Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: NtwL8JOZVO2GqUKOJN/2Fga9YjLcWQBW56EiCZxyt1E=
Subject key identifier: C0:F1:ED:FF:D0:75:A2:AE:75:EE:68:5D:E2:2A:E6:73:69:40:31:93
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019FA9E26A1E8D76EDC658509F8D91CAE6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 111A
Signing time: Tue 28 Jul 2026 18:00:15 +0000
Manifest this update: Tue 28 Jul 2026 18:00:15 +0000
Manifest next update: Wed 29 Jul 2026 18:00:15 +0000
Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: 3MWMbLq7p6U+/pRYihBE+RJZ5jZLR2BOKJ+4ASOM3RE=)
2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:6a:1e:8d:76:ed:c6:58:50:9f:8d:91:ca:e6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jul 28 18:00:15 2026 GMT
Not After : Jul 29 18:00:15 2026 GMT
Subject: CN=c0f1edffd075a2ae75ee685de22ae67369403193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:05:8f:a4:62:e3:6d:3e:d0:b0:97:d3:8b:
4c:cc:95:86:5f:88:56:d0:61:67:61:d4:78:34:eb:
00:36:40:59:ec:a3:d8:68:55:9c:69:e0:76:ae:14:
0b:69:36:83:8e:85:84:ea:45:ca:f0:e3:82:d7:47:
77:73:d4:2b:b9:e4:43:51:19:59:e7:45:08:5a:83:
ea:8c:3f:ea:2b:56:58:5c:27:67:54:39:2b:bf:ed:
7f:85:46:d3:f1:32:90:c9:16:c8:55:cb:5d:fe:8a:
37:6d:e0:1c:48:21:5c:2b:16:06:37:66:31:b3:47:
43:68:d4:81:75:e1:b9:35:20:3c:96:5c:1b:27:2a:
57:dc:53:71:c8:68:52:b5:bd:dc:ef:e4:57:d2:1d:
92:47:41:41:97:71:d0:78:dc:cd:2a:ce:5c:57:7c:
4e:68:70:ff:c6:fa:16:e6:9e:dc:51:dd:5f:c6:c4:
c1:ad:b4:03:48:56:a4:66:34:fe:44:04:85:4a:f5:
27:fe:79:be:8d:88:ef:d3:19:4d:9c:b5:d8:d8:ba:
fa:c7:25:76:7a:7b:fd:f0:96:79:f1:de:fa:69:09:
28:37:fc:39:92:b2:90:a2:bc:93:43:eb:80:4c:55:
8b:88:2b:1f:80:ed:35:cb:63:2e:12:df:ca:90:ec:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:ED:FF:D0:75:A2:AE:75:EE:68:5D:E2:2A:E6:73:69:40:31:93
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:08:fd:f3:dd:bd:0a:46:65:3c:66:39:76:e2:76:12:58:8a:
b5:1b:6d:92:b6:75:9e:5d:c7:2e:33:8e:2d:15:0b:d6:79:e0:
d2:2c:38:df:2a:ac:aa:ba:d8:94:5e:aa:2f:00:97:96:36:2b:
17:ca:1f:45:2d:8d:ff:25:59:e2:6e:3e:91:a4:ba:35:28:90:
6a:1b:ad:b8:36:08:66:66:19:6a:b9:76:6d:d8:c9:2b:37:57:
9f:ea:f9:b3:a9:3b:b4:db:68:25:17:ba:37:20:04:76:2a:b1:
97:05:36:c5:8c:5f:4c:82:be:8c:19:40:32:e8:83:bb:fe:e5:
80:d4:b3:30:ae:58:9c:5f:77:a6:56:26:8a:0b:1a:33:99:34:
ff:51:7c:39:04:82:b3:4f:07:62:28:5b:7c:52:91:68:47:87:
39:f4:41:4b:ae:0f:4c:3b:87:63:f9:bb:2f:14:6e:5a:a5:26:
15:22:f1:6a:c2:79:83:a4:72:32:29:6b:48:8e:c3:8c:0b:21:
ba:92:3a:18:84:6e:bd:91:1d:c2:c9:32:38:24:9a:80:00:ee:
7c:11:72:fb:02:66:c5:54:a1:dd:6c:3f:12:40:86:6d:0a:0d:
9f:f5:fb:2e:8d:df:3e:81:69:b4:e1:fa:a7:c8:28:9b:54:c7:
c1:f7:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:49 2026 by rpki-client