Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: RvffaSN/uV7qKJczoLg9ctP/QeMPKApQSxbiq01O6Tc=
Subject key identifier: AD:A1:E8:2F:D3:10:FA:5E:BF:93:60:4D:86:64:7F:9B:1A:71:10:53
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019FA9E32CA06C63A7B0B88E73247BCDBD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:01:05 +0000
Manifest this update: Tue 28 Jul 2026 18:01:05 +0000
Manifest next update: Wed 29 Jul 2026 18:01:05 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: sckjKxivmRbjVHHvivrcnukjx9arIu+KsbCdDXUSm50=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:2c:a0:6c:63:a7:b0:b8:8e:73:24:7b:cd:bd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Jul 28 18:01:05 2026 GMT
Not After : Jul 29 18:01:05 2026 GMT
Subject: CN=ada1e82fd310fa5ebf93604d86647f9b1a711053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:92:4e:1a:f7:95:84:5f:2e:1c:37:f1:2a:
5c:57:9f:43:15:fb:4a:a7:d6:23:63:0b:6e:53:72:
ee:c6:75:9c:a5:70:e7:a2:c8:9b:c4:57:9b:b9:de:
c1:2e:ad:5c:46:8d:23:35:65:a5:c2:9b:12:09:0d:
0e:f3:36:c8:ec:39:f2:ca:3a:56:9a:a7:eb:7c:f7:
40:74:31:07:b1:45:b6:6d:da:e1:3c:cb:4e:19:00:
cb:78:dc:03:fe:bc:cf:39:70:bf:82:4a:a5:e9:35:
ee:33:54:25:be:56:0e:4c:0c:d4:d2:fe:11:af:a3:
e4:d4:aa:7e:78:d5:a3:14:fb:6c:16:1d:25:bb:58:
f7:7c:f7:c2:10:76:5f:ee:66:9c:b2:ec:69:70:0d:
ed:ce:9c:e1:d1:8f:ae:d6:ef:c6:17:9e:15:ba:9b:
22:41:1b:30:aa:7c:ea:38:6c:bf:3b:62:ec:83:e0:
07:97:07:03:79:59:5a:08:7f:90:ff:97:36:cf:d7:
ed:72:b5:a6:4d:f4:54:2a:2d:81:f8:c7:c2:85:aa:
c0:f1:78:10:57:64:38:31:65:82:92:52:2d:02:67:
d9:c5:43:7f:04:68:9a:9e:3b:be:72:a1:e8:4d:b6:
b8:93:d2:ba:48:1f:20:2a:3e:07:db:5d:a5:2d:54:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:E8:2F:D3:10:FA:5E:BF:93:60:4D:86:64:7F:9B:1A:71:10:53
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:ef:2a:85:d2:8b:dc:8e:5c:53:8e:23:04:f1:0f:d7:f8:
9a:32:3a:c1:3d:35:e9:c5:bd:44:9d:d5:a4:a3:22:4a:8f:ea:
21:20:cb:cf:98:fb:2f:28:75:92:b9:5f:52:18:57:d7:cf:0a:
08:87:5d:4c:9b:89:e4:c6:f5:9d:a9:78:43:ad:3d:4f:94:d2:
4d:ba:3e:64:f6:22:72:7c:58:d8:e9:68:a3:b4:c2:21:8d:7b:
9a:7e:e7:c4:29:df:22:ab:24:4c:eb:43:9e:d3:85:76:06:9b:
7a:25:13:cc:7b:4a:9c:ba:a6:70:e2:bf:57:18:5d:fd:7e:cc:
01:e2:cf:90:23:ba:17:9e:b9:6c:e9:4a:d7:4b:d3:b6:44:f5:
70:34:ce:3c:0e:58:d0:81:df:ff:d3:19:55:5f:16:95:16:cf:
d6:fb:85:01:b1:cb:77:ce:13:76:cc:59:25:d8:67:4d:ea:5e:
a1:42:07:44:66:aa:89:db:05:c4:62:d5:77:39:1d:d1:b7:f8:
a8:36:13:2e:6a:93:ad:ac:07:6a:e5:9d:2a:37:fd:64:a1:de:
08:0b:5a:0d:25:b4:f9:71:96:4b:21:88:3c:46:48:8b:70:c2:
0b:4f:b4:55:a0:7e:33:0e:dd:e2:06:3e:8e:87:44:94:23:c1:
e4:d9:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:35 2026 by rpki-client