Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: Y/MZD6xyzD425vn3wfonx/SzogDc99VH+ByNzZEkF2E=
Subject key identifier: 3A:5F:BB:18:25:20:5D:1D:1B:B0:D0:82:D7:33:63:F9:84:CB:0B:0F
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019FAA50C81C5042491E05D499ED2AB0F5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 12A6
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: 9IaVBEp5V+i2B6YbNv7Sn2yxx5jG87/wMSe901RWF1I=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c8:1c:50:42:49:1e:05:d4:99:ed:2a:b0:f5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=3a5fbb1825205d1d1bb0d082d73363f984cb0b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:55:f3:18:d2:8e:8f:4e:91:7e:ce:a5:2b:
c6:46:78:a5:09:3b:2f:a3:d8:1b:48:5b:86:ce:54:
25:29:a3:d9:f5:9a:b5:2f:40:79:44:6e:86:b0:4c:
39:15:f6:fe:35:36:7b:78:31:03:ed:f8:ab:20:b6:
0a:9a:dd:a8:23:6d:be:31:f1:33:68:9c:9a:42:3b:
9f:b1:8a:d2:5e:45:4b:54:d7:1e:04:7f:8a:a4:58:
58:a7:63:d8:9a:02:1f:14:cf:45:e1:44:ac:e8:9e:
44:51:6b:eb:56:e0:eb:86:82:00:6b:26:71:e5:97:
3f:88:ee:96:ba:a1:96:78:a0:8f:da:b5:8c:71:e7:
fd:9a:aa:33:d6:34:f7:11:17:40:a7:9d:93:af:5d:
ae:23:4b:91:45:0d:a6:9c:32:2e:dc:52:f2:27:d9:
01:3b:6a:e9:25:d3:6d:f8:d5:ad:df:a2:a6:5b:5f:
83:e3:f4:7d:b3:e3:63:76:f2:68:b7:80:a3:3e:56:
a9:55:40:d9:31:37:c8:37:3b:36:c5:23:b5:29:ba:
11:e5:49:b7:8c:ce:a6:cd:90:85:e0:25:bd:e7:e0:
a5:a3:fb:b0:a0:65:e5:ae:2c:7b:3b:b7:42:ee:94:
86:8d:90:2a:86:cd:7b:04:8f:89:3c:85:2b:fe:52:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:BB:18:25:20:5D:1D:1B:B0:D0:82:D7:33:63:F9:84:CB:0B:0F
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1d:2a:09:fb:80:2f:70:3c:ec:9e:99:59:c3:33:31:c5:57:
75:33:ae:61:a8:01:66:a4:95:73:46:f9:d3:ed:99:17:db:6b:
09:76:8d:ce:15:b9:5a:b6:b2:6f:69:26:07:9c:52:5c:2a:3d:
59:12:1d:9b:74:af:75:21:8e:d1:4b:db:d5:a7:6a:cf:1d:97:
ac:7b:9e:e1:78:39:41:3d:c7:72:87:69:bf:53:d2:4b:ad:6d:
9a:7a:3c:a1:f2:12:78:f8:f5:55:63:57:f6:83:5f:8f:68:b5:
6b:bb:87:46:89:65:d3:82:74:7c:f2:8a:a4:02:b0:51:17:22:
f8:64:55:d9:d3:67:20:71:6f:05:e5:7d:82:c3:48:99:17:c7:
85:e3:ab:c3:58:29:49:12:3e:77:c1:e5:26:12:f2:cc:6c:46:
96:84:57:06:10:24:96:62:9f:ba:f0:d5:3b:e8:4a:67:33:c8:
be:bd:d2:4f:25:4b:b7:ce:0b:27:2d:d5:e1:95:d2:60:74:88:
bc:44:b0:9e:8e:f5:58:fe:4e:d5:2b:f0:72:07:48:b3:a6:4f:
be:a8:3a:3f:e1:6a:a6:60:bd:58:3b:dc:c8:25:a5:4c:42:91:
46:bc:63:00:95:8d:ad:26:f0:31:20:80:dc:2c:b9:01:ff:dd:
cf:da:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:15 2026 by rpki-client