Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: XmnUTBCwm/6+ZhmEs6gJ6OEYkDylfYwJNW06E7UJWi4=
Subject key identifier: 38:BB:71:B9:2B:F3:2A:99:63:C0:DD:52:FC:2A:78:5B:E8:CD:E5:46
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019FAA50CEFB1CE02F5B6C0B560BFB23A334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 04AC
Signing time: Tue 28 Jul 2026 20:00:50 +0000
Manifest this update: Tue 28 Jul 2026 20:00:50 +0000
Manifest next update: Wed 29 Jul 2026 20:00:50 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: fyemwa7iM4On1rHKv1sBSDHFiu1+LtQUt7Nh52C/IB4=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ce:fb:1c:e0:2f:5b:6c:0b:56:0b:fb:23:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Jul 28 20:00:50 2026 GMT
Not After : Jul 29 20:00:50 2026 GMT
Subject: CN=38bb71b92bf32a9963c0dd52fc2a785be8cde546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:88:28:e5:df:28:eb:f4:16:b3:9a:83:f9:
e6:74:f4:92:ff:9a:a4:47:97:38:75:46:66:ee:63:
4f:2b:b4:04:1a:e4:05:4c:34:bd:f1:3e:43:6f:c1:
57:0b:1b:91:83:0c:7d:c3:c1:59:5a:ef:f4:e9:15:
13:6d:77:13:9f:58:3d:e7:d5:9e:b0:27:94:c6:c5:
39:c7:91:fb:56:6d:8b:1a:b8:e3:3e:57:6f:82:dd:
b3:68:f3:9e:e4:df:7e:d6:76:7f:f1:2a:a5:85:ef:
74:5a:88:ef:f5:4f:99:91:91:87:00:68:8a:e5:40:
f4:3e:c3:1d:84:f2:7a:97:81:d7:07:cb:7f:0c:e3:
d0:23:3a:c5:ca:f7:a6:24:bb:a5:22:05:89:bd:de:
11:46:01:7b:40:6b:d2:f2:db:6c:3d:e2:5c:41:22:
be:4b:ce:cd:4e:cc:26:c6:13:68:43:a0:ed:04:d9:
84:91:77:39:62:87:e9:ed:ea:ea:84:5d:65:c7:48:
0d:4e:20:73:a9:bd:ed:e0:8d:ff:73:a3:95:11:6c:
32:0a:6f:e4:2c:36:4a:84:1e:91:ba:f5:03:51:a2:
03:a5:de:32:15:84:a0:e8:9a:44:cc:a8:e0:55:04:
e0:06:4e:e8:e5:f4:d6:66:3e:2e:2f:90:64:d7:9c:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:71:B9:2B:F3:2A:99:63:C0:DD:52:FC:2A:78:5B:E8:CD:E5:46
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:0f:4f:23:9e:fc:19:c0:5e:88:67:75:b5:a6:6e:1f:d5:
49:b0:a8:99:eb:d3:8f:33:85:50:97:23:56:9a:32:e5:c2:58:
98:f2:0b:cc:87:d9:02:e2:7a:27:51:97:08:aa:55:07:fb:46:
8b:80:55:d9:0b:c5:7f:6e:a2:e1:56:05:62:41:77:d3:cc:0c:
26:2f:a4:16:49:a9:15:19:4e:d6:d8:92:60:5b:0a:66:b7:cb:
93:54:16:07:f9:45:9d:cf:5a:d8:8e:29:3b:4b:91:ca:09:70:
e2:55:24:0d:64:47:05:bd:4b:96:63:cd:f3:5d:92:b1:ef:9c:
f2:1f:92:a7:1f:fc:f9:76:2c:ca:a9:38:d0:bf:a4:99:02:2b:
38:fd:89:49:b5:14:6b:be:31:fa:25:62:26:45:e5:05:83:f2:
38:72:19:1d:36:fa:89:4b:19:b0:4a:80:ac:47:ee:d8:24:11:
e7:2d:08:76:1d:88:44:3c:e8:6c:55:07:7f:b4:25:f8:04:e3:
d3:6e:4c:c4:3e:9a:de:ee:28:21:eb:42:61:84:49:1a:aa:7c:
45:06:8f:25:69:e4:5c:fa:50:df:a8:0d:14:f4:98:1c:aa:73:
b2:62:21:a3:0b:cf:f1:aa:b0:ec:66:96:4a:66:a0:9e:77:61:
89:3e:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:56 2026 by rpki-client