Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: Pc+N1GfBRgtilMLzydDaf5DOu8C06ov+dBhqkDA6m04=
Subject key identifier: 84:7B:4D:51:0D:79:FD:80:33:23:EB:CB:24:4A:94:47:65:A6:1F:AF
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 019FA93E8D7411B75D5714F2FB39F69D86B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 15:01:16 +0000
Manifest this update: Tue 28 Jul 2026 15:01:16 +0000
Manifest next update: Wed 29 Jul 2026 15:01:16 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: 8FGUIldl9LNfvtDojGAQFURZh7VHHNuq8dMaLBDFbT8=)
2: LpFRmX9PzrWkSCAE9MBkhoB4NC0.roa (hash: O5h6RKwcek/boNWUKWdfTylprmmWoB0fVIyV7iyo7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:8d:74:11:b7:5d:57:14:f2:fb:39:f6:9d:86:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Jul 28 15:01:16 2026 GMT
Not After : Jul 29 15:01:16 2026 GMT
Subject: CN=847b4d510d79fd803323ebcb244a944765a61faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:be:a8:c9:4c:5a:d4:dd:2c:04:f5:85:4a:
01:dd:1f:1f:5b:07:8b:ab:cc:3f:03:1a:96:8c:79:
6f:10:22:66:62:b7:b2:4c:c4:8f:e6:91:e2:59:3f:
9b:dc:64:45:4b:d6:7e:d4:ee:8f:d2:83:08:a4:79:
ed:e3:6c:dc:46:bb:77:0e:6c:fc:d2:35:56:ea:78:
da:73:e2:9e:61:e6:76:a0:32:9b:21:6f:49:3d:ba:
21:ce:9b:62:a9:b3:f8:53:8f:b0:03:b9:f8:57:5a:
aa:d7:ca:5d:f4:ab:ce:8d:67:15:5a:a2:fb:7b:c6:
50:ae:a3:57:1a:5f:55:4a:5a:f3:b5:bb:24:a6:c0:
8d:14:1d:3a:7f:2c:66:fa:05:55:f2:86:92:24:f0:
01:bb:1d:0e:60:f4:7b:79:b4:39:27:b0:94:1e:b6:
d1:fb:54:d1:cf:7b:37:b5:26:29:f9:f4:71:1d:00:
71:41:0a:db:26:33:8c:f8:03:61:be:7b:cd:1d:23:
ae:aa:33:c5:d5:a9:72:2c:f2:23:27:07:a1:3a:d7:
ef:3b:0d:5c:23:72:73:2e:2f:5b:25:6f:91:27:48:
6c:ed:cb:35:b0:3c:65:a9:8b:c9:02:6d:80:48:d5:
c9:f3:3a:c2:2f:0a:56:23:28:ea:b9:93:9e:58:3f:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:4D:51:0D:79:FD:80:33:23:EB:CB:24:4A:94:47:65:A6:1F:AF
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d4:e5:bb:e3:bf:24:4f:ca:d8:70:19:7e:73:15:7d:a6:fc:
70:61:9d:98:52:85:8a:75:49:66:f4:61:41:ed:d1:1c:b8:a8:
fd:d5:ba:d7:19:fd:15:73:3d:77:fe:40:81:43:73:20:28:b9:
79:e0:f9:8c:7f:cf:42:56:c8:4d:99:d9:8b:70:d8:27:46:d5:
01:ce:5e:aa:ca:c8:47:e1:21:2c:7a:f5:b4:99:09:3f:b9:01:
f6:b8:c1:1a:76:49:2b:de:4b:08:6b:07:f5:3e:cf:4b:72:66:
4c:a4:d9:5a:09:bf:99:b8:2b:3d:6a:35:58:1a:c2:b7:29:88:
11:cb:3d:a6:e8:ee:91:11:91:5f:d2:b6:26:a7:80:a0:ff:7e:
c6:96:ce:11:47:c1:a0:79:a5:0b:ea:47:cd:0a:90:cd:da:11:
da:c0:c7:86:40:3c:ce:02:57:11:aa:55:67:3c:3f:a4:78:ad:
84:26:69:a6:99:91:5c:c0:f8:65:c1:32:85:be:22:c6:0d:8c:
b0:e4:43:06:ce:95:2e:65:75:5b:0e:95:1e:2a:aa:cf:20:c8:
ac:38:f2:6c:3b:ce:9e:07:c6:98:0c:15:16:e7:99:b3:81:9a:
9e:de:ff:df:3e:e7:f9:ae:a3:ed:e4:bf:d6:4b:cf:b5:e3:47:
95:9c:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:54 2026 by rpki-client