Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File: 2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier: svKlgeeQ4P5efRVfLG7z/UOPH1FosLM4CQAUT7Cc8Wo=
Subject key identifier: 77:74:B2:E1:11:09:31:FD:43:D0:88:B1:C0:5B:9E:6B:59:D2:1B:44
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer: /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial: 019FA89A3F0830E7C792BDB6AD3481BFC4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number: 185F
Signing time: Tue 28 Jul 2026 12:01:48 +0000
Manifest this update: Tue 28 Jul 2026 12:01:48 +0000
Manifest next update: Wed 29 Jul 2026 12:01:48 +0000
Files and hashes: 1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: 7nv98N8LlOdGgzunehYivgTwIehTnUOiFtV9N44z310=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3f:08:30:e7:c7:92:bd:b6:ad:34:81:bf:c4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Validity
Not Before: Jul 28 12:01:48 2026 GMT
Not After : Jul 29 12:01:48 2026 GMT
Subject: CN=7774b2e1110931fd43d088b1c05b9e6b59d21b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:44:b3:ec:88:63:e7:75:6d:d1:55:31:11:
b2:a9:ca:38:b7:ab:ef:6b:7f:b9:a3:58:38:09:e8:
ea:ae:e9:28:0c:ec:30:03:a8:f1:7a:4f:48:df:07:
f8:d1:c3:f2:76:33:48:d3:4c:73:e8:aa:f5:69:bb:
58:db:7f:71:fc:97:0f:01:5c:a2:2b:7b:7c:eb:d7:
ca:e8:91:6c:e4:98:13:11:14:3a:79:8c:1e:91:6a:
df:22:14:c9:ee:75:5a:bc:d9:0c:47:42:51:2f:23:
0e:fc:c2:5b:f2:bc:06:35:a5:28:4a:48:36:fa:50:
2e:90:e0:11:da:f3:15:30:8c:bc:79:ee:fb:51:4b:
d7:16:8a:06:d1:07:83:df:67:25:4a:30:be:60:49:
54:f8:95:63:97:3e:e7:ee:b1:83:2c:a1:5a:71:2c:
80:d7:bc:eb:7a:8a:37:72:69:4a:a1:ae:13:ad:d3:
10:58:bb:32:b5:40:87:a3:c6:98:f3:1d:6d:82:36:
9b:2f:2e:9f:85:01:45:0e:00:c7:29:8b:53:3d:48:
55:20:b0:0e:d6:58:06:16:e0:33:0b:55:62:d9:5a:
8b:ee:5c:03:49:a2:2c:ed:32:23:8e:70:a2:da:43:
26:b6:d8:4a:0b:b1:30:57:be:75:72:cb:94:0a:af:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:B2:E1:11:09:31:FD:43:D0:88:B1:C0:5B:9E:6B:59:D2:1B:44
X509v3 Authority Key Identifier:
keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:49:bb:c8:00:60:5c:46:80:63:cb:45:33:f5:04:62:e9:
eb:39:a4:3b:be:fc:59:49:2d:ec:24:55:4b:ce:5b:70:1c:b5:
ee:8f:68:5c:70:27:4d:ee:25:a5:af:09:63:4f:86:d6:4f:15:
6c:d2:a6:96:4a:96:d3:6c:54:77:cf:f3:e8:d1:f1:21:2b:35:
db:d0:51:82:9f:84:15:27:24:ce:f2:f0:f7:4d:2a:87:df:bd:
b3:bb:b6:66:44:ce:1d:db:08:e4:76:44:f0:1c:f3:e6:30:0d:
ee:96:87:e1:9f:8a:de:96:c5:54:48:d6:67:65:5d:c4:e4:0f:
77:24:3c:5c:46:26:f1:a9:e9:39:9e:d0:67:45:5c:ce:5a:59:
9c:d4:7a:75:7a:14:ac:9a:48:49:7f:41:16:61:65:1c:b9:b0:
9b:9f:15:b2:a0:0f:d1:e2:e7:cc:55:06:23:a5:bb:33:02:ba:
0e:40:a7:b5:2b:8a:ee:8f:7e:7a:c0:71:7a:4b:f5:79:af:de:
0a:03:5f:9c:42:31:42:69:a4:25:b3:d7:a2:ad:d2:9a:51:29:
b2:86:50:bb:ab:66:1e:06:cf:39:2f:e1:93:0e:22:57:29:e0:
22:25:09:ef:d7:02:a7:38:ea:22:f0:e8:ce:a3:2f:39:b6:e1:
89:3d:38:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omj8IMOfHkr22rTSBv8TCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGRhNzQ0MDBjNzU1NWFiYTI3YzEyODlmYmZiOTBiMzNi
NzlhMjIwHhcNMjYwNzI4MTIwMTQ4WhcNMjYwNzI5MTIwMTQ4WjAzMTEwLwYDVQQD
Eyg3Nzc0YjJlMTExMDkzMWZkNDNkMDg4YjFjMDViOWU2YjU5ZDIxYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D9Es+yIY+d1bdFVMRGyqco4t6vv
a3+5o1g4CejqrukoDOwwA6jxek9I3wf40cPydjNI00xz6Kr1abtY239x/JcPAVyi
K3t869fK6JFs5JgTERQ6eYwekWrfIhTJ7nVavNkMR0JRLyMO/MJb8rwGNaUoSkg2
+lAukOAR2vMVMIy8ee77UUvXFooG0QeD32clSjC+YElU+JVjlz7n7rGDLKFacSyA
17zreoo3cmlKoa4TrdMQWLsytUCHo8aY8x1tgjabLy6fhQFFDgDHKYtTPUhVILAO
1lgGFuAzC1Vi2VqL7lwDSaIs7TIjjnCi2kMmtthKC7EwV751csuUCq8NEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd0suERCTH9Q9CIscBbnmtZ0htEMB8GA1UdIwQY
MBaAFNqNp0QAx1VauifBKJ+/uQszt5oiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm8yblJBREhWVnE2SjhFb243LTVDek8zbWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83NTlhYjQtZWI0MC00MThjLThmMTEt
MjVhNjgyNGUzMTU3LzEvMm8yblJBREhWVnE2SjhFb243LTVDek8zbWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83NTlhYjQtZWI0MC00MThjLThmMTEtMjVhNjgyNGUzMTU3
LzEvMm8yblJBREhWVnE2SjhFb243LTVDek8zbWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV45Ju8gA
YFxGgGPLRTP1BGLp6zmkO778WUkt7CRVS85bcBy17o9oXHAnTe4lpa8JY0+G1k8V
bNKmlkqW02xUd8/z6NHxISs129BRgp+EFSckzvLw900qh9+9s7u2ZkTOHdsI5HZE
8Bzz5jAN7paH4Z+K3pbFVEjWZ2VdxOQPdyQ8XEYm8anpOZ7QZ0VczlpZnNR6dXoU
rJpISX9BFmFlHLmwm58VsqAP0eLnzFUGI6W7MwK6DkCntSuK7o9+esBxekv1ea/e
CgNfnEIxQmmkJbPXoq3SmlEpsoZQu6tmHgbPOS/hkw4iVyngIiUJ79cCpzjqIvDo
zqMvObbhiT04FA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:46 2026 by rpki-client