Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: +jC3eOYCVkoz4HdDukGqVfE1L7yd57G1ZXRCB7uEnaE=
Subject key identifier: CB:9A:40:65:13:BA:9E:0C:F8:35:BA:2B:7A:DC:C0:2B:C6:41:A7:40
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 019FA8D0226E60A24E02DFB5660B673F6EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 1962
Signing time: Tue 28 Jul 2026 13:00:40 +0000
Manifest this update: Tue 28 Jul 2026 13:00:40 +0000
Manifest next update: Wed 29 Jul 2026 13:00:40 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: 2pfe8FHvgdQDzMnMrPspn8AxCnyPhnpr6Q2bUFiMhNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:22:6e:60:a2:4e:02:df:b5:66:0b:67:3f:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Jul 28 13:00:40 2026 GMT
Not After : Jul 29 13:00:40 2026 GMT
Subject: CN=cb9a406513ba9e0cf835ba2b7adcc02bc641a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:b5:22:41:15:e7:2d:41:12:72:10:1e:04:
22:2d:fd:22:23:48:63:4e:3f:4c:3f:8c:2b:f2:c3:
7a:12:9f:15:4d:89:60:c1:56:17:38:23:33:c5:19:
2c:5a:60:6f:56:e5:fc:c3:4a:5f:c6:d5:a8:7f:6e:
6e:1b:e7:03:1e:57:38:32:9d:4c:0f:bd:37:59:b6:
c1:11:b3:6a:ec:59:e4:2e:57:06:db:c9:e3:51:e7:
d7:cc:9e:3d:64:7d:8b:ec:25:cf:f5:22:a2:0c:d4:
f0:49:70:2e:fd:e0:d7:17:72:1a:86:2b:b4:01:3c:
55:8b:92:f1:7a:29:7c:8b:bf:b4:7c:b5:93:71:f6:
02:2e:7a:f2:26:0a:b7:d5:9e:2a:34:17:d7:2f:50:
22:9d:46:c3:6c:93:51:98:a7:fb:fd:0f:c2:79:e7:
94:11:86:77:6b:9b:ef:6d:81:c3:65:c5:41:ba:24:
98:00:56:80:d2:32:1f:05:6e:fd:7d:cb:8c:5c:20:
6b:9a:34:97:c5:d7:3a:08:f6:9f:c3:81:9e:8e:64:
b3:77:01:a5:d3:00:7e:46:f7:76:3c:09:93:cd:76:
3e:a8:9c:1b:e5:25:d6:21:fa:06:5e:a6:20:94:8d:
8f:a0:32:7c:92:82:66:0d:f2:74:fb:29:ef:aa:30:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9A:40:65:13:BA:9E:0C:F8:35:BA:2B:7A:DC:C0:2B:C6:41:A7:40
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ff:d4:94:5c:2c:5d:ab:0e:ae:62:e0:4c:02:d3:7c:5a:a7:
f6:93:7c:3f:a0:18:26:1b:0f:d5:df:85:04:1b:6f:25:ca:72:
9b:31:08:71:2b:fc:d2:81:b3:0b:b5:79:48:67:61:a2:a8:f8:
71:3e:17:94:7a:2b:95:23:c7:63:ef:e1:c5:aa:e7:95:c4:d6:
a0:1c:4b:fb:f4:63:f6:09:6e:c7:5f:c3:62:f1:02:d1:79:1c:
27:bd:92:21:5d:17:62:85:19:97:b5:7e:ac:8f:6a:fd:9b:93:
13:54:ba:3d:0f:be:c2:80:db:70:ec:07:c9:64:ab:09:2f:28:
53:c9:44:61:f9:95:27:50:ea:8e:c5:47:b4:25:59:25:89:8c:
96:99:ff:f2:93:74:51:f5:db:39:b8:7a:74:ba:dc:00:6e:d2:
75:4c:d3:1f:7f:f4:1b:d5:67:66:de:e7:9b:7b:06:78:fe:7b:
df:36:56:ad:7b:af:ec:11:34:21:0f:2f:8f:e6:ad:27:ea:f0:
9c:95:39:14:6d:f5:ec:e0:3a:8f:ea:d0:db:ea:3d:0f:3f:f5:
49:05:72:c7:e4:2b:df:aa:02:77:af:17:6b:9a:6b:35:62:ea:
15:d9:05:06:c7:c5:ef:eb:09:bc:a3:39:70:70:d3:d8:a2:c4:
d2:52:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:07 2026 by rpki-client