Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: Qc+46ZiX1t/CbfpsDgvdnRj/udxqjVBqawESW2RL3TU=
Subject key identifier: C5:4F:15:9E:F3:81:3D:B8:35:C8:71:70:4E:39:9B:E3:9A:CD:53:0A
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019FAA1A33AF8563E1CE9F7E65B14B006451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 19:01:11 +0000
Manifest this update: Tue 28 Jul 2026 19:01:11 +0000
Manifest next update: Wed 29 Jul 2026 19:01:11 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: MxqCYERBBNQuZpPPeam36WWnUI3O/jnjoO7FV0c8toU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:33:af:85:63:e1:ce:9f:7e:65:b1:4b:00:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jul 28 19:01:11 2026 GMT
Not After : Jul 29 19:01:11 2026 GMT
Subject: CN=c54f159ef3813db835c871704e399be39acd530a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:f7:a5:4b:ad:ba:8f:48:a4:60:dd:7f:6d:
12:8c:ff:23:f9:67:73:73:c8:27:b1:58:6e:59:64:
03:d2:4b:7d:73:6c:64:98:1a:35:30:f0:00:d6:9d:
a9:f5:d7:b6:52:42:08:0f:c0:6c:96:3c:25:1a:39:
13:d7:73:98:0a:dd:32:8f:2f:46:f3:11:43:82:81:
a8:4b:1c:c4:d3:55:70:83:15:45:b2:13:d0:d6:25:
70:bb:5b:36:bc:d4:23:f9:11:f2:57:73:79:7f:7f:
02:f8:12:56:f9:8d:81:83:23:3d:06:b4:d5:2f:17:
6a:2b:9a:ad:f4:c6:56:e2:e7:33:c9:d3:14:08:f0:
b9:16:46:eb:f8:2d:a2:54:8a:3b:fa:7a:5f:dc:04:
97:cd:e9:ce:97:a5:74:b7:a5:0f:cf:54:b2:bb:f7:
81:f9:d9:3d:d7:14:56:18:08:fb:2a:ce:71:60:43:
0e:27:2f:c0:a6:36:22:8e:02:66:90:70:4e:51:a4:
1d:36:63:78:8d:da:47:65:04:76:0b:1f:3b:e8:69:
36:36:ca:8a:63:17:96:d1:51:72:16:74:2e:dc:bc:
15:71:6a:39:62:97:7e:84:2b:d3:cd:f7:32:11:62:
be:35:3a:58:be:d8:2d:a9:2a:17:f9:61:36:db:bc:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:15:9E:F3:81:3D:B8:35:C8:71:70:4E:39:9B:E3:9A:CD:53:0A
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:af:fa:1d:cc:16:1e:76:04:28:de:0d:44:9c:04:08:07:73:
9f:7e:bf:78:af:c1:41:f4:40:d6:f0:bb:2a:13:e4:c4:f6:47:
7d:65:2b:bf:e9:f7:73:91:af:f3:be:13:ed:89:20:81:72:d2:
0d:de:09:0d:9a:57:60:1d:68:b0:ed:9e:f3:3a:2b:01:a8:fd:
20:59:a7:f3:37:c0:c4:06:90:97:41:2c:27:30:33:c2:29:ef:
54:c8:18:1d:02:4c:c4:3a:38:5e:c7:81:a5:3e:9f:20:d9:8c:
56:c2:a0:e0:f8:3a:50:c8:78:4d:06:0f:ea:d8:fd:79:37:9e:
ba:df:27:c0:b5:38:fd:8c:9d:90:3f:9a:93:d2:3e:a2:b9:9e:
8f:d0:cc:7c:20:61:42:b0:ef:34:b2:25:81:e9:88:0f:44:58:
8a:55:53:a8:7a:fd:9a:b9:6e:3a:bc:2d:f5:9c:f7:d8:c3:61:
9b:09:c3:a0:af:0e:1b:3f:cf:73:8f:05:a0:3e:dd:38:74:ed:
73:a3:bd:c5:e0:2a:03:2d:70:5b:6d:54:b7:35:76:ca:4f:f6:
bc:f2:35:20:d3:10:77:c9:6b:56:ef:ad:7c:d2:0d:16:c7:04:
85:24:0f:41:6a:0f:e6:af:b0:49:e0:14:a9:50:56:99:fa:ad:
e3:02:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:59 2026 by rpki-client