Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: XKyfXpRflnHL3T+5ollNHXPXvjrCaOB3CN4vQMd3x44=
Subject key identifier: B9:C0:00:87:D8:3A:4C:6A:26:CA:8A:6D:1A:D0:F2:82:70:D2:23:A0
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019FAA8842D95C9C4F51C033CEABF03E3F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 21:01:24 +0000
Manifest this update: Tue 28 Jul 2026 21:01:24 +0000
Manifest next update: Wed 29 Jul 2026 21:01:24 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: m504y6Z5gH2dLNrc/hmn4Hjzhc+vQsCnSECmBSelC70=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:42:d9:5c:9c:4f:51:c0:33:ce:ab:f0:3e:3f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jul 28 21:01:24 2026 GMT
Not After : Jul 29 21:01:24 2026 GMT
Subject: CN=b9c00087d83a4c6a26ca8a6d1ad0f28270d223a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:ad:af:5c:d1:c2:f0:9b:f1:44:00:25:31:
a0:25:59:64:00:ad:2b:20:03:0d:e7:36:35:c4:b2:
ba:d8:39:81:18:89:65:6d:6c:63:c3:99:88:83:c2:
57:0d:28:40:83:01:a1:19:90:21:66:c8:26:be:6a:
47:77:bb:7f:cb:1c:f6:00:d4:20:36:bc:ed:74:8f:
c0:03:d4:9b:50:24:d9:61:8f:e3:04:8a:e8:56:0b:
d7:95:66:21:97:1e:98:c6:36:65:ae:69:60:ef:cd:
7a:f7:e4:5a:05:42:ec:0a:93:2d:86:ee:e2:79:c6:
72:48:39:0c:00:50:13:f7:83:97:52:38:21:44:9b:
59:30:a6:d2:5c:73:2d:b2:d3:3e:64:fc:3c:17:01:
95:8c:05:1e:f2:08:5c:e7:3b:4f:0d:95:97:bd:d4:
ba:a6:77:91:d7:00:26:4e:21:3b:66:61:a5:a2:64:
80:ee:ec:08:b1:10:c6:40:2e:5f:48:01:cd:ae:eb:
66:46:37:34:f7:25:99:9e:ab:04:b6:b7:f6:a4:5c:
90:57:5d:91:df:4e:4b:b8:17:2a:56:2d:50:57:b4:
fc:7d:f1:d1:8f:45:1c:0b:20:a5:8d:06:e9:a1:b6:
01:ae:28:c5:97:8d:ea:a5:d0:2e:ff:f3:08:3a:9a:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:00:87:D8:3A:4C:6A:26:CA:8A:6D:1A:D0:F2:82:70:D2:23:A0
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:05:3e:21:b3:b4:17:d2:95:7a:09:a6:92:71:35:67:c2:
09:cc:0a:fd:94:65:f9:10:a6:3e:ea:55:ab:91:60:f8:8d:8d:
cb:f8:b1:04:c9:3d:72:a1:b1:dc:cd:18:a9:87:7c:a7:0e:73:
37:ae:47:31:c9:ab:14:89:62:28:62:fa:b2:7a:8b:11:cc:41:
1c:08:28:84:e5:00:54:f1:00:fd:37:58:4f:c0:b0:d9:2b:30:
ad:d7:81:7d:7c:7f:58:c6:97:c9:68:85:41:84:ea:61:e0:f5:
0e:4d:45:ae:86:44:8d:7c:ab:f4:b2:57:21:e3:e1:67:26:24:
65:51:60:1c:48:2e:d8:1b:7f:bf:06:63:e3:6f:ac:aa:ab:41:
e2:65:bd:af:e2:ef:ec:3b:06:29:d3:55:da:5d:8b:44:1b:6b:
f6:c6:b3:73:58:63:2e:19:25:ab:9c:8c:c7:af:ba:c6:27:fe:
33:ed:1a:b1:37:fc:11:ea:f2:4b:02:e8:e0:da:15:22:3a:71:
f6:27:38:13:68:8c:e7:25:71:30:59:62:0a:dc:dc:57:a7:e4:
97:33:ac:8e:13:47:2b:72:c2:0b:fa:6d:44:b1:84:23:1d:3c:
73:90:e8:58:ff:c6:c9:82:13:e3:9e:18:5a:96:8a:50:11:63:
ed:3e:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:14 2026 by rpki-client