Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: 9wem33Jksmy+1g6QcakY/ckqQWidzkrQ9e9dAXX8Kiw=
Subject key identifier: 05:B2:BC:B2:2A:35:29:8A:0C:71:64:1B:4B:63:4A:36:1B:C3:01:2D
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019FA9E2A0DDB6D3AAA93EE709F4B11CB512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: VxrDvN+njlORm118TNg6WMvRiiGip6P7wuEKseT/+uw=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a0:dd:b6:d3:aa:a9:3e:e7:09:f4:b1:1c:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=05b2bcb22a35298a0c71641b4b634a361bc3012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:f7:73:d7:a2:ed:fd:10:90:52:64:85:a3:
14:7a:0d:41:52:80:64:de:6a:ca:22:e2:91:ca:99:
a4:3a:d9:9c:9b:0a:1f:f8:b3:fb:88:f0:c1:a8:6b:
71:a1:b9:ec:2b:41:04:bc:b7:b1:d6:a0:00:2d:5f:
a0:bd:dc:e8:54:d0:a6:06:68:2a:6e:8d:36:4a:3d:
75:c5:31:4c:8a:36:d0:67:d1:61:3c:40:80:b4:5f:
86:75:77:94:63:68:50:e0:fa:db:ac:71:7c:48:31:
e7:2b:41:a9:94:40:98:20:ab:ab:34:c3:d7:cd:39:
d0:e6:23:30:8a:9b:94:4e:e6:5e:05:7a:e3:65:60:
76:5c:b3:04:1d:10:4d:24:fe:63:ec:51:5a:50:3f:
91:15:3e:11:b5:cd:7f:40:3a:4f:0a:7e:74:1a:7f:
8a:58:cc:08:ae:71:6b:08:d1:83:08:cb:d7:b7:bf:
6e:88:66:5b:26:d5:86:f2:03:45:f3:78:a5:f1:cf:
c2:40:37:49:9d:c3:3d:62:59:73:3a:7d:6a:d8:e1:
03:8f:3d:25:3b:0a:21:0b:9d:0e:ad:5a:77:88:c6:
af:54:b3:c8:49:75:d1:88:d8:e5:bd:40:05:77:f2:
1b:4c:e8:97:47:c4:25:16:19:19:ef:be:ca:20:c8:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:BC:B2:2A:35:29:8A:0C:71:64:1B:4B:63:4A:36:1B:C3:01:2D
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:bc:7e:df:e6:de:08:63:8d:57:2a:89:e8:cf:19:d0:0b:
5f:04:7e:c7:19:74:36:17:88:67:ba:1c:f8:79:5a:6b:87:6b:
77:e6:1b:03:fb:bf:6d:2a:53:1b:bb:1f:34:a4:69:a1:17:02:
e4:7c:87:f7:06:c2:74:cb:cb:f3:2f:38:d6:6e:05:87:9a:55:
d3:4f:db:b7:3f:76:d2:98:10:2b:f0:b6:b6:e4:7c:c4:02:e0:
70:03:b2:3d:64:b9:84:5c:87:ba:c2:fe:58:01:8e:83:db:08:
7e:d7:3e:4a:fa:8f:70:89:83:f9:9b:16:ef:33:08:31:d9:d3:
10:d5:a5:42:5d:c1:06:8d:6f:ea:56:10:14:f1:bc:c4:8f:cd:
96:19:79:bf:2e:de:79:8c:b8:13:af:c6:f0:05:5e:f5:4b:75:
45:38:6d:33:0e:74:7d:87:62:f3:89:06:5c:5d:d4:ce:be:9e:
71:19:c8:b8:90:19:9a:9c:b3:0e:dc:09:f0:ec:fc:88:48:a3:
be:d3:55:46:b1:d0:78:88:36:d3:84:4b:5d:03:6a:a4:cd:31:
7b:b0:ab:9c:ca:f6:31:2d:97:3b:44:53:a8:f8:00:19:5c:db:
f2:4a:d4:f3:d2:1d:5f:b9:82:87:a3:29:eb:5b:2e:af:58:2b:
ea:84:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:36 2026 by rpki-client