Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: f7mr+rRav5MaNCTX3bk+hm+mXEL2DyZlUoT1hBa8THg=
Subject key identifier: 7C:CB:AD:1D:F0:D7:75:B4:E2:0D:F9:E6:5A:9B:50:33:4A:84:AF:AE
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019FA89A3E70976A9996F4176BCB874C2C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:01:48 +0000
Manifest this update: Tue 28 Jul 2026 12:01:48 +0000
Manifest next update: Wed 29 Jul 2026 12:01:48 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: 5zyiN/EBJFRZk5j7nNiAGR3PsOEWFAEMENdtB/O/Ajk=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3e:70:97:6a:99:96:f4:17:6b:cb:87:4c:2c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jul 28 12:01:48 2026 GMT
Not After : Jul 29 12:01:48 2026 GMT
Subject: CN=7ccbad1df0d775b4e20df9e65a9b50334a84afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:b5:56:71:47:fe:0a:7f:78:8f:19:ec:ba:
4f:0f:4c:49:67:c3:57:23:a4:1a:b1:85:35:c3:9b:
1a:1c:84:6d:b3:0f:89:41:a8:03:19:f8:a2:0c:04:
ff:c4:34:fd:73:fd:60:41:d6:be:78:f4:c9:a6:33:
d7:47:9f:26:9f:b0:5c:83:c4:a9:e1:2b:ed:e5:11:
1a:cd:6d:c9:db:30:6b:d1:81:cd:34:46:73:6a:03:
eb:92:06:52:fa:f8:17:37:da:22:19:bd:66:de:f9:
1b:b0:76:89:84:e3:2d:7d:92:c3:05:35:41:af:59:
ff:ad:7c:bb:73:a6:9f:4b:f0:fa:cf:27:72:5e:e6:
e0:f4:a3:99:f3:80:6e:db:20:e8:ea:15:68:46:70:
b8:bd:4e:9c:8b:41:eb:30:6a:b9:85:59:f8:ea:6c:
21:bb:f1:63:fc:c9:0f:3e:3e:05:83:ec:1b:2c:a7:
8a:26:1f:7a:89:c1:d1:60:da:27:c3:63:47:12:c4:
16:35:00:3b:3e:a9:30:1f:bd:3d:c8:57:b9:93:79:
7b:73:48:5b:eb:92:c0:d9:71:df:58:ea:16:77:35:
f8:e1:8e:e5:71:e6:a8:1b:6d:e5:7d:f6:5f:2f:c5:
7d:e7:bc:71:28:44:64:e3:38:21:01:27:53:92:95:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:AD:1D:F0:D7:75:B4:E2:0D:F9:E6:5A:9B:50:33:4A:84:AF:AE
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0e:db:f5:6d:97:20:07:c3:aa:3d:3a:c6:24:12:22:00:3b:
31:1b:89:fc:1d:24:e1:36:2b:98:93:7e:f1:3d:5b:94:a2:d8:
00:6d:90:2b:2a:d1:e2:bc:52:9d:84:25:29:3a:62:74:0d:69:
f8:c0:bd:73:fe:3d:e7:cc:b4:d1:01:b0:46:c0:85:77:ea:ba:
24:1c:f7:b4:3d:47:16:bc:96:da:99:70:75:4a:06:f8:89:34:
a6:0c:ad:49:df:a2:dc:56:21:7c:1b:c5:aa:8d:ab:0e:ca:60:
91:c2:8e:06:fc:85:df:24:0d:77:32:08:90:28:b5:87:6e:55:
f7:83:f7:6b:00:f0:eb:77:e9:0a:1e:f7:21:e7:17:0d:6a:22:
b4:bc:41:9d:86:46:b8:84:9f:82:81:28:bf:e9:df:0c:af:31:
92:c9:a7:98:cb:47:a0:04:37:bf:16:85:0f:20:29:e9:52:5d:
c6:52:36:c1:b2:b9:54:5e:14:d8:ad:30:e9:49:38:cd:42:6a:
98:bc:a6:13:c0:35:c2:a8:e2:e3:e8:d8:04:f7:54:66:7b:c8:
d4:2c:24:14:97:ee:4a:a3:7d:47:29:b5:6f:03:15:c7:3d:ce:
6b:5f:3e:e8:86:f4:4d:6b:9b:d6:aa:5e:52:eb:7b:5c:2d:ac:
fd:79:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:39 2026 by rpki-client