Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
File: 2kwgul9abQ5TyOwNWhveygb6cKM.mft (raw, json)
Hash identifier: fh3LLdrBxPVmkK+5EY68dunb83WbOX9s+gpc4Ns7Slw=
Subject key identifier: 6F:6C:B3:F4:5D:DA:A4:80:42:CC:B9:4F:C5:59:ED:B4:1C:C8:5D:AD
Authority key identifier: DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
Certificate issuer: /CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Certificate serial: 019FA82BF46E5D814F1074D27B2C3724B346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
Manifest number: 10
Signing time: Tue 28 Jul 2026 10:01:20 +0000
Manifest this update: Tue 28 Jul 2026 10:01:20 +0000
Manifest next update: Wed 29 Jul 2026 10:01:20 +0000
Files and hashes: 1: 2kwgul9abQ5TyOwNWhveygb6cKM.crl (hash: aKfQUsrYpDF65FXbIJsIXmKFot/y243GZ++Lpx3FzZs=)
2: UzXtxDxgkbhFDH_EVPuNo0M10SA.roa (hash: FpOUcZwTu/CVw3/85q0MMvR2nT0K2SD9ZyPfseDyCxs=)
3: WT3vaOwOOseS7yID9cVyq57zIoI.asa (hash: vqCOF7NopSR2Vc1g5HAdbSGBQcXK00JYgksWrl2ekCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:f4:6e:5d:81:4f:10:74:d2:7b:2c:37:24:b3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4c20ba5f5a6d0e53c8ec0d5a1bdeca06fa70a3
Validity
Not Before: Jul 28 10:01:20 2026 GMT
Not After : Jul 29 10:01:20 2026 GMT
Subject: CN=6f6cb3f45ddaa48042ccb94fc559edb41cc85dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:04:40:10:c5:08:d8:c7:f9:08:05:2c:48:
08:ee:a7:09:c1:dc:55:03:7e:1e:4d:e0:8a:e8:32:
61:ce:40:75:89:39:34:04:79:40:ce:a2:7a:87:f5:
57:43:9e:fc:ad:bb:e1:9e:a8:f9:62:ef:90:10:f0:
03:1d:ed:e0:04:c8:f0:07:5c:70:1e:36:b1:c7:dd:
f2:8b:cc:5c:bc:ae:75:6a:27:9b:34:7d:fa:fb:4b:
46:d6:85:29:5c:7d:bb:67:19:6e:e5:3b:f0:26:79:
2e:75:29:77:48:8b:6f:5e:45:6a:f0:ee:81:bf:83:
71:99:b7:3f:23:41:cc:4a:4e:57:98:a8:15:a8:0d:
3b:31:0d:8d:16:a8:41:ec:11:25:1b:53:2e:fb:38:
fd:38:65:8a:c1:75:c3:98:bf:dc:8a:6a:66:6c:61:
45:a7:92:55:f0:4d:dd:e4:74:06:59:1c:5d:a9:ff:
8a:9b:3f:2c:e4:65:b4:19:66:2d:40:87:8a:55:19:
9e:ff:2a:55:33:13:d4:1b:b2:56:90:4f:47:84:8b:
ca:66:fd:dc:24:52:80:be:28:04:ee:95:23:a2:12:
7e:80:46:62:d4:ed:45:68:3e:97:31:1e:e6:20:71:
f2:97:61:97:23:34:a3:66:41:d8:03:fb:89:9a:97:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:B3:F4:5D:DA:A4:80:42:CC:B9:4F:C5:59:ED:B4:1C:C8:5D:AD
X509v3 Authority Key Identifier:
keyid:DA:4C:20:BA:5F:5A:6D:0E:53:C8:EC:0D:5A:1B:DE:CA:06:FA:70:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2kwgul9abQ5TyOwNWhveygb6cKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a2dd97-0493-4a5a-a700-55be7096dbf0/1/2kwgul9abQ5TyOwNWhveygb6cKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2e:f3:40:db:de:64:66:54:76:43:d0:0e:f0:01:e6:ca:45:
a4:b8:08:5b:69:84:4a:b4:e9:ac:71:c0:04:60:92:04:cb:f0:
16:d2:f9:5f:39:a7:11:1b:2c:75:84:2f:75:6e:59:b8:bf:40:
bb:d3:29:a5:85:a2:ad:bd:85:50:73:b2:b1:73:eb:63:01:e2:
7f:0d:91:c0:93:c8:17:44:b4:00:02:16:96:2b:d5:98:46:6b:
27:55:69:cd:db:9b:dc:f1:f0:59:5e:97:6f:68:4a:d2:42:5f:
cf:44:97:5b:1c:ed:ad:d9:2e:bf:66:90:ad:b7:06:c2:5f:33:
c2:7f:9f:3c:9f:09:dd:6f:e6:eb:cd:c2:6b:66:01:44:a3:6d:
fc:1f:5b:3b:68:50:94:86:90:01:bf:42:95:7e:c9:f5:00:35:
54:24:30:cf:b2:ae:24:c6:26:67:28:09:ca:93:7c:3e:ec:80:
ed:d5:be:1c:a3:04:aa:5c:cc:9e:9e:55:2b:0f:5f:c5:88:34:
ff:fc:63:41:fa:ff:4f:6c:0f:06:28:7d:90:8f:ef:38:f1:e9:
2e:42:3e:18:09:81:e3:3b:ef:3a:0e:95:9d:4e:1a:3f:b9:a6:
01:c8:63:65:88:83:b4:0f:13:8b:8e:24:dc:9d:ea:48:70:1c:
43:ca:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:14 2026 by rpki-client