Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
File: 2j9sNTSiCwTriKpxWOVqSqdTeog.mft (raw, json)
Hash identifier: ITjhz+LlaRonwTphLy1HuSUIMbR6NOfb9Ojh/QOcO/E=
Subject key identifier: 24:59:53:80:B6:8D:E8:1E:A5:47:14:A5:86:DE:C9:C4:CD:E7:26:56
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 019FAA8755868955E1FB05F237A16BACD1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:23 +0000
Manifest this update: Tue 28 Jul 2026 21:00:23 +0000
Manifest next update: Wed 29 Jul 2026 21:00:23 +0000
Files and hashes: 1: 2j9sNTSiCwTriKpxWOVqSqdTeog.crl (hash: 8KFeDgnvEdBIEMpWzTQ8aMYh9mP7TdcagHvuiu6kAtk=)
2: b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa (hash: MHlb8AOUqnzkLRPY36W3fQ2GLEGyR8Wv/G1vui2alzc=)
3: x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa (hash: GPNAfFQEjLKrrucTFOdHZ7Ip0tuQh5HgYW5wL908rIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:55:86:89:55:e1:fb:05:f2:37:a1:6b:ac:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Jul 28 21:00:23 2026 GMT
Not After : Jul 29 21:00:23 2026 GMT
Subject: CN=24595380b68de81ea54714a586dec9c4cde72656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:c5:c4:e8:8b:f6:5a:3d:16:5b:7e:d7:e0:
ee:92:be:28:bd:ee:0f:dd:75:99:9f:57:7c:33:22:
06:65:4c:26:eb:be:32:25:bd:16:9d:ec:8d:0c:3c:
31:67:cc:91:ba:26:2d:53:33:81:4e:ac:a7:4d:87:
ae:c7:b4:90:c4:62:22:07:a6:99:75:bd:70:da:68:
56:00:3a:2e:d1:39:01:4e:37:b0:cf:03:1e:69:bc:
4b:96:b6:a7:26:ef:36:e2:d2:47:15:dd:a1:3b:26:
2d:b2:31:6d:58:ce:eb:c6:8b:06:b4:db:7a:eb:91:
ac:92:92:ca:f8:6c:24:d7:0b:94:3c:fa:b6:c9:75:
12:c8:31:69:2a:8c:f0:ed:a0:88:a7:58:f0:66:12:
72:b9:ad:cc:09:1f:67:7c:e9:d4:7c:64:16:db:93:
80:4f:03:e2:ec:3b:b1:db:b0:3d:82:1f:8b:57:35:
10:fb:57:fe:c3:88:75:65:e2:8b:da:b6:41:ba:40:
0c:e5:f4:07:d8:6f:dd:4e:09:34:ee:e2:0c:e2:ea:
49:0c:4e:9e:ae:70:38:df:7a:36:d6:80:8c:ea:f5:
6e:d7:c7:4e:56:00:2e:b9:1f:cd:c2:4d:5f:24:39:
b3:69:2a:33:09:af:37:38:80:2c:be:eb:86:d0:18:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:53:80:B6:8D:E8:1E:A5:47:14:A5:86:DE:C9:C4:CD:E7:26:56
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:b0:a3:3f:33:ab:1a:fb:c6:d3:ad:53:2b:31:34:49:be:
df:87:22:7c:df:eb:fe:b5:47:89:bb:84:c8:e4:48:c1:3e:26:
d8:83:18:7e:cf:67:9a:c6:b9:6b:97:0b:66:95:a5:d1:dd:d0:
7f:3b:b6:3a:1f:f5:13:aa:7b:6b:93:29:34:e6:52:02:0c:07:
e0:8b:76:46:4d:37:40:b3:0c:b5:23:c8:87:89:11:8e:43:0e:
2e:f8:dd:5f:4c:05:09:dc:4f:13:36:46:f1:ae:0a:97:c6:b5:
7b:6e:46:01:6e:8a:cd:40:fd:1e:de:05:86:73:5b:84:7e:8c:
3e:44:62:ea:fe:ba:5f:be:73:eb:8b:1d:3c:ac:9d:08:8b:62:
7a:69:21:af:8e:cb:5b:47:3e:8f:80:4a:0a:d6:2d:ce:c7:c0:
0a:a3:61:b5:e9:af:51:66:a3:b8:9e:6b:7c:59:db:ef:7e:2c:
82:ef:88:57:37:f5:cc:9a:e9:42:12:be:39:97:21:08:b8:65:
bd:7f:49:3f:eb:f4:42:88:94:d5:b8:8c:0d:a5:93:8d:d8:04:
0d:32:d8:43:93:ae:63:a9:a6:1a:db:ea:69:d3:e1:18:0d:af:
39:59:54:5d:51:14:04:4b:cf:27:f8:29:12:31:a3:98:84:e5:
5c:b9:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:15:58 2026 by rpki-client