Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: fRxOoPcQVX6DKEeLtSsEkyrMecY3NP2l6oT/DvBZkgU=
Subject key identifier: 1B:B3:79:CA:C4:D4:AE:0A:CC:2D:AA:49:C6:43:D5:85:52:79:A4:C8
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 019FA89914AB1861BEF4301003AF1D1C8733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 12:00:32 +0000
Manifest this update: Tue 28 Jul 2026 12:00:32 +0000
Manifest next update: Wed 29 Jul 2026 12:00:32 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: aE22fqz68zZFt/UDJwxLdI+gnR9o9wr6GnKedIumNtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:14:ab:18:61:be:f4:30:10:03:af:1d:1c:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Jul 28 12:00:32 2026 GMT
Not After : Jul 29 12:00:32 2026 GMT
Subject: CN=1bb379cac4d4ae0acc2daa49c643d5855279a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:90:86:6c:b4:48:fd:c7:e2:1f:01:8a:13:
bc:ad:75:15:2d:15:fb:96:ed:07:1a:2a:e2:cf:7f:
41:9e:36:b0:bf:72:67:78:5d:dc:90:0f:69:16:45:
52:68:ad:49:15:b0:1d:ad:19:2c:12:c7:41:9d:e0:
4f:09:da:72:e2:3a:79:06:e8:70:df:0e:30:df:7a:
30:f8:fa:96:18:3c:1e:7e:f5:87:d9:7e:15:4a:ed:
2e:f4:cd:d5:e2:0c:a4:ce:d9:e9:dd:7a:2f:32:17:
ab:23:5b:03:a6:3c:29:11:ea:25:4f:8b:e8:8b:56:
e3:66:0d:0f:90:8a:5a:37:69:79:b9:44:59:8a:c6:
f6:a3:f6:35:a9:d7:fe:52:dd:1f:a3:88:1f:af:98:
67:81:ec:ea:c0:6f:f4:0c:cf:b0:bc:6f:8f:93:33:
28:f0:7b:be:32:45:e1:b0:6a:2d:d4:76:47:d1:8f:
0d:c2:73:85:b1:ed:da:30:ca:a9:5d:65:31:4b:58:
eb:1d:97:64:e4:3c:ea:f6:3a:24:37:43:e7:37:74:
ed:e5:f7:24:7f:5e:47:89:ed:fe:c1:7c:04:f1:6f:
de:82:b3:44:3a:4a:f3:bd:05:de:62:54:c1:8b:52:
f6:f9:75:15:cb:fa:81:88:dd:4b:6e:4a:d4:2a:66:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:79:CA:C4:D4:AE:0A:CC:2D:AA:49:C6:43:D5:85:52:79:A4:C8
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a2:b3:75:d8:bf:c1:bf:f8:ec:c7:4c:62:bb:16:ed:7a:97:
a4:02:b4:05:c9:62:c9:1a:aa:87:7a:f9:61:87:93:61:8d:53:
ca:eb:ea:f3:d9:2c:95:e7:ee:ce:0b:f1:07:0a:08:80:5e:93:
e1:40:bb:6a:3a:95:0e:54:2c:ee:2a:5f:09:db:33:f4:28:bc:
a2:44:fd:fc:f0:fc:23:2a:55:73:37:9c:c0:3e:45:25:76:d8:
b7:0d:c1:bb:f2:1d:7a:e0:3d:4a:91:16:fd:31:7d:2a:9c:06:
45:7e:7b:49:f9:42:61:4d:b1:32:1d:99:20:8c:31:42:6b:93:
52:9d:92:b7:78:14:a3:9a:c4:4f:27:dd:9c:23:9b:da:30:74:
26:cd:9c:75:c1:16:3e:a2:8b:e2:f8:4a:d9:a6:6c:ff:e5:46:
a4:b5:7e:eb:ab:d5:6c:4f:0a:b2:37:d1:48:bb:51:18:6a:ff:
88:c8:65:c7:e3:e3:5e:bd:05:ec:4a:2d:a1:87:f8:5f:3f:61:
df:13:9a:5a:d8:6f:bf:60:13:8f:c7:50:21:d2:73:da:2d:a6:
ed:99:a5:89:42:e1:f1:b1:63:0c:3c:09:c5:03:35:7e:d1:75:
05:4f:de:30:12:a8:06:21:f7:5b:a0:df:f0:e2:05:cf:86:01:
10:e1:70:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omRSrGGG+9DAQA68dHIczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2ZkNjBjYzhlN2JiNjI5MzIwNGYzMGEyMjZlMDA4NzUy
NGIwYjUwHhcNMjYwNzI4MTIwMDMyWhcNMjYwNzI5MTIwMDMyWjAzMTEwLwYDVQQD
EygxYmIzNzljYWM0ZDRhZTBhY2MyZGFhNDljNjQzZDU4NTUyNzlhNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMKQhmy0SP3H4h8BihO8rXUVLRX7
lu0HGiriz39Bnjawv3JneF3ckA9pFkVSaK1JFbAdrRksEsdBneBPCdpy4jp5Buhw
3w4w33ow+PqWGDwefvWH2X4VSu0u9M3V4gykztnp3XovMherI1sDpjwpEeolT4vo
i1bjZg0PkIpaN2l5uURZisb2o/Y1qdf+Ut0fo4gfr5hngezqwG/0DM+wvG+PkzMo
8Hu+MkXhsGot1HZH0Y8NwnOFse3aMMqpXWUxS1jrHZdk5Dzq9jokN0PnN3Tt5fck
f15Hie3+wXwE8W/egrNEOkrzvQXeYlTBi1L2+XUVy/qBiN1LbkrUKmbv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuzecrE1K4KzC2qScZD1YVSeaTIMB8GA1UdIwQY
MBaAFNp/1gzI57tikyBPMKIm4Ah1JLC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3Zjkt
ZDZhYjkzZWQ5ZmI1LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3ZjktZDZhYjkzZWQ5ZmI1
LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKKzddi/
wb/47MdMYrsW7XqXpAK0BcliyRqqh3r5YYeTYY1Tyuvq89kslefuzgvxBwoIgF6T
4UC7ajqVDlQs7ipfCdsz9Ci8okT9/PD8IypVczecwD5FJXbYtw3Bu/IdeuA9SpEW
/TF9KpwGRX57SflCYU2xMh2ZIIwxQmuTUp2St3gUo5rETyfdnCOb2jB0Js2cdcEW
PqKL4vhK2aZs/+VGpLV+66vVbE8KsjfRSLtRGGr/iMhlx+PjXr0F7EotoYf4Xz9h
3xOaWthvv2ATj8dQIdJz2i2m7ZmliULh8bFjDDwJxQM1ftF1BU/eMBKoBiH3W6Df
8OIFz4YBEOFw9g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:23 2026 by rpki-client