Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: D5O+hwjAae/yXT4NV6g3OL1kLKmQ1oB5chb03Z9W4xo=
Subject key identifier: 46:21:B3:58:80:1F:70:6A:74:B1:21:03:A2:26:2F:EA:3B:85:D6:93
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 019FAA5087C58BF452635B7547CEAE62BF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 20:00:32 +0000
Manifest this update: Tue 28 Jul 2026 20:00:32 +0000
Manifest next update: Wed 29 Jul 2026 20:00:32 +0000
Files and hashes: 1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: kVtjWUJRUeHv7mnP3DcU5YgrM5rw7PHWeBYqXvTqXc4=)
2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:87:c5:8b:f4:52:63:5b:75:47:ce:ae:62:bf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jul 28 20:00:32 2026 GMT
Not After : Jul 29 20:00:32 2026 GMT
Subject: CN=4621b358801f706a74b12103a2262fea3b85d693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:75:3f:bb:97:19:fc:34:49:9f:3d:04:fc:
8e:e2:1d:7e:30:1a:8c:fe:fc:47:f6:a8:0b:e1:0b:
4e:e8:6d:75:ee:59:8a:be:35:54:70:9e:1b:17:28:
45:7b:e2:33:14:d5:7e:eb:0c:0e:31:86:3b:00:34:
35:fb:6b:0c:8e:5c:93:3f:af:f3:a3:74:4c:cd:ca:
4d:a7:95:17:d8:bb:10:77:e5:35:a4:9c:38:33:8b:
be:df:49:7b:b3:3e:65:94:37:15:2b:66:3b:92:31:
14:fe:d9:2a:9b:07:af:8c:8a:50:7b:f3:03:6c:e4:
2a:e1:c1:dd:66:40:ab:a4:90:9e:48:a0:b2:41:e8:
a9:5d:4f:28:82:31:ca:7b:9c:3b:23:41:27:ae:23:
84:83:c8:f0:1c:fe:47:fd:e2:f3:3d:08:05:a0:ed:
eb:c2:72:d9:5a:f3:5a:17:51:ee:68:19:eb:b5:97:
8d:1b:b2:24:c4:b7:c4:9c:4b:c0:ee:ef:17:e1:92:
ab:66:64:e8:de:5c:f4:be:36:fd:1c:13:42:7e:94:
5d:e3:2b:b3:c6:c5:75:3e:5e:3c:c1:6b:52:6c:e9:
05:b9:04:7d:ef:22:63:86:c4:b1:84:1b:15:01:30:
e8:d6:ad:9c:96:a9:74:42:b2:62:0d:04:87:15:79:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:21:B3:58:80:1F:70:6A:74:B1:21:03:A2:26:2F:EA:3B:85:D6:93
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cf:0b:56:ee:5e:73:ea:ad:d5:cf:6f:f8:38:a4:c5:a2:43:
c1:36:d9:b1:01:e1:03:f7:ba:a2:12:aa:ca:f6:a5:44:62:4a:
84:e9:73:9e:c4:23:b8:a6:87:48:40:e8:c1:60:94:fa:5f:c5:
ac:3d:63:2e:75:f7:af:9b:10:c4:46:c4:6d:12:41:13:bf:e5:
2d:5b:39:e2:28:33:3d:fe:0e:82:db:94:36:a3:9b:10:cd:9d:
34:ba:62:25:06:3b:43:7a:9d:e2:3e:59:78:3b:cc:9b:4f:fd:
47:4e:59:35:77:7e:b3:82:8d:3e:05:2d:2c:9b:dc:4d:8f:be:
e1:02:d2:03:e1:0c:7b:75:d8:9c:b8:74:27:7d:f6:10:3e:fd:
2b:0b:b4:36:69:8a:ae:e3:e8:c3:98:56:3a:14:34:cf:b8:b2:
dd:e7:aa:0c:b1:54:17:18:c1:c1:84:1b:37:e3:b3:30:35:25:
c8:db:11:26:8d:40:74:8b:97:1d:62:e0:a6:37:56:2d:39:6a:
5a:10:88:eb:2a:98:23:68:ad:ef:0d:1e:43:cb:94:5a:bb:03:
9b:71:e5:0f:e5:ab:0d:1f:39:ac:ed:84:f4:a4:b5:91:44:e9:
82:38:71:f8:19:ee:82:5b:03:06:ce:b4:b4:ad:8e:b1:f4:6a:
6e:20:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:13 2026 by rpki-client