Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: /muUgNmFVaPR7geCnuj4r3k1n4O2gSgzyvbFLK9e1aQ=
Subject key identifier: 60:E2:4B:ED:7C:03:7A:B7:E3:81:9B:33:44:90:AE:55:76:18:FC:D9
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019FAA505F7B8F518FC7C65995D35362C0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 20:00:21 +0000
Manifest this update: Tue 28 Jul 2026 20:00:21 +0000
Manifest next update: Wed 29 Jul 2026 20:00:21 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: w67GXTQCj7wrngugpRCf7jBezXkeI37U4ogQwkA0wmU=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:5f:7b:8f:51:8f:c7:c6:59:95:d3:53:62:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jul 28 20:00:21 2026 GMT
Not After : Jul 29 20:00:21 2026 GMT
Subject: CN=60e24bed7c037ab7e3819b334490ae557618fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:13:bb:e2:1a:5c:d2:99:0e:ca:b3:a3:04:
aa:1f:e1:ff:ee:b2:d0:b6:b1:7b:8a:6e:3e:1e:67:
1f:94:69:fb:0f:6a:65:a6:f4:13:41:0c:bf:9f:5a:
25:6b:9d:72:b7:17:ef:34:da:99:71:c5:71:d3:06:
7e:0d:54:53:66:80:82:ec:ec:b1:6b:c1:a7:85:ca:
a5:d0:80:60:80:f6:b1:52:15:7f:bb:42:47:86:25:
0d:7a:07:e1:1d:ce:1f:06:1c:ba:c8:e9:e3:15:4e:
3d:3e:e1:6e:4c:60:de:f4:26:b7:97:ee:63:23:be:
b9:c9:0e:ee:9e:e5:4b:e2:c1:c5:67:77:ba:72:ff:
11:ff:8c:9e:dc:25:28:2b:45:31:f3:20:45:81:3f:
7c:25:1c:c4:5f:aa:55:c8:ed:60:5a:2c:9d:f1:2c:
c4:3d:d5:e8:6d:2e:4e:7b:60:60:71:2e:36:67:f9:
46:2d:fb:ee:b2:23:e3:f4:96:c6:68:f2:c9:d9:7e:
c3:eb:6d:8f:c4:3a:0c:6a:c1:2e:a7:ee:6e:61:9f:
31:80:42:a9:ba:15:aa:e5:49:d0:0e:97:8f:52:fd:
eb:fd:a0:53:87:e0:49:60:d4:5a:51:c7:ae:f7:53:
21:21:ec:ab:f0:fa:d6:b3:14:52:61:a9:e3:0d:5d:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:4B:ED:7C:03:7A:B7:E3:81:9B:33:44:90:AE:55:76:18:FC:D9
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0b:37:40:7d:bd:b1:a2:ec:0f:95:25:45:65:2a:20:be:f1:
98:9b:fc:a2:6e:19:a3:29:a3:4b:43:42:0a:ae:67:30:4c:5e:
55:5a:80:a5:28:9e:4c:da:12:91:45:f4:20:4b:f8:cb:5c:26:
8f:44:18:ee:f8:44:ab:31:19:61:0b:90:64:5c:d8:0e:56:be:
31:84:00:10:ff:93:38:25:07:19:33:16:42:16:fa:31:15:3b:
e0:5a:30:f2:fc:c2:e1:5a:c4:87:be:25:d9:10:58:b8:90:6c:
7c:2b:d4:f0:5d:d3:86:b4:18:30:5b:50:61:4c:03:19:d6:3d:
81:c0:78:0c:a8:3a:8c:48:9e:7c:d9:db:08:a9:b9:2c:31:e8:
aa:79:18:cc:d5:81:8a:c9:b9:43:b9:b1:3c:35:29:69:fc:c7:
16:1c:7d:8f:94:4b:d3:de:fb:8c:a9:fa:7b:05:5c:1e:57:7a:
17:3d:eb:a5:30:bc:ff:0d:23:21:76:a8:21:4d:51:11:09:56:
a0:fd:69:35:ef:dc:cd:3e:5e:fb:a2:5e:e3:6a:6e:6d:65:cc:
56:c0:50:6d:d0:59:1f:31:06:e7:15:28:5f:b5:f2:58:39:02:
bf:95:89:48:e5:f3:6d:ba:17:a2:8c:9b:f9:a5:9a:ac:66:a5:
57:75:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:06:38 2026 by rpki-client