Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: xbF6jHDGEr7cAogXeCJRihN5mgobUsQYlouo67cWMDY=
Subject key identifier: 29:AF:42:DE:24:C2:6A:5A:63:B6:17:EA:9C:94:2E:D0:F8:58:EC:FA
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019FAA509E03C010B0D21B8493D46127431C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 14B0
Signing time: Tue 28 Jul 2026 20:00:37 +0000
Manifest this update: Tue 28 Jul 2026 20:00:37 +0000
Manifest next update: Wed 29 Jul 2026 20:00:37 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: M33nMIZ+ehB0UqfnSesxaj9RVk0hTI/85c4fWMhM7LM=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:9e:03:c0:10:b0:d2:1b:84:93:d4:61:27:43:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Jul 28 20:00:37 2026 GMT
Not After : Jul 29 20:00:37 2026 GMT
Subject: CN=29af42de24c26a5a63b617ea9c942ed0f858ecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:04:87:c7:ca:d9:1f:61:83:5d:22:6d:6c:
7f:30:25:64:e7:c8:c9:75:f4:53:b2:52:99:12:36:
c7:aa:aa:1f:aa:49:31:7f:9f:dc:2b:b5:6d:54:41:
9d:3e:e9:0c:dd:ec:76:c2:0d:e3:f2:35:ec:45:70:
be:eb:89:d7:b5:6a:d8:e8:63:d2:62:f9:e9:af:81:
8c:1e:57:81:d0:a4:d3:a1:16:79:f2:00:b7:dc:c3:
9f:6d:cc:56:79:85:bf:aa:f0:82:5c:8b:c9:36:e8:
ec:c7:d9:3c:35:8e:98:26:77:b7:36:d6:a0:f7:02:
d9:16:36:0f:2a:6e:9a:04:d9:ab:96:69:7d:ef:06:
16:76:51:49:27:07:13:50:7e:6c:c3:d7:77:52:60:
1f:e8:64:48:13:fe:fc:81:07:04:a3:3f:58:57:1d:
35:47:cc:8c:dc:75:e3:70:9e:9d:97:ea:41:05:d0:
6b:29:43:08:34:1e:e4:7b:a1:fb:02:9d:c7:d1:37:
5e:a3:c7:1f:e7:d7:3a:fb:db:f5:8e:c1:00:6c:74:
ab:d5:a2:8e:d3:6e:5f:f0:11:65:55:e9:07:0d:65:
05:f8:c8:19:73:cc:9b:62:ab:cb:06:6b:9b:df:e9:
03:03:3b:9d:fd:35:77:a5:30:f5:c5:de:6e:9a:52:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:42:DE:24:C2:6A:5A:63:B6:17:EA:9C:94:2E:D0:F8:58:EC:FA
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e5:94:05:e6:69:56:5b:27:ab:1c:7c:bd:12:5f:8c:f8:3e:
2d:d3:4d:97:8b:e8:03:68:1f:79:41:2e:71:f2:c5:7a:57:e6:
0c:7d:bd:3b:66:f9:16:aa:cd:f7:43:05:4a:21:df:12:e2:3f:
ac:42:c1:1d:01:69:2d:30:d0:bf:2c:a6:74:ef:30:b2:b4:88:
12:ea:1e:38:04:15:5c:97:5c:d2:14:f4:1c:10:74:0f:b3:c5:
68:8a:04:4b:41:ab:3a:07:9c:5b:b1:60:cb:7b:fb:ba:4a:13:
3d:70:94:f8:03:e2:8a:d6:d6:32:ec:aa:26:3a:c2:73:d0:09:
2e:68:a4:20:b3:10:10:ca:d8:57:d4:e3:62:a4:3a:2d:0a:75:
92:05:12:02:4e:24:c7:1a:be:4f:c6:57:99:c5:f8:07:be:af:
90:0f:94:c0:e1:06:7e:4c:ed:85:e5:99:6d:26:b0:1d:51:f5:
9b:71:3d:fc:2a:44:da:ae:ff:2f:53:9c:8c:2c:02:60:97:48:
e4:79:7a:b2:9b:e8:3b:70:ff:23:24:f7:22:eb:68:cc:92:fa:
7e:d8:fb:0a:e8:f8:41:b9:63:62:f0:40:31:5d:3d:e0:6e:0a:
59:fb:99:db:3d:b3:6f:bf:4b:07:bf:d8:59:ed:b6:70:27:3a:
9f:e3:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:06 2026 by rpki-client