Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: 5qhusZtR5X/Rg5LURWpOMzquG7mgJCEmL9aO/Ykk9aQ=
Subject key identifier: 8A:8C:80:D6:4F:CC:D4:A6:B1:04:00:7B:68:1A:1A:19:31:EA:DD:CC
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019FA8D0515854FBA2EFDFADB8FC33F665F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 13:00:52 +0000
Manifest this update: Tue 28 Jul 2026 13:00:52 +0000
Manifest next update: Wed 29 Jul 2026 13:00:52 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: 9Uxj5wqNix9nfucjDQsn+jD5rUcIS0j3KzYVbNtcwS4=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:51:58:54:fb:a2:ef:df:ad:b8:fc:33:f6:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Jul 28 13:00:52 2026 GMT
Not After : Jul 29 13:00:52 2026 GMT
Subject: CN=8a8c80d64fccd4a6b104007b681a1a1931eaddcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:ca:7b:69:8d:a8:30:1b:7d:e5:b1:ca:05:
ad:0d:e5:7e:cb:9f:5c:0e:ec:ff:d8:7b:c1:f8:7a:
e6:98:4a:d3:36:d9:16:25:7e:a6:15:90:9d:11:af:
c2:8b:1b:6c:b0:35:a8:11:a7:9c:fd:f0:83:d3:7f:
f8:88:a8:54:4c:3b:b4:c8:9c:6a:ed:c5:17:f5:6d:
0b:bb:18:45:b4:72:3b:ca:34:64:b0:e7:9d:7b:b6:
2e:c3:b7:bf:1b:d1:47:6d:d0:e6:58:c5:4a:3c:cc:
9e:cf:d0:c4:d0:10:bb:13:7b:83:79:16:81:9f:8e:
0c:af:48:ac:25:ec:8f:15:27:ea:9a:44:59:8a:c6:
87:d0:35:37:54:30:fc:8a:d1:ac:90:70:63:74:f3:
e8:9a:1a:35:50:73:61:6b:21:59:b0:bd:15:09:9c:
ce:9d:90:58:14:58:57:9a:10:75:da:0c:c5:0d:5d:
ff:dc:2c:09:6e:e6:a4:a5:03:84:04:be:c5:03:16:
f8:53:61:be:f5:11:19:b2:63:bb:45:da:2c:8a:ae:
f5:dd:79:25:0a:e3:05:7d:1a:df:8c:59:64:78:d2:
3c:49:c8:03:f2:e8:01:16:d2:1a:e8:25:e8:ce:78:
41:47:81:87:9b:07:3f:ce:a4:1a:6f:fb:2e:86:74:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:80:D6:4F:CC:D4:A6:B1:04:00:7B:68:1A:1A:19:31:EA:DD:CC
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:b4:85:b5:49:71:e3:09:86:fb:55:ed:67:93:85:a0:31:
b0:fa:19:f9:20:b1:fc:7c:57:17:2a:33:6b:c8:62:be:8a:a7:
f2:67:6a:de:fb:6f:96:30:b1:52:48:06:f5:fe:b5:39:40:f6:
89:15:b6:4e:10:88:d2:d9:08:d6:c1:e1:ce:1f:45:df:55:ac:
9e:a3:26:88:24:b6:ec:66:a5:f5:f5:4a:28:b6:e0:2d:af:59:
55:cf:50:e4:5a:34:b7:76:95:73:de:d6:32:f4:9d:d2:3f:89:
30:f0:ad:07:f4:72:de:42:0b:62:ff:1d:9c:14:71:22:21:9d:
9f:d5:9b:ed:d4:3e:6d:fe:e8:81:e1:a5:84:6f:86:eb:aa:82:
7d:a6:0b:d0:2f:aa:63:23:e2:55:59:9f:c6:e3:ad:ad:c9:aa:
9d:e8:21:36:a2:9a:4e:1c:12:65:4a:2d:72:0d:64:38:ee:eb:
d8:c1:ce:d4:eb:b0:23:00:85:51:7f:6c:0b:e3:4d:b2:10:74:
0e:5f:85:1d:04:65:1d:8a:a4:e9:52:7f:a4:6f:3d:e4:84:31:
4d:38:8e:d1:b9:b3:74:ba:d6:4c:ab:38:d6:d6:49:9a:cd:86:
ec:f1:fb:23:2c:1d:07:fb:99:8e:be:5e:35:7b:1e:f5:b2:1f:
4a:90:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:36 2026 by rpki-client