Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: 07Mqi8cYYjR0qBaYpLgCg30xswGR/cWUijsm0xHNlV4=
Subject key identifier: 40:08:BC:25:21:DD:2F:83:DC:35:21:C8:5D:B8:95:86:63:E0:B7:6C
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 019DA4F94D675CA9E4A4C75FF61C3D88A8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0C91
Signing time: Sun 19 Apr 2026 09:01:34 +0000
Manifest this update: Sun 19 Apr 2026 09:01:34 +0000
Manifest next update: Mon 20 Apr 2026 09:01:34 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: knox58+I4cnwtcl6grZDQtQ2kSkcFcLzKB7hTrM0j+s=)
2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:4d:67:5c:a9:e4:a4:c7:5f:f6:1c:3d:88:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Apr 19 09:01:34 2026 GMT
Not After : Apr 20 09:01:34 2026 GMT
Subject: CN=4008bc2521dd2f83dc3521c85db8958663e0b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:57:1f:35:8d:10:fc:bc:82:7a:f2:dd:3a:
e3:89:6a:d9:51:f7:46:85:83:6e:b8:33:be:5b:01:
1f:d6:71:88:9d:6e:a9:fe:f8:93:0c:4a:f7:b4:73:
ae:40:aa:3c:37:26:68:e0:81:5b:c7:82:8a:9a:88:
1f:95:14:70:d9:a0:53:71:06:7e:df:94:2c:51:08:
19:c2:fc:50:f3:73:32:76:85:65:9a:73:ab:4f:5a:
ce:87:ac:d5:06:70:cb:22:ed:d5:9a:6d:73:c1:a9:
7c:1b:ff:07:e1:ed:a5:26:32:f5:99:f0:98:d4:bf:
47:82:c9:12:d5:56:4b:b4:ae:3f:2b:bf:73:b6:8e:
f5:6c:f4:72:bc:fe:d7:1e:5f:f3:68:22:86:f2:91:
c8:ac:bb:f3:cf:49:9a:1c:0e:69:13:68:25:05:0f:
d8:38:70:42:26:8a:c3:1d:cf:ff:67:bb:32:9b:59:
3d:53:58:90:33:7b:20:a5:0d:e6:a3:bd:18:f1:ec:
63:98:d6:2b:9a:00:00:cb:67:ad:92:f8:3a:b0:71:
43:ab:14:4c:4b:3a:7a:64:b3:af:36:41:6d:ab:47:
01:ca:d0:88:4e:ec:ca:24:3a:73:09:ee:6e:3b:bd:
61:1a:cd:64:0a:ec:1e:c1:38:dd:f6:9a:e2:24:ea:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:BC:25:21:DD:2F:83:DC:35:21:C8:5D:B8:95:86:63:E0:B7:6C
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:f5:86:4e:0a:fc:68:f5:42:ff:c8:29:9b:38:5c:e6:b2:
2b:11:1a:0e:fa:62:f3:54:fe:0c:31:e5:ee:dd:0f:5f:ba:48:
b2:4d:fa:f9:ca:13:1d:82:33:3b:28:a2:00:3c:0b:b7:95:0b:
36:03:40:5c:14:69:b5:f9:93:a9:cd:02:fa:bd:0c:1d:08:26:
a9:9e:69:92:62:0c:86:2d:a9:e8:e9:fa:4e:e6:7e:fb:2b:56:
24:82:f9:b2:a6:21:82:73:15:2c:50:98:36:cd:85:be:5d:e6:
64:d5:e8:3a:da:9c:4f:cf:9e:f7:3c:c9:ef:4c:6f:d3:34:b2:
1f:69:3f:c3:22:f3:19:49:79:0c:5e:33:93:aa:4e:68:76:64:
de:0c:5f:02:39:df:24:65:93:c1:4a:26:7a:83:d8:1e:38:19:
da:2f:0a:0a:95:e1:83:80:37:a4:d8:be:a7:38:9a:d9:a5:31:
0f:d1:0e:1b:3d:72:c3:fa:85:1b:75:56:f1:36:d7:93:f5:41:
46:28:da:7b:fc:8f:72:0b:f2:d7:1a:2e:60:49:ae:fe:f4:a8:
58:23:2a:c8:6d:06:d2:7a:fe:93:86:58:1d:af:64:99:fa:bf:
b5:bc:3f:05:37:ea:94:4e:b0:88:6a:de:f1:ac:f0:10:c7:6e:
fb:e9:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:13:43 2026 by rpki-client