Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: N7ltjtru0pfMmHYRHbV/06j7edElxibOr3q3Wki4asI=
Subject key identifier: 76:9E:0A:C9:AF:2A:A5:C0:F3:26:41:2C:3A:08:1E:7B:37:B2:1A:52
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 019FAAF564FBE0659F2878DB5CE7763FA54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 0B7C
Signing time: Tue 28 Jul 2026 23:00:36 +0000
Manifest this update: Tue 28 Jul 2026 23:00:36 +0000
Manifest next update: Wed 29 Jul 2026 23:00:36 +0000
Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: aB235i6tUVX555k/Un7Jt4dSHfGwLsQEnoHBdh/8mXo=)
2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:64:fb:e0:65:9f:28:78:db:5c:e7:76:3f:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Jul 28 23:00:36 2026 GMT
Not After : Jul 29 23:00:36 2026 GMT
Subject: CN=769e0ac9af2aa5c0f326412c3a081e7b37b21a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:32:e7:ac:fc:c8:74:c9:7a:68:fa:78:39:
c1:f9:3d:81:b5:6d:fb:70:ce:53:b7:99:e2:f6:03:
f8:05:d2:8f:d7:2e:e6:1b:02:9e:61:b0:4c:6c:ed:
41:ba:e2:14:51:fa:e5:8f:69:50:f9:60:2a:70:55:
13:c8:1d:09:0d:4c:2a:7d:56:ff:69:33:ef:28:fa:
6f:22:e3:8f:40:b4:57:8d:e0:d1:05:9c:33:28:62:
f4:0a:f8:59:9d:8b:1b:f4:66:9a:5f:84:ac:92:9c:
48:cc:e9:45:88:c8:aa:35:69:6c:ef:15:55:7e:32:
52:db:b0:dd:03:2b:7b:d9:b3:22:61:49:cc:9b:e9:
6b:dc:e4:c6:3b:b1:43:96:0b:14:7a:02:79:a3:eb:
fd:69:3d:0f:77:0f:51:2e:50:65:a0:e0:bc:ba:fc:
6f:c7:12:e3:7c:c3:63:33:37:c7:ec:75:b7:f5:23:
14:c9:b1:99:a8:c8:53:89:3a:2d:56:10:64:e8:af:
e7:6a:68:cf:2a:dd:05:4a:3b:f5:0d:20:49:fc:e4:
92:c4:84:46:21:2f:ac:71:c1:52:cd:23:f9:f9:80:
6a:43:7f:9b:67:fb:0e:e3:8f:7e:19:3a:a5:6d:69:
99:43:c3:70:7a:b2:eb:fd:62:7a:89:c3:4f:99:3b:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:0A:C9:AF:2A:A5:C0:F3:26:41:2C:3A:08:1E:7B:37:B2:1A:52
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ce:ea:d7:b1:5f:51:6a:d0:30:b1:d8:df:a2:16:aa:e7:92:
6c:b8:00:ba:75:ab:2f:ba:7f:d7:c1:73:59:9f:65:00:f1:6c:
f5:95:1a:73:09:e7:48:4a:72:97:58:39:d6:fe:41:41:b5:2c:
d6:e0:8c:60:5a:21:52:fa:f3:0a:31:f0:81:c6:4f:ad:60:15:
f8:49:0e:d9:f9:8e:ed:d5:91:4e:fd:ec:19:68:3d:25:74:34:
c1:40:4d:f4:56:1b:98:bd:a8:1e:18:a7:6e:7b:49:65:54:28:
fb:a0:67:43:5a:4e:f2:71:88:bc:3e:9e:76:54:ab:74:b4:f4:
65:93:ba:55:cb:70:b8:95:c6:b2:c6:0f:e5:a1:0f:3c:a6:34:
e3:a9:02:59:e3:d5:a4:98:92:da:ee:c1:3c:cd:ee:64:2d:a2:
a6:5f:6f:1c:31:0f:38:98:59:a0:74:6c:af:45:aa:cf:58:3f:
a1:f9:ee:f5:97:e1:10:43:41:24:0e:63:db:45:b5:fe:cb:d1:
5f:c5:56:1e:5c:63:b6:79:a2:7a:ae:4c:fd:82:04:21:fd:68:
cb:df:d6:45:0d:07:2e:e4:aa:1b:af:2a:b0:15:ed:ca:08:78:
d0:d6:18:c5:cd:99:7d:0a:41:7a:b6:d2:50:a9:75:33:4a:96:
fe:0b:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:35 2026 by rpki-client