Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: LBkZYIMHESJ54kIm3EwKfeKKlqy5NPGt8A/4UNgEXtU=
Subject key identifier: 83:8F:2F:D6:60:9F:E3:15:58:47:8E:FF:BF:F2:22:FC:49:6B:2E:21
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019FA93E79AD6EF5803024F79BB8F79A5498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 15:01:11 +0000
Manifest this update: Tue 28 Jul 2026 15:01:11 +0000
Manifest next update: Wed 29 Jul 2026 15:01:11 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: Q8WER2ifrlNaxQ36N1VSuDn4VmNYfh/R1EoqLjhXZrU=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:79:ad:6e:f5:80:30:24:f7:9b:b8:f7:9a:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Jul 28 15:01:11 2026 GMT
Not After : Jul 29 15:01:11 2026 GMT
Subject: CN=838f2fd6609fe31558478effbff222fc496b2e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:8e:12:ef:15:d3:96:c8:ff:22:95:bf:17:
18:0d:28:ab:ae:e0:ec:bf:6a:1a:00:b7:5c:54:c3:
37:9e:a3:23:2a:ee:90:3d:f8:69:70:7e:c4:a0:b1:
13:75:0f:b5:44:86:0b:4d:74:a4:ac:70:a4:bd:bc:
63:72:9b:33:17:ea:d1:77:7a:cc:47:60:37:fa:8c:
be:c0:da:4b:bb:4f:fd:59:f6:f8:0e:03:e6:9f:20:
52:1a:c3:77:b2:d0:5f:e7:5e:a4:31:35:16:6a:4f:
55:23:1f:1a:51:94:0d:2f:8c:9d:62:94:56:1b:b7:
be:cd:e7:2d:e2:3f:c2:99:32:fb:64:64:8b:6f:1c:
76:dd:a5:48:0b:e1:2b:92:6c:ce:d8:ba:33:0d:50:
12:16:f9:3b:c1:6c:7f:06:3d:e3:cb:f8:54:cd:13:
e4:52:6e:61:e1:58:8f:ee:c5:30:24:cb:36:82:14:
38:5d:8c:c4:a8:7a:82:38:83:db:d4:02:db:9d:64:
c1:17:94:db:37:cd:2b:e2:d9:cb:56:16:f9:d8:c2:
8f:71:64:6b:8e:18:3d:af:44:83:8c:b8:51:88:3b:
a6:9b:7b:45:33:e5:9e:cd:9b:1f:fd:ef:b4:47:bb:
e8:a1:da:a4:35:92:90:3f:58:53:7e:8b:a1:b7:72:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:2F:D6:60:9F:E3:15:58:47:8E:FF:BF:F2:22:FC:49:6B:2E:21
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:4b:cb:d4:b5:21:af:12:59:83:05:52:33:0c:be:8b:81:
b9:e0:e7:b4:e2:93:c0:d7:76:21:a9:5d:ca:e0:1e:8f:ed:39:
fc:a6:0c:75:e2:ec:c1:48:5d:f2:f5:d4:77:63:ee:37:24:8e:
e5:b7:ce:f7:df:81:8b:7f:1d:f2:23:01:1c:a7:6a:6c:1f:2b:
99:b0:95:24:34:4b:59:bd:63:e7:7a:83:5e:a4:e3:f9:4f:30:
ae:6c:34:bd:46:0b:8d:03:6e:77:e4:9c:cc:cc:c2:6c:92:97:
97:c7:4e:e2:f0:e4:0e:07:6d:ad:0b:8d:69:9a:db:9f:ed:a5:
46:f6:8b:35:85:c7:ba:21:8e:c7:f6:19:2d:66:71:b6:ce:42:
63:d5:df:c1:ac:38:51:47:e2:77:90:30:e9:ea:15:59:7c:56:
06:9f:42:79:df:e4:5b:8c:f8:da:89:57:44:7d:81:c4:9d:13:
31:74:61:8f:ce:82:f8:dc:41:d2:13:38:90:29:d3:72:28:df:
f0:4b:4c:fd:41:1d:ab:96:8e:ae:46:68:d5:89:b5:b9:fe:44:
c4:73:d3:61:82:e5:a9:70:25:62:c8:a4:ed:ad:ca:fe:55:d0:
e0:70:2b:e3:07:8f:64:be:4a:85:1c:c2:46:26:c7:e2:e2:2b:
96:c8:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:15 2026 by rpki-client