Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: /3iHvB90aJSULoat0DIlpZ63MdyftioaUv4wewS1BiY=
Subject key identifier: 64:02:F3:00:62:0F:04:71:66:5B:7B:E8:1E:ED:0D:CF:14:9A:2F:81
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 019FA86242785B98A9B9D76368B1D1E26BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 19CD
Signing time: Tue 28 Jul 2026 11:00:39 +0000
Manifest this update: Tue 28 Jul 2026 11:00:39 +0000
Manifest next update: Wed 29 Jul 2026 11:00:39 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: itNDBW166xT5RSCQ52jqyGxIdQLzrMiE2tCj6MQ3TLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:42:78:5b:98:a9:b9:d7:63:68:b1:d1:e2:6b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Jul 28 11:00:39 2026 GMT
Not After : Jul 29 11:00:39 2026 GMT
Subject: CN=6402f300620f0471665b7be81eed0dcf149a2f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:04:40:8a:76:31:a9:ca:7b:d1:ed:c8:9d:
ab:95:99:e2:2c:46:3d:83:a4:ad:54:9f:bf:fe:7c:
b3:19:6a:ad:95:5a:19:7b:ee:d3:a9:e5:ee:3f:0c:
77:6b:8b:3f:ec:77:82:c0:9f:d7:7d:61:2b:23:67:
7d:ec:21:59:22:81:49:d5:2d:63:46:c7:80:66:92:
5d:4c:7b:3d:8e:b7:2f:63:7b:cd:5c:20:f0:45:9c:
ff:91:3b:6e:83:ce:a2:fb:e4:d5:f6:c1:3e:a5:e9:
d8:19:43:99:23:03:dd:a4:a0:d6:27:40:9c:58:d7:
a1:83:63:0f:90:d6:b4:c8:52:c9:18:89:28:43:69:
34:f8:ba:c3:f7:ed:6e:23:30:9f:a7:2e:c8:a8:ab:
10:6e:d3:5b:56:c8:fc:65:b4:75:d9:18:67:15:b6:
49:bb:86:84:f1:70:12:e1:59:08:f2:dd:5d:24:60:
20:8b:89:48:cb:76:4e:4b:94:b2:da:e6:83:d1:c7:
67:0e:e2:3a:5c:cd:ef:35:b0:0e:84:12:41:0c:93:
c4:8e:c7:6d:70:85:da:1d:03:63:ba:58:0c:90:3b:
27:e5:98:a9:e3:d9:f9:16:ef:30:08:3c:12:42:29:
3d:66:cf:d8:f4:7f:c5:e3:49:53:07:71:6d:ba:e0:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:F3:00:62:0F:04:71:66:5B:7B:E8:1E:ED:0D:CF:14:9A:2F:81
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:f2:d3:70:a2:4f:5f:af:69:3c:3b:8d:57:29:8b:37:c1:
e9:87:83:f9:7a:47:df:c2:27:7a:cb:69:9c:ec:13:b9:59:e1:
42:a5:b0:bb:8b:7e:e5:8c:aa:24:fd:d4:04:64:46:57:4a:05:
d1:33:29:56:41:bd:bb:b5:17:c1:50:5a:81:94:68:ec:86:c1:
0e:6b:23:1d:0e:ab:56:85:90:35:68:72:00:d8:eb:dd:90:03:
37:d2:3c:fe:2a:91:08:73:4a:db:76:48:5a:e6:5c:fc:4a:c3:
64:04:aa:4f:20:d0:a8:be:dc:12:a7:03:27:2a:f0:4e:a4:66:
b2:5e:9f:91:6d:ac:5e:c5:93:50:e4:1b:4a:f3:06:3e:92:94:
1a:ba:06:6a:63:e2:c1:5d:2a:c0:8f:3c:07:ea:4f:f8:b9:a1:
d6:66:7b:35:24:cb:66:e4:d7:25:76:b2:b1:c5:93:8d:0d:5f:
db:b4:42:b8:01:54:16:f4:b3:3e:40:1e:0b:87:ec:5b:22:bc:
e1:da:50:4f:de:11:d0:7d:0d:c3:4d:43:80:f0:f0:f7:52:b3:
4a:a8:2d:23:c6:fa:99:a1:62:9c:83:42:e1:73:2d:6b:3e:97:
bc:f4:52:94:0f:8f:99:7e:a6:2c:5f:ad:d8:17:c1:10:e8:02:
2d:ae:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:24 2026 by rpki-client