Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: zf75oKTv1A1YSmyElIbluTR9EJ8UNzE2C57WqgIOkiA=
Subject key identifier: 25:03:54:79:4E:8E:50:52:46:B5:97:D6:8A:55:E0:F2:D2:E7:C1:C5
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 019FAAF56AEEBA15086ADC7F3F0232C7C033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 23:00:38 +0000
Manifest this update: Tue 28 Jul 2026 23:00:38 +0000
Manifest next update: Wed 29 Jul 2026 23:00:38 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: 9VYd1ZguOam/o0crGuTgVg/Kz8rIF5GqCD37ctA2c3g=)
2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:6a:ee:ba:15:08:6a:dc:7f:3f:02:32:c7:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Jul 28 23:00:38 2026 GMT
Not After : Jul 29 23:00:38 2026 GMT
Subject: CN=250354794e8e505246b597d68a55e0f2d2e7c1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:ca:5a:aa:42:2c:c1:f6:46:42:48:b0:46:
5b:92:6f:47:a7:e9:bb:42:a3:70:4f:4d:0c:70:cf:
cb:02:69:e4:80:19:77:30:09:bf:ca:cf:f1:df:11:
33:9f:22:78:7f:df:02:ec:77:03:35:86:cf:f3:a5:
7f:2a:39:8e:10:90:ba:80:69:17:c9:7b:be:5d:4c:
6b:c7:5a:f4:d8:93:64:4c:4d:0b:b8:a4:ea:47:11:
77:2d:e0:91:8b:26:1c:71:36:76:9c:5d:88:34:8c:
b7:89:33:93:2b:d4:24:be:b2:41:19:6c:fc:c2:cd:
75:b4:db:58:f7:f9:0f:30:da:b4:a1:4f:be:ab:52:
25:36:d5:2b:5b:41:66:4a:7a:c2:16:f0:85:cf:13:
8a:9d:f7:b2:d4:24:8a:63:2e:47:d1:d6:4b:f5:39:
b9:06:2b:09:43:02:e3:b9:f4:36:3f:0b:93:fd:97:
66:ee:a2:58:2b:53:32:cb:6c:09:79:84:08:2a:a9:
ff:60:1c:b1:32:eb:ff:3f:fc:9d:ff:bb:8a:5b:f7:
bc:ec:92:dd:6c:f0:1c:a3:29:8b:16:80:14:44:79:
f4:ac:a5:67:44:df:66:9e:0e:e9:92:e1:e5:fa:f2:
54:d1:09:d0:da:c4:4a:b9:a5:89:90:12:93:b7:8e:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:54:79:4E:8E:50:52:46:B5:97:D6:8A:55:E0:F2:D2:E7:C1:C5
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:25:95:34:4f:70:b0:c3:ca:a9:03:be:ee:19:1c:2e:ba:
2e:1d:bf:95:82:86:f8:40:5a:25:21:1a:0e:e5:c8:a5:f9:2e:
40:b7:a7:2d:fe:ea:a4:4b:36:2f:77:d8:6c:fb:71:fb:a9:65:
2e:77:2a:10:43:e1:6a:08:59:5f:da:e6:c8:77:e7:a4:bc:2d:
81:f1:f0:d9:e0:51:9b:75:d5:88:da:4b:a4:7a:f7:68:3a:3c:
71:bb:0c:3d:4b:be:e1:6b:b6:ba:24:e6:61:0e:59:53:61:66:
03:c3:3f:dc:c1:f7:c8:64:aa:28:0b:ba:04:5b:1c:13:2a:54:
38:20:52:17:dc:d5:b5:e6:7d:cd:6e:7a:6c:3e:df:b3:21:e9:
bd:24:ff:63:d0:4b:13:26:93:bd:75:1b:ff:5d:db:cd:69:7a:
16:fa:80:4a:9a:fc:d5:75:81:03:89:ce:08:0a:1a:5c:5b:3e:
80:6e:57:e1:d8:ee:fa:70:47:94:6e:1d:5b:66:4d:d4:b5:14:
d6:da:ac:8c:e6:9d:d2:c4:ce:25:71:0f:a0:65:5b:71:bf:69:
ae:23:c5:d5:c0:26:ab:78:a4:17:1e:12:f2:18:45:45:bc:65:
3f:f9:7c:14:4d:49:6f:8e:86:a0:71:f7:fc:a1:73:87:d9:bf:
79:0e:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:30 2026 by rpki-client