Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: PC3csGaLuYWtFdELR3cCz2YsaXC6LdDOPHVd3uFPyCc=
Subject key identifier: 4C:B3:9C:7B:74:F6:40:E0:E5:FE:45:4D:B4:D8:80:C8:5B:CF:30:00
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019FA8D01C451BB405EDBC420301DEFA25C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 13:00:38 +0000
Manifest this update: Tue 28 Jul 2026 13:00:38 +0000
Manifest next update: Wed 29 Jul 2026 13:00:38 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: B6N0dkrTga1qHdDW4yzRd6Cg/t6dDGDAkrxrEcnlzSI=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:1c:45:1b:b4:05:ed:bc:42:03:01:de:fa:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jul 28 13:00:38 2026 GMT
Not After : Jul 29 13:00:38 2026 GMT
Subject: CN=4cb39c7b74f640e0e5fe454db4d880c85bcf3000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:31:20:df:43:38:30:6c:7d:37:31:95:e4:
85:db:e6:05:76:ae:c2:60:1b:88:74:42:27:bf:53:
ea:cc:3f:59:3a:f6:7c:5b:4c:84:a2:86:5f:e8:d9:
f5:7d:17:4a:39:0a:88:03:4b:d0:3b:9d:2b:a0:31:
3a:de:c3:b4:78:4d:41:f9:d1:0e:1e:f7:76:12:6c:
4a:4e:0d:ac:82:b3:e0:53:48:02:c0:c9:07:d3:81:
24:59:39:2a:fe:e2:2a:81:b9:79:18:4e:f9:f2:71:
bb:b0:ab:b5:3f:25:aa:ba:17:6c:a8:e2:cc:74:44:
4b:f0:3b:5f:9e:ef:ce:93:f0:ec:ee:eb:46:8c:32:
00:5b:e8:bb:bf:b6:b2:78:19:8b:40:19:6f:00:9b:
59:7e:fb:89:4e:df:fe:30:30:51:9c:ba:dd:b3:20:
0d:44:7e:de:ba:4a:84:5b:7b:9f:5c:c6:f4:d1:c8:
09:2a:66:5b:62:6d:98:9f:ac:96:17:5d:9e:5c:c7:
10:49:9c:e1:aa:35:8e:fd:e8:ea:f6:07:60:f3:6c:
d4:f2:5f:a9:08:8c:6a:05:7a:10:e5:98:b9:74:2b:
8b:a5:0f:a9:03:e5:99:0c:06:4b:ce:84:6c:46:11:
b0:71:ff:92:0f:b5:3c:85:08:88:6d:e6:a6:fc:c4:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:9C:7B:74:F6:40:E0:E5:FE:45:4D:B4:D8:80:C8:5B:CF:30:00
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c5:54:23:48:5e:a5:95:9c:f9:3e:45:93:c1:2c:65:6e:ce:
e3:20:e6:58:5c:c4:ae:bb:7a:46:bf:9e:12:2f:f3:a8:95:90:
11:6e:eb:03:0c:bc:ce:4e:12:e0:42:2a:f7:46:a1:ba:b3:d0:
55:56:c3:ae:41:ea:44:9f:a6:2c:0f:1d:87:36:da:73:38:c7:
4d:7c:24:fa:e0:6a:e8:0b:e1:86:1c:d7:06:c4:7b:d9:5c:1d:
3e:f6:0c:b6:74:21:d2:77:94:3d:f2:1b:8d:89:f5:2e:c1:9f:
e6:4c:db:11:5b:99:80:77:8c:4a:b1:c9:0c:0f:34:eb:38:c9:
8d:c2:58:f0:3c:1e:ed:a2:a5:f4:40:ad:9c:31:b1:7d:77:66:
11:f1:b1:d9:0d:8f:0d:67:a6:7c:f0:10:75:9c:ca:d1:73:eb:
7a:e8:bb:e4:b9:33:d5:71:dc:89:e0:5f:15:4f:8c:b1:63:80:
37:7d:42:b4:48:94:e2:3b:26:b6:27:62:d5:5b:6f:55:02:0f:
fe:34:fa:9a:c7:51:01:fd:32:35:36:e4:70:e0:5b:02:7f:b6:
4c:fa:5c:59:98:74:45:36:d7:2d:3b:32:8c:2b:fb:53:b1:a4:
9c:ce:a6:68:26:bf:c7:41:5c:47:78:cd:d6:06:b2:85:38:ca:
74:99:e4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0BxFG7QF7bxCAwHe+iXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1
ZDg3NzEwHhcNMjYwNzI4MTMwMDM4WhcNMjYwNzI5MTMwMDM4WjAzMTEwLwYDVQQD
Eyg0Y2IzOWM3Yjc0ZjY0MGUwZTVmZTQ1NGRiNGQ4ODBjODViY2YzMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfwxIN9DODBsfTcxleSF2+YFdq7C
YBuIdEInv1PqzD9ZOvZ8W0yEooZf6Nn1fRdKOQqIA0vQO50roDE63sO0eE1B+dEO
Hvd2EmxKTg2sgrPgU0gCwMkH04EkWTkq/uIqgbl5GE758nG7sKu1PyWquhdsqOLM
dERL8Dtfnu/Ok/Ds7utGjDIAW+i7v7ayeBmLQBlvAJtZfvuJTt/+MDBRnLrdsyAN
RH7eukqEW3ufXMb00cgJKmZbYm2Yn6yWF12eXMcQSZzhqjWO/ejq9gdg82zU8l+p
CIxqBXoQ5Zi5dCuLpQ+pA+WZDAZLzoRsRhGwcf+SD7U8hQiIbeam/MT10QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyznHt09kDg5f5FTbTYgMhbzzAAMB8GA1UdIwQY
MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt
YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz
LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMVUI0he
pZWc+T5Fk8EsZW7O4yDmWFzErrt6Rr+eEi/zqJWQEW7rAwy8zk4S4EIq90ahurPQ
VVbDrkHqRJ+mLA8dhzbaczjHTXwk+uBq6AvhhhzXBsR72VwdPvYMtnQh0neUPfIb
jYn1LsGf5kzbEVuZgHeMSrHJDA806zjJjcJY8Dwe7aKl9ECtnDGxfXdmEfGx2Q2P
DWemfPAQdZzK0XPreui75Lkz1XHcieBfFU+MsWOAN31CtEiU4jsmtidi1VtvVQIP
/jT6msdRAf0yNTbkcOBbAn+2TPpcWZh0RTbXLTsyjCv7U7GknM6maCa/x0FcR3jN
1gayhTjKdJnk7g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:06 2026 by rpki-client