Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: AFKsh0jLBBHHpy9gIwPRBskgsmhkq2IOHbpAk35eVcM=
Subject key identifier: 02:5D:A2:28:55:9C:47:74:A5:C5:0C:5B:AA:49:CD:8B:B6:76:D9:EB
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019FA9752A3E119F3043094804AFFC0DD4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:00:55 +0000
Manifest this update: Tue 28 Jul 2026 16:00:55 +0000
Manifest next update: Wed 29 Jul 2026 16:00:55 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: QqIilVKsbd8nsh7NPHfzXt4FgrQDmcq7d0L0mPU8W3E=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2a:3e:11:9f:30:43:09:48:04:af:fc:0d:d4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jul 28 16:00:55 2026 GMT
Not After : Jul 29 16:00:55 2026 GMT
Subject: CN=025da228559c4774a5c50c5baa49cd8bb676d9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:5d:f3:25:e9:da:39:b5:4a:f4:96:b2:63:
f6:6d:49:5f:5b:af:94:c7:97:ab:26:9a:cb:69:10:
f5:b4:e3:40:27:fd:be:d3:ef:f1:67:15:ab:b6:ab:
6e:35:27:dd:28:c2:b4:6a:61:9e:0e:cf:e1:83:4f:
49:97:4e:8d:ee:13:a9:a7:f9:06:0c:bb:c8:a1:a7:
ae:b4:21:97:4b:bd:b7:86:58:94:fc:b3:7f:42:8f:
c6:e8:4d:22:f2:80:d2:80:18:c7:de:61:8f:dc:0c:
db:f7:6d:3d:28:91:1e:33:f7:03:a0:1c:ca:70:8b:
40:7f:c1:da:86:91:7b:71:a6:ec:83:fe:1c:4a:ae:
14:88:fd:71:5f:9a:7f:c9:bd:62:c5:d8:44:6e:8f:
e2:63:d3:9a:24:cc:b3:ac:41:55:3f:4d:ab:3d:f2:
73:e4:19:b1:0b:f3:47:05:86:0b:af:70:d7:2c:c2:
31:13:c7:05:94:4e:47:0a:64:9b:03:11:52:0f:10:
b8:18:ba:0c:e4:09:ad:56:a2:74:59:d8:bd:a8:17:
25:a2:96:54:19:1e:10:50:4b:4a:76:2d:c2:61:db:
6b:ff:56:2d:c8:67:00:ae:62:21:ea:22:bf:81:14:
35:e7:23:8e:f3:89:d2:c8:4f:4b:86:9e:b6:df:f7:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:A2:28:55:9C:47:74:A5:C5:0C:5B:AA:49:CD:8B:B6:76:D9:EB
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:58:5b:6f:87:3d:b7:d1:5f:ac:ea:7f:41:01:e9:35:fe:
cb:86:4b:c2:f8:f6:c1:21:c3:92:d1:e9:a9:fc:48:0f:74:0b:
a1:2d:91:72:92:36:67:04:1b:93:9a:26:fc:ea:85:b0:56:d3:
9e:02:a4:af:51:4a:66:f5:cb:5f:6f:7f:a8:fc:5e:e3:29:ad:
b7:24:4b:05:61:12:bc:9a:14:ad:3c:8f:00:7f:a6:cf:4e:44:
b3:5e:bd:d1:4b:e9:41:a5:c2:29:51:a2:40:38:c8:85:81:ee:
eb:71:2e:ab:7a:6d:df:08:ea:9b:31:de:61:a5:82:82:c7:ff:
0c:c6:82:d3:07:f7:c8:51:43:31:1c:7e:1f:8c:65:a1:7b:bd:
02:57:29:75:02:6a:af:1a:0c:d1:59:c1:35:b7:05:bf:83:bd:
70:b4:23:52:a6:22:11:29:25:5a:96:c0:42:2c:7b:d5:8d:46:
df:71:13:19:23:09:ba:89:17:b0:36:98:30:08:b2:b3:7f:3c:
9a:0a:9c:1c:7c:0e:47:16:11:7f:d1:e9:1c:20:35:a3:c9:05:
55:2e:b6:ac:81:bc:10:32:36:5f:69:4e:9b:d9:53:22:0a:e8:
0f:31:19:d4:41:9e:b6:14:b4:bd:1e:59:db:57:35:8b:2b:46:
1b:ba:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:43 2026 by rpki-client