azxBZw+ZS0AwkeQtWakPwGgt1enwdJtcoTxyWuJhhTQ=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a8:ad:9f:12:e0:37:3e:50:6b:8c:9d:83:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jul 28 14:01:18 2026 GMT
Not After : Jul 29 14:01:18 2026 GMT
Subject: CN=ab3c5e5fdedd0d56d0d12f4f5279ca9a5a436e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:7c:2c:ea:d8:0c:39:7c:7e:e5:d9:52:6e:
93:b1:00:57:39:03:7a:39:a6:a5:d5:ce:f5:e4:e6:
16:fb:62:0a:11:b6:87:ed:f5:4e:b6:d8:88:34:e2:
03:8e:17:69:94:3e:ef:21:45:8f:94:a8:8d:cb:9b:
96:e0:6c:ed:21:53:88:e8:ce:0b:b6:fe:36:cd:e4:
df:26:c3:0b:c4:e9:5d:05:de:93:4f:d7:6e:63:ce:
fa:c9:60:1c:cf:e1:9f:ad:90:f5:9f:08:55:83:1c:
8d:77:a3:48:41:40:e6:0a:14:44:a2:59:52:ab:1f:
f2:2e:72:a4:bd:ca:45:7a:7d:49:cd:24:7b:f2:20:
c1:b4:75:8e:e5:1d:56:03:d1:35:d1:7c:f6:e9:7e:
57:e1:c2:3d:63:74:0d:14:e5:32:78:e1:2c:b1:ce:
8b:65:c9:b9:b9:ec:d1:fc:97:ec:d1:23:e8:c2:66:
8b:a6:68:f1:bd:8d:38:8e:25:c4:28:76:77:90:38:
6b:52:35:21:4f:02:45:65:13:ad:35:c4:96:01:ad:
5d:dd:4a:63:d0:4b:47:3d:17:47:f7:6b:5f:97:13:
a9:54:17:30:7c:29:06:f2:e8:3c:e4:43:2d:f6:7f:
7e:ea:0a:39:81:23:92:ae:1d:26:73:f6:31:92:a7:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:5E:5F:DE:DD:0D:56:D0:D1:2F:4F:52:79:CA:9A:5A:43:6E:06
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a1:b3:a1:c9:74:55:9c:92:14:ed:cd:fb:dd:ed:d5:d3:a3:
d0:41:e5:07:ca:05:f2:0b:3f:ee:e6:80:4d:5a:58:4f:b4:62:
1a:cd:8c:2f:95:07:56:3f:80:1e:89:5b:5c:f4:8b:55:e9:e4:
60:93:84:13:73:de:89:03:ea:e4:c8:3b:03:e3:b9:aa:ef:73:
69:a8:c2:2d:e1:73:e5:a6:54:73:4c:00:4c:e0:64:42:6d:7f:
2d:0b:bc:8d:2b:ea:38:46:86:5d:57:a4:27:29:d3:d7:cc:2e:
c0:0e:9d:a2:7c:61:52:1f:ef:d3:c5:35:9d:db:0e:ff:e5:0e:
b9:ac:de:59:21:31:99:c4:2a:e7:94:a3:5f:64:81:67:77:8b:
7b:47:2c:c9:76:23:da:f6:a9:49:0f:53:d7:82:59:9d:7e:82:
ce:23:c8:4b:79:02:77:ee:5a:74:19:9f:43:f6:97:7b:e4:6d:
79:45:84:bf:dd:a8:9f:41:eb:16:31:3d:f5:f2:6f:3a:e0:7a:
4f:25:da:19:ab:60:63:2d:83:2d:c8:fc:8a:09:c5:7b:ac:04:
33:af:c6:03:73:13:c3:3a:1e:66:ce:a8:90:ef:99:10:91:8a:
4a:e2:88:65:29:74:2c:fc:fc:23:17:9d:1c:65:f2:bb:8a:96:
e4:d0:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:16 2026 by rpki-client