Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: Jo96I6C6uDT9KIKink0/ckSueVqLC6YQSrOh6uPbbbM=
Subject key identifier: 07:E4:B0:A3:AC:CF:3C:80:3C:63:1C:9E:9C:0A:11:01:AF:3D:0A:E4
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 019FAA19DF7644FCD5E3C4F809541B13E87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 10B4
Signing time: Tue 28 Jul 2026 19:00:49 +0000
Manifest this update: Tue 28 Jul 2026 19:00:49 +0000
Manifest next update: Wed 29 Jul 2026 19:00:49 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: UjNKyphBKfjT4EKexySiaKSTw9iiEkro4kSE8Xs1yas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:df:76:44:fc:d5:e3:c4:f8:09:54:1b:13:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Jul 28 19:00:49 2026 GMT
Not After : Jul 29 19:00:49 2026 GMT
Subject: CN=07e4b0a3accf3c803c631c9e9c0a1101af3d0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:2f:b7:30:eb:37:0a:14:41:ed:53:5f:b1:
e7:07:d9:92:9b:39:c3:10:34:60:d4:dc:a0:79:8e:
7e:4f:67:7f:44:81:99:1e:a8:e9:82:f8:c6:4c:60:
60:1a:a5:a9:70:bc:22:ac:49:6f:a4:d8:4b:4a:06:
44:6d:cf:e1:04:2f:35:95:5b:75:3a:96:b2:7f:9b:
fc:10:6b:09:12:8c:df:79:b4:0e:7e:29:d6:3a:b6:
e8:de:a7:62:25:0c:f1:cb:9f:57:c7:b5:ab:65:7a:
1e:d9:14:03:24:80:b0:2a:e0:3a:dc:a9:98:a3:40:
01:57:a7:60:d8:2c:99:15:23:30:b3:ba:17:dc:9b:
bb:21:d3:84:3a:3a:96:66:b3:18:9e:51:13:34:60:
e6:d5:29:5f:fc:eb:3e:6a:68:48:52:96:30:af:a3:
cf:57:fe:1e:e6:32:a9:c6:53:85:01:db:39:2c:fc:
72:86:7c:dd:6b:19:65:2d:f3:3d:2f:5c:70:b2:7e:
6a:83:ed:3f:02:10:a5:31:a2:c3:3c:0c:89:0a:6a:
21:d4:5c:98:1f:ae:00:ac:7c:59:46:36:ca:4b:4b:
51:41:5b:15:22:cc:1e:3d:6b:41:34:1b:ae:02:49:
37:ec:c2:1b:e2:cc:a4:b2:ea:06:c7:d8:0f:bf:73:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E4:B0:A3:AC:CF:3C:80:3C:63:1C:9E:9C:0A:11:01:AF:3D:0A:E4
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:55:53:f8:60:1a:2d:ff:54:a3:99:f4:4b:bc:a9:cb:89:ba:
b8:f5:1d:fc:68:87:33:6f:53:fc:fb:64:cc:c5:b4:28:a0:6b:
c9:0f:21:78:2c:4f:62:7f:3a:b0:e4:60:29:79:db:b3:00:d5:
97:cc:18:04:ea:48:59:5f:4f:10:1f:61:00:ab:e5:fa:da:56:
be:65:b9:1c:6d:f3:0c:e1:35:3e:3d:75:db:6c:75:35:3b:36:
03:ce:78:0f:71:2f:a0:3c:55:75:01:05:39:88:4c:7a:7f:5f:
65:a4:7e:9b:70:ea:5f:90:0e:91:c8:13:b1:b1:38:de:ae:dc:
ec:a7:8c:ef:a3:37:95:60:bc:49:1d:d3:ac:a6:3c:99:46:f0:
e6:37:bb:71:65:98:e8:f9:c6:f6:55:76:d0:c1:df:48:38:33:
be:5d:24:b2:e3:6a:33:c2:38:3d:49:18:cb:b2:62:94:f9:8c:
d0:31:55:e3:0f:67:45:66:33:95:49:35:ba:1f:c9:75:a5:3f:
74:43:7f:a2:8d:c7:9e:57:cd:55:dc:d7:6a:62:68:a3:d1:c4:
21:6a:36:d9:1c:5d:9f:90:f6:a5:3e:89:18:e0:43:28:85:00:
4a:91:63:95:fd:66:0e:2e:3b:91:a3:d4:f8:71:4d:c1:3b:48:
b0:8b:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:44 2026 by rpki-client