Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: WxQwiKb5fNHotrWS9AYqVl3oXu2sfmi8iSLdUSATqP8=
Subject key identifier: 3E:C4:32:36:32:D9:65:4B:D1:02:0F:8F:D6:FB:B9:53:88:95:7C:52
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019FA9AC5B9B9FCFCF98C75A218DF19F66DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 17:01:12 +0000
Manifest this update: Tue 28 Jul 2026 17:01:12 +0000
Manifest next update: Wed 29 Jul 2026 17:01:12 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: cbeRLtUSVW7f+0hrGIP5b3ujZR1LcnBSsuY/06cnhys=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5b:9b:9f:cf:cf:98:c7:5a:21:8d:f1:9f:66:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jul 28 17:01:12 2026 GMT
Not After : Jul 29 17:01:12 2026 GMT
Subject: CN=3ec4323632d9654bd1020f8fd6fbb95388957c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:a5:a5:64:80:f8:c7:f2:81:ac:c6:9d:da:
59:82:ff:c2:1a:37:a3:61:4b:ea:b7:fb:26:82:cf:
4e:31:fe:53:8a:6c:ac:fe:3d:87:48:f9:36:a5:7e:
45:77:f2:98:7d:64:c0:2d:f3:36:b3:4c:eb:f9:bd:
75:9e:a5:46:e8:21:d3:2b:4b:c1:b1:b1:1b:76:92:
21:57:57:e5:db:d5:92:3d:35:24:b9:4b:cf:90:c9:
c1:93:16:66:77:25:c6:23:cb:9f:b6:dd:87:91:6f:
b8:fa:70:09:ea:49:e7:d2:05:8a:a1:4b:a2:e8:32:
3a:ff:ab:4e:2d:49:76:dc:8f:fd:53:14:c0:9d:92:
1e:ec:1f:8d:e4:6c:be:4c:25:25:db:f3:27:08:4c:
56:69:0a:d4:15:87:58:64:15:28:79:1f:b0:5a:71:
9d:46:29:ed:e2:40:bc:37:ad:80:0b:e3:3c:cc:49:
79:90:5c:bb:d1:0e:b1:98:1c:a0:58:3f:f5:54:95:
a2:8a:33:be:78:68:df:c7:9b:d7:a1:03:fb:af:c8:
93:05:c6:ff:41:bc:68:83:17:64:6d:06:cd:1d:b9:
19:b0:7f:da:af:0f:5a:cd:60:8a:90:49:6b:19:47:
25:64:9a:b9:69:9c:ad:c6:f3:6d:b6:15:1b:41:d3:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:32:36:32:D9:65:4B:D1:02:0F:8F:D6:FB:B9:53:88:95:7C:52
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6e:29:af:8e:8a:17:bf:01:30:87:86:7a:7e:bc:11:c1:b0:
ff:0b:72:ac:30:e1:73:83:0e:29:8f:ff:1b:f0:5c:c4:42:32:
6f:f1:f7:92:cf:40:1f:80:a1:12:c5:55:1f:d4:a9:23:a3:b1:
ac:81:85:8a:7e:d3:e5:c5:6c:53:78:f6:7d:45:18:8c:4a:e1:
db:2d:ad:5e:31:7a:d4:67:8a:80:81:c7:3c:8a:bf:a1:e1:12:
6e:31:33:84:62:b4:5c:54:c6:d2:9f:31:9f:48:50:17:f5:f9:
75:d4:1e:be:f4:b7:56:82:f0:60:fa:a3:25:9e:62:96:55:30:
fa:55:f3:a7:e4:e4:6a:0e:6c:1e:fc:4f:4e:ff:13:97:aa:a3:
ac:48:14:c0:d9:bd:d7:6f:25:00:6a:bf:b2:c1:2a:28:53:46:
3e:bb:fe:79:2f:9d:5e:aa:91:67:13:1a:12:ab:83:15:16:c4:
99:34:33:d8:e3:b4:56:6b:30:65:7f:9e:66:ad:59:c2:90:68:
60:f8:bf:7a:a8:09:c8:93:cd:f2:8f:03:97:95:dc:d6:03:e5:
41:26:2a:49:bc:42:f6:8b:36:e4:6e:27:15:9c:f5:40:34:ac:
9c:74:c8:e8:44:40:9a:06:74:7e:1e:2c:ff:6a:91:cc:86:21:
0b:e9:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:40 2026 by rpki-client