Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: pWsdDYr1TSOSh99UFjBBynEY9pLjt7vJQRuYaXpUxRM=
Subject key identifier: C8:1F:50:AA:44:99:00:95:C0:C3:E4:54:AD:B0:5A:26:F4:F5:5E:2A
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019FAA50CD20B416EFB713DBC25D62D04A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 20:00:49 +0000
Manifest this update: Tue 28 Jul 2026 20:00:49 +0000
Manifest next update: Wed 29 Jul 2026 20:00:49 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: I+LyDXtD5omvcSHkZh7E/PJYw0hJbeizZFOdDT4g5aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:cd:20:b4:16:ef:b7:13:db:c2:5d:62:d0:4a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Jul 28 20:00:49 2026 GMT
Not After : Jul 29 20:00:49 2026 GMT
Subject: CN=c81f50aa44990095c0c3e454adb05a26f4f55e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:db:cf:c2:60:2b:15:b2:12:e8:c0:0f:f1:
66:d1:39:b5:69:b4:4f:d0:60:71:31:97:35:b4:90:
53:df:fd:55:03:a8:ae:37:90:25:2f:ca:e9:03:34:
74:6d:e4:a2:37:40:42:bd:60:ef:86:fd:36:38:0b:
44:aa:ca:21:58:8d:ae:0a:f5:38:32:a9:d0:17:fc:
b1:4c:e1:91:8f:e3:b0:97:5f:66:02:27:d8:0b:ca:
5d:cd:04:c5:55:77:bf:8f:0f:08:cf:f3:22:61:04:
f5:51:59:9d:27:54:9a:4b:49:2e:80:e5:f5:3f:18:
02:e9:af:61:81:68:3a:20:25:82:6c:45:34:a3:2d:
08:2f:3b:49:a7:e4:cf:da:20:0b:06:41:b4:e7:46:
c9:b8:00:cf:71:f6:c4:87:94:89:f6:83:59:40:7f:
0a:99:94:cf:7f:c7:06:bd:80:a2:82:a7:49:c9:51:
93:ed:ae:0f:6a:59:8b:a2:76:a8:f6:34:fb:07:a9:
38:c1:0a:51:e3:ff:ba:a8:7d:2d:f6:1a:0d:4b:a9:
08:b1:a1:e2:a4:53:7a:e1:c6:77:3f:47:2e:72:53:
6d:89:d0:3c:8e:68:4f:bd:14:b8:6c:78:98:29:c2:
21:34:d7:aa:cb:c5:06:3e:3b:13:20:f7:67:66:11:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:50:AA:44:99:00:95:C0:C3:E4:54:AD:B0:5A:26:F4:F5:5E:2A
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8b:f2:50:22:3e:db:7e:e1:15:80:ac:1d:49:1c:39:e1:b3:
6a:ae:8f:dc:04:7b:61:66:a0:cb:cb:7f:85:d4:cf:27:93:72:
36:60:a4:08:ae:2e:ce:99:0d:3b:87:4e:5c:25:fc:46:11:64:
07:5a:cc:3a:bb:0b:34:4b:b1:35:79:62:73:1e:34:a8:cf:d1:
75:c7:c0:44:16:d6:c7:ae:ec:88:46:36:a4:dc:1b:56:2c:28:
e0:ea:54:6a:03:18:e6:0e:dd:60:16:18:b3:0d:a4:1a:b9:45:
ef:94:fb:d8:a5:c0:1c:72:4d:3f:98:b7:20:10:8f:a1:84:df:
e8:cb:f9:23:de:58:08:01:1a:fc:b9:b7:b4:9e:cf:3e:c7:77:
15:a2:08:eb:54:53:f9:18:82:4d:2d:d1:96:56:8b:ce:ad:d7:
88:03:df:3c:f6:c2:1e:d4:6f:74:15:e7:f8:26:cd:af:db:87:
17:7a:83:1d:ee:fa:c7:05:07:a6:ab:f6:6b:96:b8:b2:de:ab:
df:c5:7f:bd:e3:0c:1c:6b:1a:ff:81:ad:6c:43:7d:55:46:e3:
f8:92:1d:ce:ae:58:e4:50:28:c7:30:6c:8b:1e:37:0e:b9:a3:
4b:34:2e:35:18:a9:12:ef:2d:96:e0:97:9a:60:d4:29:0d:3c:
32:fe:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:27 2026 by rpki-client