Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: 09kBBvKPhb8X/4p83PAba3pukCwXAc6wFDarcowYpck=
Subject key identifier: C8:15:5E:FC:D0:3A:C0:9D:70:96:2F:E6:AD:77:1B:63:BF:55:44:F4
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 019FAA88A8EB5A2EF7D8F045D53312406422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 21:01:50 +0000
Manifest this update: Tue 28 Jul 2026 21:01:50 +0000
Manifest next update: Wed 29 Jul 2026 21:01:50 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: 5m8nVvuBxz+zP1EvB0uAm3C1S5rD6mzageI//0A0Nz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a8:eb:5a:2e:f7:d8:f0:45:d5:33:12:40:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Jul 28 21:01:50 2026 GMT
Not After : Jul 29 21:01:50 2026 GMT
Subject: CN=c8155efcd03ac09d70962fe6ad771b63bf5544f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:3b:3b:b5:08:36:1e:70:7d:30:fb:67:3e:
10:67:71:d2:94:55:92:7a:0d:af:d7:51:1b:fe:5f:
2d:c8:6a:3a:68:ca:87:f1:08:84:da:a2:28:1c:86:
6b:e3:7c:38:93:49:2c:cd:a3:6f:25:2e:67:1c:ef:
71:61:3e:eb:28:80:6e:f5:78:66:2e:ec:a9:06:f8:
d0:94:76:07:ec:f3:71:02:0e:23:0b:03:52:1c:27:
3d:b6:8c:e0:10:83:b3:f1:4f:a9:28:28:60:40:8f:
60:1c:01:a9:65:41:f8:92:3f:7e:50:70:c3:3f:ff:
72:2b:1c:cb:79:36:d4:35:f5:13:f5:ef:82:f8:32:
60:81:b4:93:f5:ca:67:ea:9b:67:fc:a5:f6:a0:42:
bd:21:96:13:2e:43:4d:42:95:27:3d:48:67:4b:6b:
1c:a3:e2:b2:17:c5:40:17:12:42:d1:05:e4:64:61:
21:3f:a6:3d:58:30:44:1e:8b:46:df:f7:e9:72:81:
ba:c0:d6:0c:f4:51:12:d2:d5:a5:d3:34:c4:02:a7:
19:c9:63:59:54:d2:bf:3f:45:7f:02:a2:7e:13:a1:
12:4d:de:e7:7e:42:15:d1:58:07:04:55:be:e5:d5:
7b:b5:e1:68:08:63:58:bc:5f:f7:ae:5c:65:dc:12:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:5E:FC:D0:3A:C0:9D:70:96:2F:E6:AD:77:1B:63:BF:55:44:F4
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:8a:60:ac:a9:e2:ef:65:bb:80:dc:8b:11:9e:ea:1e:0c:
81:47:32:1b:a1:aa:ed:92:d6:9e:70:7f:f0:1d:51:6d:30:00:
f6:b7:84:d9:4f:12:23:f8:80:af:a4:36:60:58:7f:3d:9f:55:
cc:70:eb:4b:46:85:1f:24:6e:de:c4:e9:ed:71:f6:c5:c3:45:
33:94:50:82:51:3c:d6:8d:ed:2d:5d:6b:dd:2c:96:9f:70:fd:
f3:ff:ef:41:a9:f6:d6:41:31:e1:0c:d8:fc:b6:ca:9c:f8:c0:
4f:ca:59:e5:ef:5f:66:c1:40:5f:be:b6:00:ea:72:a2:b1:85:
9b:bf:93:a5:c9:ab:4a:9f:af:51:6d:ff:22:99:ba:96:fc:f7:
d9:af:53:38:bb:75:9c:f3:dd:9d:c1:3e:62:b7:59:ca:9c:b7:
c6:0e:e5:95:0c:7c:1b:88:37:6e:06:6f:36:5b:5a:87:e5:f4:
21:6b:7f:bc:6e:2b:2b:94:bb:fb:4c:34:83:7a:b5:dd:0b:fb:
37:df:d7:ff:8b:3a:fb:e7:8d:fa:eb:6c:a1:2a:94:12:7d:ca:
4e:39:e5:67:09:50:77:ff:a4:76:b9:ea:84:37:c3:05:47:fd:
c8:c6:83:e3:b7:aa:a4:ce:36:9a:74:a1:94:a1:f9:0e:ac:23:
e2:3d:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:24 2026 by rpki-client