Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
File: 2cj-O3Ss0SRgHvsTBk98cwBglno.mft (raw, json)
Hash identifier: mEuO0YyZ7wZLGR9LgEQW0IA9+JP+0xnvdouDf7SRfAc=
Subject key identifier: 4B:30:F3:6A:C5:3B:50:B5:A7:C4:FC:1E:6E:42:1E:EF:45:26:83:9B
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Certificate issuer: /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial: 019FAC76FCFADBA6260086DBA9DFB20DE6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:46 +0000
Manifest this update: Wed 29 Jul 2026 06:01:46 +0000
Manifest next update: Thu 30 Jul 2026 06:01:46 +0000
Files and hashes: 1: 2cj-O3Ss0SRgHvsTBk98cwBglno.crl (hash: anNi369TCHWEy64O8zvimbpKt4g+lxlTkrosL0O6hwE=)
2: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (hash: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:fc:fa:db:a6:26:00:86:db:a9:df:b2:0d:e6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
Validity
Not Before: Jul 29 06:01:46 2026 GMT
Not After : Jul 30 06:01:46 2026 GMT
Subject: CN=4b30f36ac53b50b5a7c4fc1e6e421eef4526839b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:11:e3:26:0a:36:25:a4:00:35:80:cb:58:
d5:1e:21:99:14:66:93:63:10:aa:e4:c5:3c:58:3e:
69:44:83:15:05:6c:d5:92:11:11:5c:9b:d5:38:d5:
d5:4d:6e:ce:56:7a:39:07:1e:d1:d2:83:af:33:a1:
bc:4d:6b:93:77:0a:af:50:3b:87:3b:ee:f5:39:d7:
12:95:7c:d7:cc:51:e8:3a:e6:66:f0:09:d8:6c:81:
e4:0f:5d:6a:85:5c:93:8c:d3:e9:39:17:60:d9:84:
39:e5:ca:63:15:5f:95:ea:0a:ad:9e:7a:32:74:ff:
ea:99:f1:09:83:ce:8a:f8:2e:49:5c:d8:b8:78:61:
ea:9a:69:12:a6:91:8e:a1:2c:21:ba:10:f6:bb:af:
ca:8e:b9:f6:5a:89:26:c0:ca:dc:73:ba:7b:fa:5d:
10:3d:c9:af:a4:53:5f:55:26:b4:b3:a3:15:ef:ec:
e7:20:d4:f3:e1:bb:f3:3c:20:c6:61:70:c6:91:ec:
00:dc:1f:56:28:f0:b2:0c:d1:28:90:95:9c:b6:fe:
a3:2e:b9:68:2b:e7:e2:2c:70:6a:8f:6b:18:8a:c2:
44:12:9d:1c:86:a9:1d:72:b8:61:56:c0:47:ed:3d:
43:df:e3:8d:6f:1f:a7:11:16:a6:bb:f4:7c:c4:b4:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:F3:6A:C5:3B:50:B5:A7:C4:FC:1E:6E:42:1E:EF:45:26:83:9B
X509v3 Authority Key Identifier:
keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8f:e7:73:86:26:c8:4a:44:dd:8d:51:e3:c6:14:31:0b:69:
dd:de:7a:7b:80:3d:e8:d0:8a:3d:93:fa:c8:ec:82:f6:e7:bd:
64:1f:ef:23:61:d1:cb:95:06:43:95:a0:e9:12:ce:bb:f4:3e:
8a:ee:52:85:1f:55:db:c7:f0:3e:4a:5b:d6:df:85:38:b6:ed:
77:79:f4:3b:ff:da:09:f1:1d:09:91:f0:47:98:00:e5:5a:07:
69:48:29:d2:bc:91:ee:d3:dd:f3:6a:d5:dc:77:ac:e8:86:1c:
01:43:43:ae:ee:13:c2:e3:df:a4:16:4d:0f:80:2b:c1:da:54:
0a:fe:de:69:09:6f:f2:fa:70:32:01:00:7c:c7:34:55:47:d5:
c2:35:89:b1:1c:27:28:de:e8:cd:b0:51:d8:4d:d7:c2:94:1f:
68:72:bb:65:8c:21:d5:64:78:12:e5:a8:e6:a0:09:46:ca:c5:
d9:60:94:8c:b6:3b:13:4d:b2:b2:8a:67:95:ce:48:7e:27:da:
c7:d9:cb:0c:24:5e:b7:4f:92:c7:60:55:b9:73:2d:a3:77:2b:
6f:22:ce:be:e9:52:ad:c0:47:79:a4:b1:0b:34:7d:8c:67:05:
36:be:2f:f1:85:0b:58:e2:1b:ff:de:02:03:84:ad:0a:82:36:
25:4e:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:21 2026 by rpki-client