Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: b7yPa4KtEnEbqdoO8om/LBSjV+xgbjLLNsHPj7a1X8c=
Subject key identifier: AD:8D:ED:79:9C:AD:FC:78:37:26:4C:D3:5F:F3:D9:B1:3E:82:54:2C
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019FA8D005251AB9AF84D22A8A0CF841CAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 13:00:32 +0000
Manifest this update: Tue 28 Jul 2026 13:00:32 +0000
Manifest next update: Wed 29 Jul 2026 13:00:32 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: iluKAdYcrGSG8OiIY2dPG1AlC6W56ZqQVAXQS0s309Q=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:05:25:1a:b9:af:84:d2:2a:8a:0c:f8:41:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jul 28 13:00:32 2026 GMT
Not After : Jul 29 13:00:32 2026 GMT
Subject: CN=ad8ded799cadfc7837264cd35ff3d9b13e82542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:26:fd:b5:dc:fa:3e:eb:41:80:3a:24:87:
44:71:7f:ae:c4:16:7c:34:02:36:bc:30:f9:7f:de:
41:d6:3b:be:2b:a0:fc:54:d0:ba:41:fa:7d:12:1c:
3c:e2:52:ef:85:49:d4:6b:23:15:8e:64:7f:33:55:
62:d2:d0:b5:3a:1c:f2:a9:22:64:ea:fd:6f:a1:6b:
22:fa:85:38:ec:7e:e6:d9:7e:dc:a9:b0:1f:a0:79:
7c:2c:48:a0:64:e0:9b:0c:4a:54:4d:80:ab:82:50:
0e:d1:f0:92:9d:93:cb:e8:f4:87:1e:d2:15:24:01:
d5:67:4c:cb:9e:8a:67:f4:e7:95:ff:a7:ff:56:94:
0d:29:dc:ca:04:6a:44:e2:15:53:d6:8b:f9:fa:5c:
53:bf:b4:c6:17:ff:d3:06:b5:88:45:4c:84:30:b2:
4a:57:fc:c4:73:ea:85:bf:62:8e:b0:b4:a2:f2:cd:
62:51:ed:eb:2d:5d:a4:76:2c:00:6f:b6:2f:e8:c2:
e3:e9:73:cd:9b:ac:91:34:a9:86:73:7a:81:d1:d5:
cf:6e:40:57:53:4d:f6:13:50:cb:cf:db:13:7e:1f:
01:d4:5d:61:f0:ab:64:79:a2:49:4e:86:9c:de:7c:
af:48:23:77:a3:c3:9e:50:fa:ec:f9:c7:a2:ba:92:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:ED:79:9C:AD:FC:78:37:26:4C:D3:5F:F3:D9:B1:3E:82:54:2C
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:09:c2:20:cf:9d:e9:fd:4b:2e:20:78:ec:70:3d:c6:29:d1:
4a:16:7b:67:f0:9e:03:9f:20:61:54:84:ad:45:9d:3f:be:cb:
b4:ed:6b:60:48:4f:4b:ce:d2:1f:bd:4c:4e:9a:8f:32:04:ba:
e2:3e:4f:99:61:89:5b:73:0e:b4:49:ec:79:c2:d9:da:29:29:
ea:6a:e5:2a:61:58:f2:c6:60:12:52:ab:ad:af:90:9f:be:29:
4b:9a:5b:a6:8d:56:c4:c8:76:66:ba:f4:b3:3e:ae:8b:a8:c9:
d8:bc:5a:30:50:3e:25:7f:f9:ce:69:71:89:e5:66:00:e4:e1:
61:30:b7:88:b4:dc:9e:ac:5c:cd:70:98:3a:2f:f1:4e:74:8f:
3a:27:d9:56:ff:1f:29:cd:e9:38:8f:60:c8:91:3e:20:db:28:
ec:df:49:a7:34:d9:57:45:c0:c2:73:45:ab:44:71:54:f0:e7:
6a:8b:47:a1:a5:dc:1a:d5:6d:e2:91:a8:b6:c2:ef:51:ba:dc:
ee:af:83:aa:36:2f:01:a8:c1:94:be:da:87:e7:27:10:42:23:
e6:41:4a:30:87:a2:6f:c4:f8:bf:33:69:93:ad:d7:e8:c5:7b:
17:fe:44:11:1d:af:b1:ba:c2:1b:21:29:48:4a:ff:3a:a3:51:
cb:30:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:49 2026 by rpki-client